Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
File:                     9D38422B911C6A812AD0D3598391A062B2B872FD.mft (raw, json)
Hash identifier:          +C7i0ARTtUKWfmvFll531DwGNEQNU7u9TfQj2tDcqsU=
Subject key identifier:   4F:36:73:46:23:28:CE:65:D7:0D:A1:D8:9A:5A:F7:67:38:90:CB:8C
Authority key identifier: 9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD
Certificate issuer:       /CN=9D38422B911C6A812AD0D3598391A062B2B872FD
Certificate serial:       3BEB7CD466178C3825E10F05B8DB45B096ED1E52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
Manifest number:          50
Signing time:             Tue 07 Apr 2026 18:21:57 +0000
Manifest this update:     Tue 07 Apr 2026 18:16:57 +0000
Manifest next update:     Wed 08 Apr 2026 19:36:57 +0000
Files and hashes:         1: 3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa (hash: SmKw5ghX5A3BY7LfeffC0O1mEWfFvxe5e9TkGH6vQOc=)
                          2: 34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa (hash: noMJ+YMXgx/Oad1w9Gic+LzyQReBr8aIFAu1hX8OPg4=)
                          3: 34352e372e302e302f32322d3234203d3e20323637333838.roa (hash: pRqIS97XQzTkWPLfKQTMdHjgLlJptdxuoCK/zNVPItE=)
                          4: 9D38422B911C6A812AD0D3598391A062B2B872FD.crl (hash: yTel+PfsJoBFxVBAqHnnh+9h+8nzy8nYKoGXGIhWesU=)
                          5: 34352e3233342e3234382e302f32322d3234203d3e20323637333838.roa (hash: KTCfbPa1IQvcmi9u67/Wr1Wt4EqvWWiGFgnElt/8xhM=)
                          6: 34352e342e3135362e302f32322d3234203d3e20323637333838.roa (hash: vu9x64qm/S0P5PxBd+Txmcw6QslPxgfUXJ4Cq8Q2uk0=)
                          7: 3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa (hash: A7LrFlN/0lrqZ1RJBe9SMRUDvQRIszFDDEU7V86K/Oo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:7c:d4:66:17:8c:38:25:e1:0f:05:b8:db:45:b0:96:ed:1e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D38422B911C6A812AD0D3598391A062B2B872FD
        Validity
            Not Before: Apr  7 18:16:57 2026 GMT
            Not After : Apr  8 19:36:57 2026 GMT
        Subject: CN=4F3673462328CE65D70DA1D89A5AF7673890CB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:42:cd:25:86:c3:7a:2c:44:16:1d:14:ae:
                    8f:9c:ad:dc:7d:b9:e7:db:13:60:ef:ea:a2:c2:69:
                    28:d8:b0:9d:29:39:4f:1d:b5:52:c3:4e:cb:d8:86:
                    be:0b:2f:28:3f:cd:9c:95:6d:7b:d8:17:19:bb:17:
                    03:ef:ea:af:83:73:7e:16:e2:7a:c2:ec:39:7c:76:
                    1d:37:24:54:c6:51:75:ad:7f:d6:af:b7:3d:8c:c7:
                    e9:41:5e:5f:56:1d:d1:db:88:92:c5:a2:87:9f:92:
                    89:f9:28:ec:47:8c:a0:e0:7e:d3:eb:63:b2:8d:18:
                    01:dc:6d:7e:d9:a4:de:a4:be:23:5a:a9:66:87:c5:
                    9a:6a:15:0b:15:63:41:99:82:42:a4:71:25:04:9e:
                    40:ff:57:36:67:19:1a:9e:d7:92:a8:a2:a1:f7:8c:
                    c5:08:2e:32:3a:40:a7:d8:df:c6:e3:55:ed:f7:0e:
                    39:96:5c:61:8e:85:9b:f3:90:da:55:72:83:8e:a8:
