Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
File:                     72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft (raw, json)
Hash identifier:          jb6zPlEZdC47+nTPBzjYM49XkbuD4qkl/vOcukm1LYc=
Subject key identifier:   BD:23:E4:CD:75:F7:6D:F0:27:12:21:E4:CE:6A:01:BF:34:B5:E6:10
Authority key identifier: 72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8
Certificate issuer:       /CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
Certificate serial:       5E588F6355BA90F0224F06D48269FBBCA4FB40D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
Manifest number:          03D2
Signing time:             Fri 10 Apr 2026 04:45:42 +0000
Manifest this update:     Fri 10 Apr 2026 04:40:42 +0000
Manifest next update:     Sat 11 Apr 2026 08:30:42 +0000
Files and hashes:         1: 34352e372e3232342e302f32322d3234203d3e20323636363135.roa (hash: OpTTdPmL3E3wiXza3V9sw1tlqKWmtHj7mgfaeeoRT7A=)
                          2: 72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl (hash: +/r3Bo43E3FNuvSTUfOZ7YLAPJcxl8T8fqZYYZjSF0Q=)
                          3: 323830343a336562303a3a2f33322d3438203d3e20323636363135.roa (hash: 9MEgIboxRmSKySk5TYZIBJPRuQrZtuCfIlSZcuRTRlg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl
                          rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 Apr 2026 07:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:58:8f:63:55:ba:90:f0:22:4f:06:d4:82:69:fb:bc:a4:fb:40:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F69467673B0BB3A13EC651F1D0BF66BAE31FD8
        Validity
            Not Before: Apr 10 04:40:42 2026 GMT
            Not After : Apr 11 08:30:42 2026 GMT
        Subject: CN=BD23E4CD75F76DF0271221E4CE6A01BF34B5E610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:a0:da:03:0b:b5:b8:c4:81:d7:24:b1:b0:
                    cc:8c:53:d8:a4:ab:9d:be:5b:8e:99:01:5f:c5:1f:
                    95:08:9e:49:b8:b4:71:7e:8c:e0:8f:60:d8:8a:60:
                    f1:46:81:7d:4a:dd:2d:5c:06:41:60:82:8a:cc:a5:
                    6b:15:fe:ef:87:cc:ad:fc:3a:8c:1f:cd:71:ee:6b:
                    48:b1:1a:34:95:f7:a3:57:9a:92:02:02:db:b4:9c:
                    0a:a9:6d:69:97:b3:4f:50:5e:22:13:98:9a:c4:29:
                    db:6e:13:98:69:9c:54:90:f2:86:6d:f8:57:f2:96:
                    3c:79:fb:f8:0a:19:a7:4b:97:84:a4:32:bd:11:fc:
                    e2:09:a3:56:50:51:97:bc:04:d5:c7:13:de:71:24:
                    16:e0:27:35:68:00:d8:96:c9:08:5a:20:ca:a5:00:
                    02:10:11:0e:bf:45:25:df:2d:2a:b1:0c:56:c2:ed:
                    a7:48:9e:b7:b0:b5:df:2f:6e:8e:16:d5:3d:f9:50:
                    c1:f9:82:9b:70:02:61:60:c1:c6:df:3b:61:eb:29:
                    79:07:b4:bc:75:f9:29:0a:e1:bd:00:77:e6:6c:a8:
                    88:0d:33:d4:a3:13:b4:f5:c9:db:08:72:d3:db:23:
                    93:3f:b9:ec:ba:da:83:b9:3a:e4:41:9b:fd:2d:05:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:E4:CD:75:F7:6D:F0:27:12:21:E4:CE:6A:01:BF:34:B5:E6:10
            X509v3 Authority Key Identifier:
                keyid:72:F6:94:67:67:3B:0B:B3:A1:3E:C6:51:F1:D0:BF:66:BA:E3:1F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/1/72F69467673B0BB3A13EC651F1D0BF66BAE31FD8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:c0:4a:8e:75:77:c7:06:cf:e7:3a:41:a6:6e:24:8e:b8:
         8a:45:02:f3:6a:ff:af:b7:1d:b2:0d:8d:e6:a7:79:31:8b:97:
         a7:ab:b3:7d:dd:34:dd:58:14:a5:66:66:2d:6d:61:eb:67:ea:
         af:d2:35:ac:6c:4c:bb:21:e3:05:f1:df:11:77:eb:4c:d4:0d:
         cc:cd:2e:5b:09:96:75:81:7c:06:23:84:9a:39:17:e7:ba:54:
         39:f8:8f:3d:5b:1a:e0:42:51:3b:77:f8:4a:0f:18:0a:d1:6b:
         5b:c3:a7:2d:7b:eb:41:23:f1:f9:26:3b:1a:9a:3e:4a:f4:7f:
         19:eb:84:44:de:23:f9:ba:81:45:f3:f4:c3:1d:f0:53:22:a2:
         67:5a:fe:cf:24:60:8a:62:21:38:5d:52:ad:9a:42:a0:af:ef:
         8d:f1:71:76:62:b8:8e:5e:52:15:30:e1:1f:c7:84:cd:16:1d:
         f7:03:c2:c3:b5:32:e4:15:47:bd:5d:cc:db:63:51:da:7c:d1:
         6f:9e:13:71:fd:f2:30:65:5b:3c:65:d1:d7:25:b7:cd:79:6f:
         32:75:04:b9:19:e0:6e:f6:49:ab:16:84:d0:4e:af:d3:35:e4:
         77:11:e2:1a:71:d2:2e:4d:e6:0a:b3:70:ce:09:b9:18:05:08:
         c2:e5:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 08:44:05 2026 by rpki-client