Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
File:                     3DDE2C96A736983C4145E6A74FA601EF275DE118.mft (raw, json)
Hash identifier:          0j4jvn236Hm/CyOmbV5TyaZq68XEsbskBve9wumX+YM=
Subject key identifier:   05:98:BE:E3:CE:79:73:C1:4E:58:60:52:BB:0A:20:2C:18:03:5A:AF
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       0A57450DD8708B2AA142D08F12EC69848CA6837F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
Manifest number:          03D1
Signing time:             Wed 08 Apr 2026 03:15:59 +0000
Manifest this update:     Wed 08 Apr 2026 03:10:59 +0000
Manifest next update:     Thu 09 Apr 2026 04:22:59 +0000
Files and hashes:         1: 3DDE2C96A736983C4145E6A74FA601EF275DE118.crl (hash: B773p6/iPo3s7DWrFo5VnzKTx1VgMS9j1gyGjnWh+TA=)
                          2: 3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa (hash: f+/Zu8Fg3iM/+XJQTfnDVdIKFc6VQwIh6R6AZkAy8A0=)
                          3: 3137302e3235342e37362e302f32322d3332203d3e203532373833.roa (hash: Q56Q5VKrzJKDLlHMrzxnRZOg+PEWZasV4iwOsYDxh+U=)
                          4: 3137372e37342e3138342e302f32312d3332203d3e203532373833.roa (hash: Eps19JEn70YTwchmCGyJw8QBtBzSW/Qpus111oVDU68=)
                          5: 3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (hash: rhnmrS045TRrQyDAyyNJP74G7MVhcwU8A3NWp98Sq8Y=)
                          6: 3137372e3230302e36342e302f32302d3332203d3e203532373833.roa (hash: BI932QVFEPOJWMdjge9JwMD8xdB+ilow4Y9IRuFVLeU=)
                          7: 3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa (hash: V7RV34Dt13VRnRvCHNaHDYDDQYXnsSq9O8TvHKCV7G4=)
                          8: 323830343a313066383a3a2f33322d313238203d3e203532373833.roa (hash: HYZjomytHJtmlHj2wWdWxYAhCDqXHUjfmbDIRdu98vw=)
                          9: 3137302e37382e3131362e302f32322d3332203d3e203532373833.roa (hash: B5/No4EPplUaGh8mLzCGGd2p668EN0KJ17OyEZuplhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:57:45:0d:d8:70:8b:2a:a1:42:d0:8f:12:ec:69:84:8c:a6:83:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Apr  8 03:10:59 2026 GMT
            Not After : Apr  9 04:22:59 2026 GMT
        Subject: CN=0598BEE3CE7973C14E586052BB0A202C18035AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:27:f6:ee:06:a4:30:97:57:22:8d:71:46:
                    cc:95:57:1a:90:ec:e8:02:97:3e:10:24:de:b1:d9:
                    b3:40:50:71:19:5b:50:0a:5f:ab:a6:4b:3f:3b:8d:
                    66:26:bd:ed:4e:65:e3:6f:5a:9a:ed:07:6e:f0:2b:
                    ab:09:d7:64:79:b2:93:0a:8d:08:ba:45:7a:6f:19:
                    40:68:f8:c4:8e:a7:fd:60:1c:da:dc:2d:b7:af:f4:
                    84:14:19:5e:e1:f0:31:8e:34:13:31:d1:23:0d:4e:
                    97:25:3b:bf:71:fe:99:f9:6a:9a:bc:9d:43:f7:c0:
                    bb:7f:e3:05:e3:0a:81:1d:18:9e:f2:26:4a:92:f8:
                    55:fc:3b:d7:13:b5:1a:7c:16:4b:bc:37:67:2e:f3:
                    d7:46:65:5d:2e:e5:80:a2:b6:93:a1:8e:96:81:f0:
                    ea:b2:d2:d6:d3:8a:57:9c:fa:53:1c:04:be:ae:84:
                    b7:8a:3c:50:44:d4:4f:94:fb:21:22:55:55:53:31:
                    57:b2:60:aa:53:c4:23:9d:7a:e0:69:b9:b5:8f:dd:
                    c1:87:75:cd:99:6e:cc:45:24:a0:0a:a8:52:03:c5:
                    7f:2e:f7:c7:e5:52:9d:a7:d8:c6:bf:bc:ee:77:59:
                    b1:a1:51:9c:6d:90:c9:a6:2b:c0:37:55:e8:24:3d:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:98:BE:E3:CE:79:73:C1:4E:58:60:52:BB:0A:20:2C:18:03:5A:AF
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:51:f9:11:6c:73:f9:ee:e6:ff:64:2f:97:c1:9b:45:d3:
         cd:3c:2f:1b:6c:20:c2:89:dd:eb:d3:c2:ff:f7:15:56:69:d8:
         27:36:ca:df:e9:c5:42:dd:88:7c:c7:ea:e5:e1:15:1e:fc:ca:
         7e:1f:16:76:92:7d:0a:08:ad:5b:bb:47:55:97:56:5f:e6:2c:
         4c:38:41:f2:21:70:7e:69:74:f5:69:9c:41:50:9f:1f:53:f6:
         62:7d:4d:e1:38:90:a9:59:5d:97:77:f9:bd:7c:f2:bc:b1:11:
         82:d5:00:26:e9:7d:52:3f:27:11:a4:30:bd:c0:0a:0b:0c:f9:
         0c:e3:ad:4a:c0:67:16:57:d1:c7:38:8e:99:7f:54:65:ca:f6:
         1c:64:b3:c1:34:90:91:ee:51:a9:a8:86:ad:79:6a:dd:c4:44:
         0c:01:cb:62:eb:b4:00:74:c4:5c:a5:a1:19:ad:d1:7b:7e:b7:
         51:54:d8:73:91:60:31:1e:cb:75:49:1e:bd:eb:20:88:e1:83:
         ae:b5:7c:24:34:be:f6:98:e7:db:d6:30:c8:0c:a1:f2:32:70:
         6a:cc:38:c2:fa:43:44:35:13:41:e3:5f:8b:3b:27:a3:23:79:
         58:de:f9:3a:c7:22:02:a3:39:0d:51:c0:60:dc:f7:dd:84:d4:
         4e:40:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:28:00 2026 by rpki-client