                    db:07:f6:a7:a9:aa:04:e9:58:89:d4:d0:79:43:a6:
                    7f:cd:eb:51:c3:a7:f5:50:08:fc:6e:b2:33:6c:4e:
                    2c:14:20:6a:28:71:66:0e:ac:cf:19:36:1e:e5:fa:
                    4f:69:f0:fd:18:70:87:fe:53:0d:11:3c:2f:53:7b:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:36:73:46:23:28:CE:65:D7:0D:A1:D8:9A:5A:F7:67:38:90:CB:8C
            X509v3 Authority Key Identifier:
                keyid:9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:47:46:b0:28:7e:d3:0a:50:c1:ae:5a:13:03:9b:ce:78:44:
         ea:e2:96:ab:e2:04:27:28:9e:fc:ff:96:6f:69:36:05:a3:5a:
         b4:2b:0b:b4:5c:31:ae:6a:c2:c0:14:f6:f2:a1:df:9c:ea:13:
         f0:e3:9a:86:61:e2:73:6a:0f:37:80:3a:20:70:da:59:0d:26:
         ae:2f:59:95:4a:04:56:a7:bb:56:a1:ab:bb:fc:1e:8b:1e:0e:
         78:fe:7c:9a:5e:1a:9c:57:6c:4a:cb:1e:47:33:33:7d:36:23:
         2c:89:91:b5:cc:14:d9:62:b6:db:79:b3:d7:48:78:df:42:8e:
         13:fd:3b:bb:25:01:51:58:3b:0c:68:53:49:bf:7a:84:81:5b:
         18:07:5d:7f:de:58:0c:68:10:cc:61:f8:8c:bf:59:ad:d7:23:
         31:0c:3b:6d:64:44:2a:d9:ca:f8:a7:c2:8d:40:44:7b:71:da:
         87:3e:9c:2c:90:06:20:37:e7:3e:bd:40:f7:bb:ba:93:3c:56:
         61:27:6c:2a:b9:17:7c:62:c3:ad:a4:8c:c2:2e:25:d0:00:96:
         d8:c0:8a:f5:c6:a1:0f:ab:fc:ba:72:95:a1:fd:6c:19:18:37:
         35:6f:b5:74:b4:c9:67:f0:d2:c0:53:72:43:78:4c:39:2c:ac:
         c8:c0:2a:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO+t81GYXjDgl4Q8FuNtFsJbtHlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzODQyMkI5MTFDNkE4MTJBRDBEMzU5ODM5MUEwNjJC
MkI4NzJGRDAeFw0yNjA0MDcxODE2NTdaFw0yNjA0MDgxOTM2NTdaMDMxMTAvBgNV
BAMTKDRGMzY3MzQ2MjMyOENFNjVENzBEQTFEODlBNUFGNzY3Mzg5MENCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaELNJYbDeixEFh0Uro+crdx9
uefbE2Dv6qLCaSjYsJ0pOU8dtVLDTsvYhr4LLyg/zZyVbXvYFxm7FwPv6q+Dc34W
4nrC7Dl8dh03JFTGUXWtf9avtz2Mx+lBXl9WHdHbiJLFooefkon5KOxHjKDgftPr
Y7KNGAHcbX7ZpN6kviNaqWaHxZpqFQsVY0GZgkKkcSUEnkD/VzZnGRqe15KooqH3
jMUILjI6QKfY38bjVe33DjmWXGGOhZvzkNpVcoOOqNsH9qepqgTpWInU0HlDpn/N
61HDp/VQCPxusjNsTiwUIGoocWYOrM8ZNh7l+k9p8P0YcIf+Uw0RPC9Te8/LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTzZzRiMozmXXDaHYmlr3ZziQy4wwHwYDVR0j
BBgwFoAUnThCK5EcaoEq0NNZg5GgYrK4cv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC85RDM4NDIyQjkxMUM2QTgxMkFEMEQzNTk4MzkxQTA2MkIyQjg3MkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMzg0MjJCOTExQzZBODEy
QUQwRDM1OTgzOTFBMDYyQjJCODcyRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRHN2MvMC85
RDM4NDIyQjkxMUM2QTgxMkFEMEQzNTk4MzkxQTA2MkIyQjg3MkZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO0dGsCh+0wpQwa5aEwObznhE6uKWq+IEJyie/P+Wb2k2BaNatCsLtFwxrmrC
wBT28qHfnOoT8OOahmHic2oPN4A6IHDaWQ0mri9ZlUoEVqe7VqGru/weix4OeP58
ml4anFdsSsseRzMzfTYjLImRtcwU2WK223mz10h430KOE/07uyUBUVg7DGhTSb96
hIFbGAddf95YDGgQzGH4jL9ZrdcjMQw7bWREKtnK+KfCjUBEe3Hahz6cLJAGIDfn
Pr1A97u6kzxWYSdsKrkXfGLDraSMwi4l0ACW2MCK9cahD6v8unKVof1sGRg3NW+1
dLTJZ/DSwFNyQ3hMOSysyMAqdg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 11:14:40 2026 by rpki-client