Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
File:                     4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft (raw, json)
Hash identifier:          xbqOqo0MeUYIGn84mxBfELAwTcw3Q6Z9fwEGVm+wuhs=
Subject key identifier:   3F:9B:FE:06:5C:E9:14:9F:4E:AD:CC:96:96:AB:9B:0D:4F:84:47:D5
Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
Certificate issuer:       /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
Certificate serial:       4AAF1E9A9FF60D8D1CDC9B0FA29120BFC6BCFF44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
Manifest number:          011E
Signing time:             Fri 26 Jun 2026 16:46:38 +0000
Manifest this update:     Fri 26 Jun 2026 16:41:38 +0000
Manifest next update:     Sat 27 Jun 2026 19:09:38 +0000
Files and hashes:         1: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl (hash: 94XFOqxV49B+zPyNqQ+zlqS8DOCouFrkK3Z+eQUcDn0=)
                          2: 3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (hash: WlfPkdvQaK+2iNV2J8DnE42kv5R/ULsDx9rhkKjR0cA=)
                          3: 3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa (hash: N91dwFlRpIMGXso4PKVxPSMTeHaKnAVRNeylT8GL1f4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl
                          rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 19:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:af:1e:9a:9f:f6:0d:8d:1c:dc:9b:0f:a2:91:20:bf:c6:bc:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
        Validity
            Not Before: Jun 26 16:41:38 2026 GMT
            Not After : Jun 27 19:09:38 2026 GMT
        Subject: CN=3F9BFE065CE9149F4EADCC9696AB9B0D4F8447D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:72:84:44:a7:02:e0:53:46:ae:d6:db:43:
                    d6:a6:ad:63:fc:20:e1:b8:db:bd:92:b6:20:18:bc:
                    25:89:1f:97:e3:65:85:52:b9:d3:56:9e:83:ad:97:
                    db:e5:8b:76:c9:7a:46:c4:57:4f:db:81:e8:78:7e:
                    74:a6:08:42:f0:b2:61:cf:46:c7:d1:a2:bc:eb:f2:
                    96:0e:91:1b:ed:b2:51:cc:8a:0d:b9:eb:a2:65:10:
                    ec:62:2d:3a:d7:f6:2f:67:2e:71:4b:0b:79:89:7f:
                    8f:3c:c7:50:e6:dd:89:b2:85:10:df:d0:11:c0:68:
                    c0:8d:8b:5f:41:1e:69:ec:d3:84:25:88:53:3a:fb:
                    39:60:39:cd:b2:a4:78:58:bc:82:7d:ce:f0:b5:34:
                    0a:8b:21:57:fb:3a:99:b5:3b:e2:8d:d8:57:9e:8d:
                    fb:2a:76:e8:fe:fc:52:d1:55:4c:6b:43:cd:71:95:
                    8f:44:f9:e8:36:60:ce:c2:4d:1b:f5:51:4d:d8:fd:
                    62:69:b4:dd:d1:d7:fd:9c:20:0a:01:5e:da:c4:91:
                    01:e0:73:af:76:68:bf:0e:3c:42:e4:35:4c:78:b2:
                    c6:ad:aa:d5:da:7d:9a:c2:41:30:28:2a:8e:94:25:
                    b1:ae:0a:c6:70:ca:77:4e:87:87:19:4b:b7:8f:60:
                    49:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9B:FE:06:5C:E9:14:9F:4E:AD:CC:96:96:AB:9B:0D:4F:84:47:D5
            X509v3 Authority Key Identifier:
                keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0c:21:58:95:6e:8e:cb:b3:5c:e1:0d:f0:e4:50:c2:84:03:
         c2:b9:d5:2b:37:f5:21:3c:a3:e7:f6:33:1f:20:ee:68:1d:1f:
         7f:17:5e:08:58:76:cf:74:9e:64:db:ad:83:a0:b1:87:ce:e5:
         39:cc:a4:79:c9:60:93:b2:4d:d3:6a:c6:d0:7d:3e:d8:62:92:
         98:fb:4e:97:aa:78:30:1f:68:b8:19:ac:58:36:5d:8a:b6:a1:
         05:0c:c6:e2:84:1a:b7:44:46:31:b9:35:ab:a4:b8:48:13:91:
         f0:14:f4:fa:da:5d:6d:1f:8e:43:35:62:5b:67:85:a6:d6:5b:
         1a:f1:a6:b1:9b:63:e5:b5:ec:08:f4:15:88:e8:81:34:8a:10:
         9c:f2:ac:e9:8e:c1:18:e9:9d:9f:b2:db:c4:74:7a:54:f3:5d:
         d1:f3:1d:c0:4e:aa:fc:a5:78:61:12:a7:83:fd:1d:55:ae:5d:
         09:d0:7c:e4:c3:18:e6:25:d4:10:c3:ec:94:78:39:8b:15:e6:
         ad:60:63:8d:f8:2a:90:b8:4d:b4:8d:dd:78:45:ad:13:c0:23:
         fe:e9:02:be:c9:3a:72:10:9e:b1:0b:04:0d:cb:f0:4a:db:d9:
         c5:ac:32:72:71:8f:1f:ae:75:19:47:04:90:3a:d7:7b:99:b0:
         08:b9:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:16:09 2026 by rpki-client