Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File:                     3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier:          SyTyHVw919kE//k1VGA/jUnj90oGTrJ8cNpqpxJmEbQ=
Subject key identifier:   18:C1:4E:C9:42:A8:B4:42:52:40:77:08:60:52:03:A1:0B:12:20:68
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       5D8114AA6F528E336D18CE60039B37B89B8E8F3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number:          0403
Signing time:             Sun 24 May 2026 00:24:41 +0000
Manifest this update:     Sun 24 May 2026 00:19:40 +0000
Manifest next update:     Mon 25 May 2026 04:17:40 +0000
Files and hashes:         1: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: 3EpRMfCJQ/oplvoRy8WV3jeX247HTwGAj4R/48Hj6x4=)
                          2: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: KivaW3ZlK69l+y9q+bdg0FUrxGdXfuK1ZNEbBCDZre4=)
                          3: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: GEfn4Bl00zdhGTYrW9jbA0jPa3LwMFFlV00DI8uLXIg=)
                          4: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: krQ5Wo1VMNSc7ExE1CdQKUJwP9BrvmOhmETLpI9iAZk=)
                          5: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: QNu3N4Q6fO05gIGJMeAaG22Ov/LtiCeuvFBnnuXQaow=)
                          6: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: boYO6tOGQgroLgW6ULNmJAn4NcrWCrbNrFuebeCiBpM=)
                          7: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: a8haySQUKnVEPYwnbcI28rS2mFG3JY2FDkGLXbuMBEw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 04:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:81:14:aa:6f:52:8e:33:6d:18:ce:60:03:9b:37:b8:9b:8e:8f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: May 24 00:19:40 2026 GMT
            Not After : May 25 04:17:40 2026 GMT
        Subject: CN=18C14EC942A8B44252407708605203A10B122068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:9e:ea:d2:5f:0c:8d:b7:0e:42:b1:e8:8e:
                    a0:cd:f7:66:94:73:6b:0c:df:42:35:22:ec:63:35:
                    3d:a7:70:ea:da:f0:21:35:f9:41:5f:c3:34:56:d1:
                    6d:68:22:6e:2f:d0:58:39:79:ca:cf:d8:5f:c7:79:
                    32:ec:5b:fa:9d:a5:44:8f:f9:a0:f7:6c:1b:7e:1d:
                    e9:69:19:e0:c1:c8:41:a8:12:f6:e8:c6:12:66:f8:
                    1f:61:8b:9f:d9:73:6b:ca:5f:3e:f5:1b:81:9b:10:
                    f0:d6:59:74:36:ca:63:e6:7f:ff:5c:0f:ff:1b:eb:
                    a5:7f:07:ce:c4:56:ed:e6:8f:8d:96:90:42:0d:90:
                    cd:a5:17:84:e0:55:a3:d7:1e:82:6f:86:56:66:f6:
                    b7:2b:8b:f2:de:68:60:83:fa:e1:18:70:5c:6c:11:
                    74:a1:3a:2b:a9:91:94:cc:0a:c5:e1:17:c7:69:a6:
                    60:2e:36:31:b1:08:59:c7:41:df:ed:f1:ab:a5:9e:
                    5b:8a:a5:16:f8:25:a9:8b:d6:78:a4:93:0b:b4:36:
                    73:c0:6d:51:6f:39:cf:f7:3e:65:b8:0d:de:0b:a5:
                    b8:d0:14:49:56:73:4d:7a:54:e3:25:5c:1a:33:32:
                    23:ae:9a:56:20:ae:30:ed:15:32:e8:e4:fc:4e:05:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C1:4E:C9:42:A8:B4:42:52:40:77:08:60:52:03:A1:0B:12:20:68
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f9:36:8e:fa:6b:b8:04:08:47:24:f1:99:d9:a3:21:0e:d4:
         b4:b9:03:64:6d:a5:6f:7a:70:2d:62:4b:cc:a0:af:be:b9:72:
         0e:85:57:21:1f:8b:27:06:4e:52:52:b5:73:f0:2d:d0:c3:c7:
         7d:ef:88:84:35:fa:74:cc:2d:17:6c:91:1e:25:f7:6c:52:1b:
         4a:3a:4c:0d:57:4b:90:24:89:85:0b:62:1d:a6:53:14:97:6a:
         68:27:f1:52:80:52:37:33:6d:12:39:04:c9:a1:91:f1:d6:dd:
         14:f4:dc:0a:7d:9c:80:72:5b:c4:60:3f:9f:14:be:fd:b1:05:
         48:21:11:b1:9e:ba:d8:7b:50:65:43:4c:6b:24:04:45:37:f4:
         d1:25:66:a8:6a:2a:4f:b0:84:3d:7f:e8:7b:05:52:0a:7d:da:
         82:0e:c9:56:32:bf:de:e8:aa:8a:2d:83:2f:6d:15:3e:6d:06:
         90:60:e0:c2:2e:ee:16:ae:3e:54:49:41:1e:58:29:01:5d:dc:
         96:db:f0:54:aa:3b:48:5d:5a:2d:f0:81:d5:47:7f:ed:dc:0c:
         ac:90:ac:75:ea:96:8d:7a:82:5b:51:25:e2:2b:c0:0b:9c:91:
         a7:96:14:46:ea:e8:18:ce:a8:48:87:96:6e:47:88:f5:28:4d:
         5b:76:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:29:30 2026 by rpki-client