Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft
File:                     7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft (raw, json)
Hash identifier:          U9+Y4X50QJ/1olUl/CQdsWH7CIZSHyYd+V6cW3P3E0I=
Subject key identifier:   DD:06:3B:82:41:5B:B3:79:53:70:C2:59:7D:80:8D:CE:E6:D8:89:17
Authority key identifier: 7D:09:D8:EA:8E:91:06:A6:DF:16:47:C9:ED:DA:CE:EC:D4:DA:29:F3
Certificate issuer:       /CN=7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3
Certificate serial:       15B9F2083D0E8F7AEDA9717B38F4D28957152A86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft
Manifest number:          1F
Signing time:             Sun 24 May 2026 03:00:18 +0000
Manifest this update:     Sun 24 May 2026 02:55:18 +0000
Manifest next update:     Mon 25 May 2026 04:10:18 +0000
Files and hashes:         1: 3137302e3235342e3134352e302f32342d3234203d3e20323635333938.roa (hash: 7kcyWMk4MPF8T9ghVp0b9VX3K0Y0JFjLfX7iqT0xVp4=)
                          2: 3137302e3235342e3134342e302f32322d3232203d3e20323635333938.roa (hash: wTgdMGs/sAUz0sIfT5N8C3Pkoq20GcRLV1rNhbmY1jk=)
                          3: 3137302e3235342e3134342e302f32332d3233203d3e20323635333938.roa (hash: jslTW432k6GAHS6DKr+E9BqqrHxotR3k9+K+eazNPOw=)
                          4: 3137302e3235342e3134342e302f32342d3234203d3e20323635333938.roa (hash: g8rTtCygxt8+hMoSqq1vlvgh/pdd12zjZZGdMqzq+pE=)
                          5: 3137302e3235342e3134362e302f32332d3233203d3e20323635333938.roa (hash: Ue70TjvhoNwBhiU6co55QGNRZeA5lTM+xuxOSOksZKk=)
                          6: 7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl (hash: tAyVYcvgRbovj/zVxBZeP8iS6cLRdB6sqSn2HsUATzE=)
                          7: 3137302e3235342e3134362e302f32342d3234203d3e20323635333938.roa (hash: xiJ7HPIbcm5KAg4EO4abLkMQ7tpg4MWlD1knm9Ig6q8=)
                          8: 323830343a333337383a3a2f33322d3332203d3e20323635333938.roa (hash: PdTE/qLRs5USG7ucmcl5xhDBUG/0EA36yMeMjdkBzAs=)
                          9: 3137302e3235342e3134372e302f32342d3234203d3e20323635333938.roa (hash: w3GgJo03KRgYdGos1cqQlLiuXjPZKIYmpH22dEAoh08=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl
                          rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 04:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b9:f2:08:3d:0e:8f:7a:ed:a9:71:7b:38:f4:d2:89:57:15:2a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3
        Validity
            Not Before: May 24 02:55:18 2026 GMT
            Not After : May 25 04:10:18 2026 GMT
        Subject: CN=DD063B82415BB3795370C2597D808DCEE6D88917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:2d:50:30:6a:61:50:5c:51:0a:76:5d:b7:
                    88:8a:8b:5c:29:ce:b0:5d:59:bd:d8:7b:dd:84:2b:
                    bf:c6:f6:5b:f4:92:b4:2c:9c:ae:c6:85:86:ad:4a:
                    b0:a5:e4:f9:e6:ee:33:5b:6d:32:f1:03:b6:b9:d9:
                    fa:da:95:9b:69:d2:2e:ea:4f:b4:58:a0:5d:92:b0:
                    f5:8f:cb:19:ab:d5:05:4c:61:15:da:37:5c:1d:67:
                    ec:6b:09:63:da:89:de:27:ee:92:39:38:0a:6f:92:
                    97:59:e8:02:6c:6a:45:9b:f2:0b:a2:8c:ec:65:90:
                    7b:aa:18:de:e2:5c:24:bc:cb:78:85:6b:10:92:6d:
                    55:c7:1f:5f:1a:1e:f1:90:31:84:3f:fd:d0:00:0c:
                    a9:b5:1b:7d:d3:65:c0:ae:5c:3d:7e:14:8d:91:03:
                    93:0b:b4:1c:e2:a3:64:72:74:a3:ba:2e:20:bf:a6:
                    f2:7f:3a:ce:d3:a1:f7:62:72:52:8f:0b:38:e3:57:
                    1f:d0:d1:33:51:93:d1:bf:b3:bd:65:71:a1:1d:75:
                    44:9f:b8:30:37:89:c2:27:84:a7:31:13:ba:0f:df:
                    7e:11:69:64:11:61:21:6d:d0:ad:78:11:ae:4e:ae:
                    aa:83:44:b9:95:99:ee:36:dc:fa:48:ed:2f:ae:86:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:06:3B:82:41:5B:B3:79:53:70:C2:59:7D:80:8D:CE:E6:D8:89:17
            X509v3 Authority Key Identifier:
                keyid:7D:09:D8:EA:8E:91:06:A6:DF:16:47:C9:ED:DA:CE:EC:D4:DA:29:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jium35hHYy9vsbycEoNixk79wT94c8hUeRV594wdVSL/0/7D09D8EA8E9106A6DF1647C9EDDACEECD4DA29F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:81:89:8e:fd:04:3f:0a:e1:43:3f:93:1f:7e:de:8c:14:16:
         91:85:53:07:58:36:5c:10:78:38:8d:a8:2e:09:dd:6c:f0:5e:
         73:9c:ed:98:47:4e:61:6e:52:7a:8e:ed:88:f2:22:cc:ba:db:
         6e:9c:39:c0:d4:29:af:f9:89:51:77:eb:17:c2:fd:72:6f:0c:
         48:cb:a3:05:d2:fd:09:a2:be:e0:af:55:73:82:ea:38:b1:74:
         2d:55:a8:ed:14:f8:52:a0:cf:ff:dc:aa:09:13:2c:e0:ad:31:
         34:f2:be:dd:1c:73:f1:42:7e:af:6b:90:4c:68:0f:a6:60:25:
         41:7e:7d:fe:14:3c:06:2a:2c:29:68:de:46:ad:c0:d6:79:24:
         c0:d0:11:d3:eb:0e:9a:7a:7d:65:14:36:b7:56:ce:79:c6:e3:
         f5:f9:15:bc:b8:01:fb:d6:9c:e8:81:d2:fb:f0:af:fb:45:fc:
         f4:84:3d:3b:81:92:a2:85:c6:ae:7b:56:7c:61:d2:9c:2a:04:
         78:51:8c:03:66:b9:4d:5d:a9:09:32:80:3a:4b:76:cf:5e:44:
         09:25:cf:09:57:03:e9:37:52:3c:a7:ac:8e:e3:05:65:19:bc:
         3b:cd:8a:3d:c5:55:be:56:60:98:b5:b9:c8:c5:aa:0c:5f:80:
         82:1e:d4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 18:49:45 2026 by rpki-client