Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
File:                     DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json)
Hash identifier:          +UwQz7sEreYIl3U9frBCg0PUgLZDBAJYK+OKytbYyqE=
Subject key identifier:   D5:46:17:11:8B:B9:CE:E0:DD:92:CD:E1:EC:52:5E:4E:33:21:EE:68
Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
Certificate issuer:       /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Certificate serial:       3A1A2C7D4B840806F6E145F5E4D5EF3EEB661EC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
Manifest number:          01E3
Signing time:             Thu 09 Apr 2026 04:32:56 +0000
Manifest this update:     Thu 09 Apr 2026 04:27:56 +0000
Manifest next update:     Fri 10 Apr 2026 05:05:56 +0000
Files and hashes:         1: 3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (hash: hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=)
                          2: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: uMLGz3SRcoH61KbgKxBuBET2mqkIcDjkVWG+omH036w=)
                          3: 323830343a313039383a383030303a3a2f34302d3634203d3e203532373636.roa (hash: JZGmc1ous4bZq5lhnKdYV9PfKLERItm+WUAD3UHXekg=)
                          4: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: MyjZ/FqpEThayOilq9ks5gmdUqVtGJ9dI/e1Othzp+g=)
                          5: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: CVEdJbuSDwFz1t6sgI8Kx99XMaOFFaLDGC7DFuQ9hlc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl
                          rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1a:2c:7d:4b:84:08:06:f6:e1:45:f5:e4:d5:ef:3e:eb:66:1e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
        Validity
            Not Before: Apr  9 04:27:56 2026 GMT
            Not After : Apr 10 05:05:56 2026 GMT
        Subject: CN=D54617118BB9CEE0DD92CDE1EC525E4E3321EE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:eb:74:cf:ca:e4:7f:de:62:eb:e3:62:e9:21:
                    8d:71:65:0d:d2:cb:37:1d:4d:be:b6:f6:5d:42:02:
                    b2:be:9d:bc:33:3f:a2:eb:91:94:99:c8:42:c2:11:
                    a9:f8:2d:0d:5c:d6:f1:9b:ff:a6:50:6c:63:57:2c:
                    3e:27:c1:e6:62:2e:44:73:20:2f:fc:47:8e:35:0c:
                    26:24:06:ec:a2:31:1e:ed:7f:08:4f:a0:68:9d:f8:
                    ad:42:b0:ae:e3:a2:a6:05:5c:36:b6:99:6d:e3:31:
                    1a:a7:07:26:9b:a5:a4:6e:67:dc:6f:8e:86:e4:e6:
                    71:84:a5:8e:77:fa:ba:fa:c8:19:32:41:3a:29:2a:
                    3c:ff:cb:51:83:b4:1e:eb:8a:5f:19:3f:f2:ec:b2:
                    da:20:e6:95:72:0f:d4:84:d9:1d:af:47:16:58:a4:
                    bc:77:40:34:b4:2c:c6:7e:be:50:6f:81:7e:2f:09:
                    b5:0d:fb:ed:ab:0c:9a:77:35:77:73:80:12:55:19:
                    d7:79:2c:04:8c:67:e4:72:c6:63:f8:31:8c:91:39:
                    25:50:24:65:e1:ca:e8:88:3f:69:45:92:09:67:91:
                    19:04:6c:c1:1a:8f:9e:a6:33:71:bf:5c:fa:3f:6d:
                    0f:fd:16:0f:8a:51:4b:a2:e7:30:b8:07:77:58:d0:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:17:11:8B:B9:CE:E0:DD:92:CD:E1:EC:52:5E:4E:33:21:EE:68
            X509v3 Authority Key Identifier:
                keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:76:31:bc:8f:15:c2:a1:29:04:b0:1b:a4:a2:8a:0c:44:a0:
         d0:56:92:6d:97:3f:1b:96:0a:2b:b9:9f:6c:2e:c6:2c:6a:0b:
         92:d0:00:d3:67:dd:51:c0:f5:34:91:72:64:2c:47:97:f3:fa:
         0f:ff:a8:08:1e:91:3c:0a:29:d8:f7:9b:27:96:07:1f:9d:ef:
         2f:79:92:a2:a4:44:6b:b6:47:6e:f3:d4:8a:4c:f9:de:01:09:
         96:a7:de:9e:42:5a:e9:8a:e2:95:97:78:d2:f0:92:02:15:f2:
         9d:d9:9f:91:9f:51:49:bf:4e:ed:12:37:c0:ce:bf:9b:29:a8:
         a8:3d:c8:52:b0:3d:25:40:9d:2a:f4:a5:73:39:78:ab:b5:62:
         e7:01:56:3b:ce:3a:ee:4a:46:68:17:c9:fe:d5:88:77:1c:80:
         a0:4a:72:08:73:e0:5e:88:b7:35:b3:04:80:ed:51:c3:60:62:
         93:e7:44:5d:db:f4:0c:55:67:20:50:35:e3:51:1f:ec:de:c8:
         42:f7:44:df:a6:62:37:88:6c:a3:08:e5:31:dc:b6:e8:4a:ac:
         77:7e:22:ea:05:6e:5b:fb:bd:9d:a7:4f:6b:98:f2:2f:9e:3d:
         a7:d8:ac:16:65:2d:33:a6:5b:82:a2:a8:1f:8a:0d:bb:bc:b6:
         70:b4:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:22 2026 by rpki-client