Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          Va0tumTNd6acELB/G4CeUptFweJ1bIXsI+ZkIeSQrAI=
Subject key identifier:   99:F3:0A:A7:88:A9:E2:F6:64:90:4C:5D:3A:5B:46:BF:AE:7A:74:E8
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       7CA56496AADF5E790DE7D6FB854FA17EE75D464D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          0411
Signing time:             Sat 23 May 2026 21:30:00 +0000
Manifest this update:     Sat 23 May 2026 21:25:00 +0000
Manifest next update:     Mon 25 May 2026 01:28:00 +0000
Files and hashes:         1: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=)
                          2: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=)
                          3: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=)
                          4: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: p8H/GRkW5V1qWf2jewXlHEMjzNIQZUgqEqSh46nQha8=)
                          5: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=)
                          6: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: qlvvK7Eq5/lWUhPKseppGgxaush80fH+JFg/2kEwrkU=)
                          7: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: lWRtmkBSnSvgHB2BHephr0+UFyu3mAsBaKRfWww3Ibw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 01:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a5:64:96:aa:df:5e:79:0d:e7:d6:fb:85:4f:a1:7e:e7:5d:46:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: May 23 21:25:00 2026 GMT
            Not After : May 25 01:28:00 2026 GMT
        Subject: CN=99F30AA788A9E2F664904C5D3A5B46BFAE7A74E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:0f:b9:d6:50:bc:52:d6:cc:03:de:70:74:
                    96:91:88:05:73:3a:7f:f2:49:f6:c9:0f:6f:6e:73:
                    8a:e6:d4:73:14:ee:94:ef:33:57:97:35:8a:0e:fc:
                    4d:16:67:ad:0f:40:af:4d:2a:7e:49:92:50:d3:19:
                    76:db:73:91:f5:f1:d0:bf:82:04:fe:9e:a4:b8:ad:
                    a1:00:49:96:cf:66:2a:b4:c2:d3:e9:b2:82:9f:a4:
                    71:f5:5d:01:dc:56:f9:2a:5b:08:d5:c7:a4:8e:82:
                    e8:5a:ed:c3:0c:26:13:4e:b2:06:4a:cc:82:fc:6f:
                    87:5e:7e:e0:01:73:69:8e:c9:7f:3c:10:89:c5:4c:
                    da:ec:9d:5d:f2:39:8d:8b:83:37:01:17:9f:d7:65:
                    17:a4:dc:b0:45:44:14:e8:8e:d3:0c:b4:8b:df:66:
                    19:ac:d5:8d:c7:0b:71:ae:d0:33:59:d1:08:81:0a:
                    bf:98:f7:f1:a9:6c:d8:cd:41:4a:73:bc:f7:a6:a7:
                    eb:4c:16:9a:c7:ec:bf:26:b6:d5:67:91:d0:26:16:
                    4e:69:ab:54:bf:8c:98:a4:35:a0:ae:5c:93:57:0e:
                    c4:c2:8b:3b:04:1a:36:6a:8c:d4:81:b7:88:55:2d:
                    e4:ce:db:2f:8c:76:ef:13:12:e7:e5:d8:b5:2c:89:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:0A:A7:88:A9:E2:F6:64:90:4C:5D:3A:5B:46:BF:AE:7A:74:E8
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:1b:ed:98:d9:7e:54:6a:d4:05:4f:49:56:05:50:8e:6b:
         d6:38:f0:23:75:cb:0c:fc:c1:1f:1a:ba:cf:7c:52:83:c7:3f:
         af:4d:cb:26:e1:bc:e7:af:1a:93:1f:b2:8e:fb:c8:ce:25:27:
         78:65:59:c6:17:b7:08:45:ae:74:75:92:70:10:81:fe:65:7a:
         ba:22:1a:7c:25:55:33:ba:d1:7f:f4:80:04:7a:79:7e:0e:3c:
         4e:0d:66:d7:e7:d2:40:43:95:c3:a4:90:9d:94:4c:66:f6:56:
         b1:fd:03:45:62:bf:d9:18:ba:98:1e:7f:4d:69:5e:a5:34:a9:
         80:e8:95:e9:f6:cf:a7:3a:1e:b0:68:64:4e:6c:ad:e9:17:51:
         53:a0:20:2f:1f:ef:dd:36:7c:64:87:bc:02:c8:33:19:55:0a:
         7a:a1:11:5a:3b:15:7c:a4:60:a5:18:81:56:0a:ed:49:0d:b1:
         5a:5a:e0:49:70:0d:49:a0:fa:48:44:c5:8d:82:d7:af:a8:b2:
         a1:b0:b0:1e:1a:2f:ba:6b:e9:5a:b9:de:8a:4e:bd:82:d6:5d:
         fd:31:5c:a5:45:b2:df:b1:a7:e2:ad:ea:66:f9:0f:58:d8:1c:
         d7:cc:74:f6:37:2d:4f:52:90:05:96:a2:37:1e:9d:ef:b4:ef:
         ec:8d:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:14:48 2026 by rpki-client