Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
File:                     84398976322691988CABA640BBB2854AECDF6B87.mft (raw, json)
Hash identifier:          1BCyGWSR8I53RcnYHoMnFEeC3QWqe0ygR/VK5bLF5Qg=
Subject key identifier:   DC:22:FC:36:C7:51:BD:6D:01:F6:20:C0:E4:6C:43:8E:CA:D4:0D:C3
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       75BB9E31066EC9363D73784EAF08EFE5A1DE0F82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
Manifest number:          03DB
Signing time:             Tue 07 Apr 2026 19:58:36 +0000
Manifest this update:     Tue 07 Apr 2026 19:53:36 +0000
Manifest next update:     Wed 08 Apr 2026 20:33:36 +0000
Files and hashes:         1: 34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa (hash: PqXMdIlxskw70ZI51b+M1vaG9j21mjHarNRG/EWSBCg=)
                          2: 34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa (hash: ut8i0jZpnlCMPCB3CJfpQb73ZvU4CADMgCaGjWV1rME=)
                          3: 34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa (hash: GlLGPZ6hufSBquPkt/mRs0jxgDabJwabomTu0QzL8pY=)
                          4: 84398976322691988CABA640BBB2854AECDF6B87.crl (hash: aZCt7Rva0EI67q70b6DH2bPrwLXDvYG8d25Ia53KQwY=)
                          5: 34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (hash: 8Ie1Q9KbCiZ9I8Q6+5cFYoSMow4J4E4PUTbUT9Ag/+0=)
                          6: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: xm6QS2tykS0HNopH4b1bku6DcYmJ8RbOFMzSXulztVI=)
                          7: 34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (hash: 7zUiEVtaD8KQJ/F6pDQVWpW/FDKnkwVeoJp+AkQ6e6k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 20:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:9e:31:06:6e:c9:36:3d:73:78:4e:af:08:ef:e5:a1:de:0f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Apr  7 19:53:36 2026 GMT
            Not After : Apr  8 20:33:36 2026 GMT
        Subject: CN=DC22FC36C751BD6D01F620C0E46C438ECAD40DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:de:17:e0:eb:35:e5:c5:d9:0e:fc:3c:19:
                    9f:61:f4:39:8b:eb:a3:61:18:d8:52:fb:85:b3:1f:
                    e5:2e:1f:6b:17:3e:e0:c5:ff:c6:17:cb:31:99:69:
                    2d:49:50:59:61:72:89:2a:11:8f:a3:60:09:48:68:
                    10:17:ed:93:e0:c4:1a:8d:55:d8:60:99:3b:17:4f:
                    d6:36:d2:3e:de:e0:5b:d6:8c:50:90:88:dc:66:69:
                    06:0b:bc:cf:35:72:c7:7a:91:e2:61:7b:5c:71:7c:
                    f0:bc:6c:4b:9d:28:15:9a:c9:90:15:8a:54:13:95:
                    e1:1b:74:51:58:57:d6:db:b3:86:97:0e:f7:c2:f4:
                    a5:bf:79:dd:93:ae:f7:5b:43:89:99:f8:ce:e0:8d:
                    6b:10:ce:1e:91:dc:ce:b6:2b:87:d6:12:43:e9:a2:
                    b3:5f:3b:30:56:9a:f9:d4:a9:93:ea:f2:16:49:a8:
                    e0:81:87:89:96:9e:f0:40:70:e7:c6:fa:33:a0:ac:
                    24:02:53:cc:d2:46:3b:4c:1d:9f:23:ef:c8:c2:3c:
                    90:6f:e0:06:a0:e9:09:10:c0:97:35:1c:65:10:22:
                    e8:19:c1:52:58:23:b3:d5:f6:33:f2:e8:52:8e:79:
                    7e:e7:7c:c6:a5:19:1e:df:9a:38:d9:b7:bc:27:c5:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:22:FC:36:C7:51:BD:6D:01:F6:20:C0:E4:6C:43:8E:CA:D4:0D:C3
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:08:9f:ea:7a:09:eb:59:71:83:bc:28:75:bf:96:5d:8a:
         11:bf:f7:6e:3b:0a:ff:84:a9:00:d5:d3:00:fc:a8:8f:08:96:
         09:40:2f:9f:6e:42:45:bd:81:da:1b:87:a5:01:19:7c:4b:f9:
         80:e8:51:7d:23:8c:3d:af:db:15:22:e2:20:cb:15:c5:d6:1f:
         2d:30:9b:b2:73:76:cb:6e:3b:45:ee:a3:3e:00:46:fc:53:f0:
         c5:a8:03:d5:88:29:1d:31:b6:52:df:23:fc:3c:19:f8:fc:8b:
         3c:94:d1:94:99:c2:ad:31:88:4e:9f:0e:7b:5d:06:90:72:55:
         5a:25:72:4c:57:77:49:bd:3f:af:e4:be:30:8c:53:10:cd:af:
         04:ac:ce:0d:d1:d8:ab:69:3c:b9:25:e2:c1:f9:e0:10:6a:59:
         98:20:ad:e4:89:80:49:0c:ea:d3:11:34:fb:2b:0a:0c:d7:86:
         7d:f2:4e:7c:4f:c7:59:79:21:ac:40:c5:0d:1a:9f:b2:84:39:
         56:68:a9:44:6e:d2:d4:10:52:df:9d:49:13:49:b7:cc:77:a3:
         a0:82:1b:71:13:a6:e7:df:b8:4c:03:85:ed:52:95:54:6f:8d:
         7b:77:d3:5c:8d:7b:b8:7a:7d:10:5d:7c:74:e4:03:41:e5:27:
         11:23:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:40:23 2026 by rpki-client