Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
File:                     3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json)
Hash identifier:          KXZs/k3Fk9b7NfEeT0Wtr3D2VO3Q8rtRgAWynphxnRY=
Subject key identifier:   D1:77:BB:A0:23:47:2A:67:9F:6F:9B:86:84:0E:75:B8:91:2E:49:DA
Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F
Certificate issuer:       /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
Certificate serial:       3DA18F3C7429599DCC966CC86CE0087455192734
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
Manifest number:          B7
Signing time:             Thu 09 Apr 2026 11:06:47 +0000
Manifest this update:     Thu 09 Apr 2026 11:01:47 +0000
Manifest next update:     Fri 10 Apr 2026 13:25:47 +0000
Files and hashes:         1: 323830343a393663383a3a2f33322d313238203d3e20323734333539.roa (hash: Ytqo8wa3MR5Sf7KXr1wl+CjQS/odKyL/1MiNLCin5fk=)
                          2: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: n8V4INJxRQ6Tx6gn84Id1K3T42C96plJSnXyssU4MFI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl
                          rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a1:8f:3c:74:29:59:9d:cc:96:6c:c8:6c:e0:08:74:55:19:27:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
        Validity
            Not Before: Apr  9 11:01:47 2026 GMT
            Not After : Apr 10 13:25:47 2026 GMT
        Subject: CN=D177BBA023472A679F6F9B86840E75B8912E49DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:27:31:76:05:71:ae:eb:56:fb:8e:b4:9d:
                    ae:c6:35:40:31:cb:10:98:33:15:a5:47:55:bc:75:
                    7a:c4:b7:c3:34:f2:55:60:01:33:f9:dd:18:7a:81:
                    43:ef:59:35:de:71:13:92:7b:99:5d:4c:d5:ed:54:
                    3f:c1:e1:2f:0e:18:15:63:96:ac:e9:64:e5:40:8c:
                    1f:ab:e3:6b:84:4c:6d:d7:bb:ab:53:7b:ad:a4:12:
                    8a:6e:9d:82:65:9b:d6:d5:9a:43:a2:2b:70:4d:d8:
                    14:9f:ae:9b:9c:50:1e:4e:7b:ac:6d:18:20:78:6c:
                    63:22:cf:3b:ef:cb:af:f2:e4:b4:8d:b4:5a:20:2a:
                    a7:32:2c:11:92:4d:ac:cc:38:b2:d3:9b:f9:79:1f:
                    5f:e3:2f:f6:4a:96:64:65:43:e2:a0:27:dc:50:41:
                    49:b5:52:84:03:0a:f7:02:b0:78:d6:e7:d2:2d:6f:
                    30:17:6c:61:27:96:82:86:6e:5d:27:2f:28:fe:bf:
                    8d:99:02:12:8b:5c:f8:65:e9:18:b0:95:4c:0a:c1:
                    c5:bc:93:22:36:9b:f9:9e:9f:52:9b:d8:3f:81:1e:
                    a9:0f:72:fa:6e:5e:88:3e:39:12:08:12:f7:b3:db:
                    f1:7e:ee:82:aa:16:40:aa:c1:1c:10:89:18:6d:d6:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:77:BB:A0:23:47:2A:67:9F:6F:9B:86:84:0E:75:B8:91:2E:49:DA
