Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
File:                     33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json)
Hash identifier:          avoEcDzeT5bFgVcqWYDbD+ZIvR/djCMyFYmZ7iXTf5g=
Subject key identifier:   C6:25:6F:31:73:41:83:29:21:50:AD:33:BA:7A:0E:F2:C7:E9:DE:FE
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       2C58B5E4F775A930E5A68E2561549D645B5DD144
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
Manifest number:          0342
Signing time:             Wed 08 Jul 2026 01:32:07 +0000
Manifest this update:     Wed 08 Jul 2026 01:27:07 +0000
Manifest next update:     Thu 09 Jul 2026 02:44:07 +0000
Files and hashes:         1: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=)
                          2: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=)
                          3: 3138362e3139322e31302e302f32342d3234203d3e20323635393532.roa (hash: Uf99kb3DsMScTA1BM5TERzPIiuTDHtkj7NVJz/GaZHg=)
                          4: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=)
                          5: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=)
                          6: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=)
                          7: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: 9gHAn8tFNSoFa7w1sLKUtdFhUzu4qpzO2jQJaRKPqM4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:58:b5:e4:f7:75:a9:30:e5:a6:8e:25:61:54:9d:64:5b:5d:d1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Jul  8 01:27:07 2026 GMT
            Not After : Jul  9 02:44:07 2026 GMT
        Subject: CN=C6256F31734183292150AD33BA7A0EF2C7E9DEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:3f:90:e6:21:b0:63:ed:04:e1:a3:e6:ce:
                    35:15:db:ee:67:9b:8d:04:51:1f:b5:e4:8d:ae:87:
                    38:c2:d5:64:f4:60:69:6f:1f:de:18:bd:94:2e:a2:
                    1d:43:dc:c5:6c:8e:ff:57:cd:f3:be:05:0d:9b:a9:
                    7c:be:61:e2:20:6f:3f:58:63:fb:6c:6e:57:40:ae:
                    2f:8c:c4:dc:aa:26:70:4a:d9:ae:31:d4:38:bc:e0:
                    23:95:e9:3a:f4:1e:9b:dd:3b:36:3b:72:aa:21:ce:
                    9b:94:ee:2a:52:6f:23:b3:85:f8:44:c6:95:f7:bc:
                    9e:73:7c:04:5d:9f:9a:f7:b8:7f:7b:db:34:74:cc:
                    0b:55:f6:2a:a5:e9:99:a3:4e:ae:4d:64:79:50:aa:
                    3a:96:78:08:93:41:c8:09:af:26:3e:1d:56:72:69:
                    b0:89:65:34:80:3a:ba:00:ed:08:a5:d3:24:a3:eb:
                    fe:cc:38:ab:94:1a:9b:cf:82:26:eb:43:3f:b0:62:
                    46:a7:91:da:19:10:64:dd:a0:9e:90:18:bc:da:f3:
                    2b:4d:64:1d:e1:22:2b:67:e1:03:50:b2:d7:a6:a2:
                    4f:b8:7a:0a:5e:3b:00:ca:cf:70:c5:60:a4:5a:ae:
                    e5:40:55:f1:a8:92:a4:62:b7:77:ca:38:a4:fa:43:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:6F:31:73:41:83:29:21:50:AD:33:BA:7A:0E:F2:C7:E9:DE:FE
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:5c:90:d6:9c:ab:a6:58:b5:35:87:79:72:dc:04:bc:ab:
         9a:03:f8:c7:35:74:d8:3d:0f:a7:cf:6e:d2:8a:3e:54:06:2d:
         4a:4d:c3:18:75:c0:b8:48:3c:9f:42:0d:e0:ee:2a:65:c5:4a:
         20:f2:87:df:24:60:6b:d6:ec:94:c5:22:7d:b9:8f:18:c6:d0:
         11:f2:cf:66:8f:d5:77:e0:c5:e1:6c:d9:56:9e:23:8d:42:f4:
         2a:12:96:a6:48:1d:71:4d:7d:34:6b:0d:c3:87:55:96:63:08:
         6d:3c:bf:72:b0:b5:ae:3e:8b:a0:fe:c7:42:bc:0f:7c:df:5b:
         12:9f:18:d1:98:37:7e:65:87:5a:e8:0f:d6:a6:dc:55:63:df:
         91:66:90:82:b4:97:b5:64:6e:ac:90:9e:1c:a2:06:1c:f5:4d:
         06:a0:f5:84:19:cd:3d:54:04:b4:6c:3b:c5:3e:1c:8e:48:d0:
         b4:1a:47:83:8a:30:50:88:97:88:10:6b:85:90:d0:e6:99:e4:
         5c:a0:ef:8a:47:65:2e:b6:15:5b:aa:9d:d7:da:75:c2:51:c7:
         8e:a1:1b:e7:07:c9:f6:f1:8f:34:5d:72:ef:43:c9:cc:95:86:
         62:df:06:a5:a4:6e:4d:fa:0c:fd:5b:45:25:f2:16:e9:6f:06:
         67:2c:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:19:39 2026 by rpki-client