Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          YDo9jij8JAzbQlP818PDs6eDYESWakddy7WokJStVu8=
Subject key identifier:   89:97:D1:AF:4E:49:3E:6B:39:64:A8:CF:97:B8:1A:EF:6B:92:5A:F1
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       74818CFDB5F1299279192CD5796E2D3F457A8D99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          03D3
Signing time:             Wed 08 Apr 2026 07:00:52 +0000
Manifest this update:     Wed 08 Apr 2026 06:55:52 +0000
Manifest next update:     Thu 09 Apr 2026 09:12:52 +0000
Files and hashes:         1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: RRlUkNY28agZ88VzN9kmatkBWusPI7KTJM1OfGpr4NY=)
                          2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:81:8c:fd:b5:f1:29:92:79:19:2c:d5:79:6e:2d:3f:45:7a:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: Apr  8 06:55:52 2026 GMT
            Not After : Apr  9 09:12:52 2026 GMT
        Subject: CN=8997D1AF4E493E6B3964A8CF97B81AEF6B925AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:ec:7c:2c:c5:f7:b6:31:46:ff:02:f3:d2:
                    83:0f:ab:af:13:17:28:a0:ea:5a:c9:8b:7f:d7:5b:
                    44:e9:6f:d4:12:de:7d:a4:d9:ec:19:a7:7a:ce:dd:
                    b3:35:52:f1:3d:0f:7b:3f:3b:6c:f2:54:1a:01:38:
                    29:cb:59:89:10:ef:83:aa:3a:53:79:6f:5a:0a:b9:
                    1f:bc:ab:61:11:32:1c:cd:c2:ad:ba:bb:e9:8d:98:
                    ce:b4:dd:61:48:a7:5f:47:37:07:5f:9f:56:3d:f5:
                    df:d8:59:c5:2a:33:de:44:6b:72:7c:e0:91:53:4c:
                    a6:c9:6d:13:86:b0:5a:e1:9a:f5:f7:d3:38:f1:c0:
                    51:7f:21:7e:0c:06:72:03:06:86:d5:ae:31:c3:95:
                    18:64:7a:a1:95:7d:7c:db:66:97:d0:82:d3:f1:d5:
                    6f:c3:b6:c3:42:9b:50:1b:38:f2:2f:5d:d2:03:7b:
                    13:4f:65:36:4b:0d:40:90:98:88:21:44:02:9e:6e:
                    dc:d4:0e:c1:4a:f4:94:7f:1f:ab:e6:a7:a7:ad:fb:
                    22:4e:a0:03:41:d5:a0:8b:e8:62:33:da:1d:14:a3:
                    26:ff:51:9d:89:38:4e:e6:6d:e4:73:df:03:9e:cf:
                    3d:5f:15:97:45:c3:9e:20:45:1f:a9:41:9c:33:bd:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:D1:AF:4E:49:3E:6B:39:64:A8:CF:97:B8:1A:EF:6B:92:5A:F1
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:b8:4a:40:e9:0e:80:75:2a:2c:b2:48:5c:c7:16:3f:d5:
         75:20:b9:d6:c9:64:b1:27:06:a2:cf:71:2d:95:83:e0:ea:a2:
         0b:0c:7d:39:61:28:6d:35:00:6e:63:43:05:b5:70:89:75:c4:
         26:6e:94:e1:ab:8a:5d:20:d8:6c:8d:94:26:95:d8:5b:10:6f:
         d6:86:48:b6:ad:c3:a0:82:ad:5c:49:9c:4c:62:29:ce:17:36:
         d2:4e:a6:8b:43:83:77:df:96:84:8a:59:7e:9f:22:33:f5:50:
         cf:3d:c4:77:1e:91:30:8a:c8:ab:27:a5:15:4a:a1:a2:e5:98:
         cf:76:c8:c4:90:e2:a0:29:c5:0f:37:6c:23:05:61:a6:e4:88:
         73:80:94:ab:89:32:f2:d3:1c:56:be:bf:97:e7:39:26:ae:05:
         1a:9b:e9:b1:68:d2:4b:72:15:89:e1:62:b2:fd:9c:5b:fe:82:
         4f:31:65:21:13:8d:0e:72:d9:c3:63:63:5a:9e:aa:c5:6d:31:
         d6:e9:45:3c:b5:38:67:11:e9:f1:ec:d9:ac:b6:6a:17:02:0f:
         92:41:5b:f9:aa:cb:8c:06:da:a7:f2:85:6a:78:b1:7c:10:76:
         78:ce:b5:10:0c:9d:98:3e:db:f7:de:ce:db:9f:73:bb:38:93:
         b0:fc:23:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:31:33 2026 by rpki-client