            X509v3 Authority Key Identifier:
                keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:81:3e:4c:88:18:eb:49:16:49:f7:12:93:52:51:27:a5:0c:
         3d:19:91:0b:fc:57:08:02:b2:8f:3e:6c:da:52:ba:a3:38:f1:
         ef:2f:bb:a7:c7:9c:e7:fe:9f:d5:e0:6e:35:e0:81:79:bd:04:
         15:e8:d5:12:be:6c:d9:b6:41:92:b7:b3:98:87:9d:3c:b7:25:
         f5:0e:f7:7d:2f:49:ec:82:b2:56:c8:5d:75:d4:04:70:7a:9a:
         ca:f8:9c:f2:11:32:3f:6e:05:ad:f4:5d:ec:c8:c5:ca:ab:af:
         3c:e5:ea:6c:98:40:cc:e8:68:fc:7f:86:88:46:94:8d:a7:94:
         79:32:fe:da:5f:f2:43:54:33:6d:19:f6:ab:49:59:d3:7c:14:
         b9:24:24:3c:0c:2e:c8:ec:b5:a6:f8:89:9b:20:b0:cb:28:3a:
         a7:d6:06:c1:24:b0:45:38:d5:48:5a:e3:69:f2:f8:fa:8d:8d:
         7f:6a:e4:33:96:6a:b2:f3:df:b2:3c:a2:fc:d2:7e:02:47:b0:
         18:f5:39:e0:96:19:3f:96:35:2f:4b:f8:2b:40:9b:7c:34:8b:
         36:ab:f2:87:23:90:57:6e:83:40:db:2a:e4:87:57:04:63:d3:
         06:3f:20:30:a9:9f:fb:fc:02:17:81:b8:27:5f:5b:e3:88:dc:
         a5:78:09:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPaGPPHQpWZ3MlmzIbOAIdFUZJzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E5RUNFMDFDQUI5QzMwNDg0MjIyNUYyNTU0Q0Y4NEY3
OTEwRjgzRjAeFw0yNjA0MDkxMTAxNDdaFw0yNjA0MTAxMzI1NDdaMDMxMTAvBgNV
BAMTKEQxNzdCQkEwMjM0NzJBNjc5RjZGOUI4Njg0MEU3NUI4OTEyRTQ5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kycxdgVxrutW+460na7GNUAx
yxCYMxWlR1W8dXrEt8M08lVgATP53Rh6gUPvWTXecROSe5ldTNXtVD/B4S8OGBVj
lqzpZOVAjB+r42uETG3Xu6tTe62kEopunYJlm9bVmkOiK3BN2BSfrpucUB5Oe6xt
GCB4bGMizzvvy6/y5LSNtFogKqcyLBGSTazMOLLTm/l5H1/jL/ZKlmRlQ+KgJ9xQ
QUm1UoQDCvcCsHjW59ItbzAXbGEnloKGbl0nLyj+v42ZAhKLXPhl6RiwlUwKwcW8
kyI2m/men1Kb2D+BHqkPcvpuXog+ORIIEvez2/F+7oKqFkCqwRwQiRht1gU1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0Xe7oCNHKmefb5uGhA51uJEuSdowHwYDVR0j
BBgwFoAUOp7OAcq5wwSEIiXyVUz4T3kQ+D8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1Jt
WWEvMC8zQTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUVDRTAxQ0FCOUMzMDQ4
NDIyMjVGMjU1NENGODRGNzkxMEY4M0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGJVektlbWZqSzg0UjVNaTJYM1RIOVh0ZE1McFBkV2c1R2l3d25oS1JtWWEvMC8z
QTlFQ0UwMUNBQjlDMzA0ODQyMjI1RjI1NTRDRjg0Rjc5MTBGODNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARoE+TIgY60kWSfcSk1JRJ6UMPRmRC/xXCAKyjz5s2lK6ozjx7y+7p8ec5/6f
1eBuNeCBeb0EFejVEr5s2bZBkrezmIedPLcl9Q73fS9J7IKyVshdddQEcHqayvic
8hEyP24FrfRd7MjFyquvPOXqbJhAzOho/H+GiEaUjaeUeTL+2l/yQ1QzbRn2q0lZ
03wUuSQkPAwuyOy1pviJmyCwyyg6p9YGwSSwRTjVSFrjafL4+o2Nf2rkM5ZqsvPf
sjyi/NJ+AkewGPU54JYZP5Y1L0v4K0CbfDSLNqvyhyOQV26DQNsq5IdXBGPTBj8g
MKmf+/wCF4G4J19b44jcpXgJPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:43:12 2026 by rpki-client