Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          p+ukW47DQWuLC/uRg/HHJ5l6Oc5yUYOBA8TPgcUBzSE=
Subject key identifier:   2F:9B:55:21:F9:C6:7C:0D:6C:BB:A9:32:EF:13:45:35:31:99:AA:05
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       04F4AF9F826EF08387344671B63E7433C53B0773
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          032D
Signing time:             Sat 22 Aug 2026 12:29:05 +0000
Manifest this update:     Sat 22 Aug 2026 12:24:05 +0000
Manifest next update:     Sun 23 Aug 2026 15:11:05 +0000
Files and hashes:         1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=)
                          2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: kYWTp7H8A087x3wKaMvKhCZLVfKrNztdrTiBDzNb1QI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f4:af:9f:82:6e:f0:83:87:34:46:71:b6:3e:74:33:c5:3b:07:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Aug 22 12:24:05 2026 GMT
            Not After : Aug 23 15:11:05 2026 GMT
        Subject: CN=2F9B5521F9C67C0D6CBBA932EF1345353199AA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:43:b8:a6:36:10:f1:d4:5e:54:96:a9:72:
                    af:a3:96:5c:d1:9a:a1:27:01:70:92:73:7f:e2:a9:
                    c9:0e:63:7e:4c:29:ca:4c:bf:da:73:41:a4:4d:36:
                    de:ac:fe:f3:71:b9:d8:71:1b:19:3f:eb:4a:bd:66:
                    1d:1f:a0:b0:2d:0c:08:1d:20:e7:7b:36:5c:ac:f9:
                    c7:b8:f2:7f:f1:38:e7:ae:b0:93:3b:d6:b9:a1:31:
                    11:c0:c8:b4:20:fa:03:21:cd:b7:1c:f5:f1:97:04:
                    26:23:ac:c2:97:5c:8c:60:a0:b3:58:fd:6c:f6:5c:
                    fa:af:9c:83:0c:1f:8b:bd:52:d8:1d:ce:f5:99:1f:
                    e2:7b:49:6f:11:03:fd:ae:d6:1e:d7:ac:52:13:5f:
                    35:3d:98:56:40:d4:59:78:49:b2:a1:ce:5d:73:20:
                    14:3f:db:a9:c1:7d:b8:08:e8:f4:9e:27:47:5e:06:
                    d7:82:c1:7d:30:b1:29:24:76:68:d0:20:24:25:9b:
                    a5:03:b4:0b:93:50:97:6e:ba:db:90:45:85:7f:d8:
                    ef:2a:52:e6:03:73:f5:b7:af:4f:6b:cd:f8:39:6a:
                    87:63:b9:cb:fb:30:0f:86:24:ce:b7:6f:ef:0b:5f:
                    45:72:4f:1f:2a:94:b2:6d:62:3d:8a:c3:91:46:8b:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9B:55:21:F9:C6:7C:0D:6C:BB:A9:32:EF:13:45:35:31:99:AA:05
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:4e:a0:4e:58:d3:9c:51:45:64:76:78:e3:1b:3f:9d:77:
         95:ad:2e:f4:f8:4e:65:4a:47:b3:b8:d3:c6:06:69:af:b9:89:
         b2:fc:48:6d:68:e1:00:3b:f9:29:4c:13:a4:1c:7f:ad:a1:8a:
         9b:fb:69:df:33:82:59:2a:5e:91:7f:8d:f2:b5:82:a1:35:7c:
         4e:06:63:ee:06:73:a1:be:d2:ac:a1:83:c7:e9:b3:1b:45:64:
         45:1b:7c:d2:19:fa:2c:8d:d4:23:98:1a:bb:43:74:4c:ef:74:
         c8:52:ab:c8:64:b2:7c:0f:8d:4f:f6:ea:73:02:20:04:81:a2:
         ad:bc:01:e3:20:a3:c9:97:a3:f8:58:e7:6f:7d:e3:bf:00:38:
         ce:91:f2:c4:ac:7f:c9:07:52:c0:2a:4f:5a:ee:1b:24:b1:b7:
         47:83:d6:b7:28:2b:f8:c0:0f:b7:bb:5e:6e:33:7c:f9:08:5d:
         96:bd:71:4c:7f:12:57:b6:6c:4a:1a:a6:9a:e2:12:c5:a3:3c:
         90:0b:d1:54:4a:f8:d5:37:ae:c8:9a:bf:0c:b6:65:80:9e:52:
         d3:76:0d:66:cb:69:ed:ec:6e:6a:52:15:29:24:41:ff:cf:39:
         21:a2:48:19:a9:96:ab:12:10:0c:62:69:5f:2e:cc:b2:2a:ab:
         bf:21:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:21:49 2026 by rpki-client