Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
File:                     484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json)
Hash identifier:          aSxI2U32YBSvpWQXfEfKgyuEu57zEKdFoPDMO5WwNLs=
Subject key identifier:   BF:0C:E0:71:99:DA:BB:61:99:40:80:74:38:DB:8B:69:CE:D9:10:C6
Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
Certificate issuer:       /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
Certificate serial:       25A1690667C37014AB2A670E8C9B9B2A3D33B6B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
Manifest number:          03CD
Signing time:             Wed 08 Apr 2026 22:08:19 +0000
Manifest this update:     Wed 08 Apr 2026 22:03:19 +0000
Manifest next update:     Thu 09 Apr 2026 23:47:19 +0000
Files and hashes:         1: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: 4QNedsIKI0dD5L83U3pZcHnYToMMzlF+oOckIe5/oWg=)
                          2: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: xAe3XTxY25UukhwczxS7BjlMTTRYNSRpuQxHnXWHfEY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl
                          rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a1:69:06:67:c3:70:14:ab:2a:67:0e:8c:9b:9b:2a:3d:33:b6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
        Validity
            Not Before: Apr  8 22:03:19 2026 GMT
            Not After : Apr  9 23:47:19 2026 GMT
        Subject: CN=BF0CE07199DABB619940807438DB8B69CED910C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:33:08:f4:5b:b2:28:9f:69:e0:bb:4f:c8:
                    f4:1e:46:f6:c3:ae:73:c3:ee:d4:85:92:fd:4c:3d:
                    d1:f0:54:97:4c:f3:be:b0:40:be:a6:ea:d6:72:32:
                    f0:d2:78:5a:bf:c4:13:80:ca:6f:37:ff:e8:a6:09:
                    ba:16:ab:92:ac:65:2e:7b:28:d1:94:da:73:78:d5:
                    a6:80:79:cc:58:e4:d3:cc:e0:0b:0b:89:f1:d7:d4:
                    2a:bb:30:dc:f7:f3:60:3f:94:78:d6:01:13:93:2f:
                    fd:dd:76:45:4d:7d:eb:3e:5e:c0:60:83:90:73:14:
                    31:c2:1f:c9:23:77:63:df:cb:76:a5:66:15:74:52:
                    72:71:d8:90:55:af:a7:c2:d1:38:9e:93:92:8f:79:
                    f6:b4:fa:86:77:50:86:2a:ae:3f:e0:39:b7:12:60:
                    8d:d8:5b:73:29:f4:82:c7:8d:70:34:d5:1a:27:c1:
                    85:23:bd:59:df:5d:44:fc:46:22:75:58:ad:aa:87:
                    d3:db:24:be:0d:7b:8a:91:05:12:e8:d0:b6:de:32:
                    60:1e:b9:a7:f4:37:17:c1:1d:04:fa:95:76:94:3a:
                    54:98:aa:ac:1b:58:a3:48:66:1e:e1:57:ac:79:75:
                    2e:7c:8b:7c:5a:85:b7:06:b3:19:b9:78:66:f4:41:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:E0:71:99:DA:BB:61:99:40:80:74:38:DB:8B:69:CE:D9:10:C6
            X509v3 Authority Key Identifier:
                keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bb:b9:3c:85:bc:db:e1:15:32:0a:04:c2:fc:38:8c:7c:96:
         93:d4:39:26:ad:72:77:70:cc:45:79:27:b5:20:a0:81:5c:95:
         75:13:ce:b4:e0:80:7f:33:ff:74:e4:16:bf:fa:ff:18:11:98:
         4c:47:fc:0e:44:6f:2e:97:d8:35:fb:3b:62:ce:64:65:67:fc:
         af:15:7a:7e:b7:35:d3:1c:b1:80:23:cd:cc:c2:5d:e8:b2:94:
         c3:f9:59:bb:73:25:69:7f:6f:7b:79:2e:dc:56:e7:32:83:58:
         b3:50:2c:36:bf:a1:f3:a9:51:ab:c7:42:ab:bd:c5:d5:03:51:
         a4:57:eb:ba:ea:39:01:4c:71:c2:36:b6:39:92:ec:c9:d0:f8:
         97:4b:20:10:13:44:c1:bd:b3:48:f1:1b:25:4f:65:ec:45:60:
         7c:3b:2f:bd:6a:15:bf:55:79:de:9e:e7:af:c8:d8:38:d5:f5:
         d9:ec:b4:a1:b2:cc:20:ac:50:80:11:02:7e:9f:2f:c6:9d:34:
         2e:e3:36:5b:4e:c3:b7:80:d0:d5:53:f8:40:b9:02:26:2e:0b:
         44:31:01:3f:81:b9:1e:40:13:40:57:34:d1:9f:a1:0a:80:5c:
         18:90:77:bb:ec:94:7d:a7:9e:1b:75:c9:f3:7a:7e:d8:80:f1:
         30:de:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 01:08:35 2026 by rpki-client