Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          S0Cxd+eAxxNWJgzRo7M4N0Gydv0BaJUV3Bn8PmZGNis=
Subject key identifier:   90:B0:76:1F:FE:71:08:64:EE:89:4A:AA:36:81:2E:87:5A:AC:A3:2F
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7705F09D761039705D053EC50A00D01A41C7FF78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          0314
Signing time:             Thu 09 Apr 2026 09:22:09 +0000
Manifest this update:     Thu 09 Apr 2026 09:17:09 +0000
Manifest next update:     Fri 10 Apr 2026 12:19:09 +0000
Files and hashes:         1: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: 14FHE6zmhSnBphK8r9h/sTCvAXLmSQ2AOYVJqOdtMCU=)
                          2: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: ZxtUGA5deC/zbWluiWJ77qtyRWRAt7GQgEShJ9N2Y9Y=)
                          3: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: s7QXeX2vq8O5spZaWQpOWd0FB4fwiDOt/mIE//O0u84=)
                          4: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: gSG2IH0mhehp6KRqkDAwBhoDX02TBWqyKucR8jhGqhM=)
                          5: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: 095KOiCgelfFAJaEWZp4FBq2DB3dXDZ9yQVjrdfn984=)
                          6: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: baYSgeyu1Fh792QHXa/jVzjbIEks13VYEFPNKOFhRUw=)
                          7: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: +RGEkzxRA74ajmZ2fh7tf2IoaWC97UXa4wz/EcX66Fc=)
                          8: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: WIZeG9VXENqyRBdnsn2Zw89aWs+DTTdhSsrCc+RAnv4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 12:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:05:f0:9d:76:10:39:70:5d:05:3e:c5:0a:00:d0:1a:41:c7:ff:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Apr  9 09:17:09 2026 GMT
            Not After : Apr 10 12:19:09 2026 GMT
        Subject: CN=90B0761FFE710864EE894AAA36812E875AACA32F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:6d:90:d5:b5:34:40:63:47:ef:33:a4:3d:
                    83:b9:49:27:7d:6c:24:95:71:04:a0:70:88:7e:69:
                    c7:f6:d5:c3:58:dc:2b:ed:c0:74:8d:8e:51:a8:13:
                    09:46:ec:b7:aa:6f:aa:9a:50:5e:1b:c3:0b:d1:d8:
                    6e:ff:f7:09:8d:24:30:be:2e:89:c5:bd:21:65:a5:
                    0e:55:37:7b:2a:ee:c9:dc:56:d4:28:fe:98:30:45:
                    d6:01:c4:a0:b7:f0:37:4c:08:95:b9:7e:fa:a0:e5:
                    b9:83:5b:d2:25:c5:d4:6f:f2:fa:9e:92:7f:6d:99:
                    9d:76:c4:d1:b9:d0:c1:fd:d6:b4:00:e8:91:89:cc:
                    dc:b7:9b:69:54:b9:09:75:60:2a:b4:e3:3a:20:3a:
                    ae:52:9c:a2:29:b6:f0:3c:9d:27:f3:71:14:35:41:
                    f8:3c:09:71:91:53:34:1d:ed:d0:e7:b2:b1:65:98:
                    f8:de:e7:0e:22:90:3b:bf:14:9d:59:19:fc:6e:99:
                    db:3a:d5:6e:e0:2f:8b:b0:be:e1:6d:68:04:89:4e:
                    ce:fa:af:12:0d:ce:69:79:17:b1:26:39:70:0a:38:
                    fa:73:75:40:ef:10:90:ee:5b:36:cd:b5:8a:a8:7f:
                    9e:3a:1d:f8:17:01:35:f9:1a:cf:ed:91:e4:5a:aa:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B0:76:1F:FE:71:08:64:EE:89:4A:AA:36:81:2E:87:5A:AC:A3:2F
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:5c:95:3c:82:f7:d7:35:df:a8:26:be:b2:d2:22:dc:dd:
         7a:e6:97:35:01:5c:cf:66:a3:26:e4:52:3a:3d:11:58:ab:59:
         cf:3e:73:2d:9a:59:80:39:9c:30:91:ac:b9:9f:71:51:9a:a0:
         7b:c7:09:fc:68:52:a9:76:49:4d:6b:49:0b:e5:32:06:06:e1:
         be:98:6b:89:15:a2:32:ec:4d:3b:50:6f:7f:46:81:5b:d3:38:
         b4:1d:ba:3d:fd:96:49:6e:20:6d:86:49:40:7a:52:29:e3:ca:
         7d:c5:a5:92:c7:5f:e7:c8:b3:dd:02:60:10:97:67:cb:47:8b:
         02:ad:df:9d:49:3b:05:7b:53:ce:37:0f:dd:7d:8a:09:9b:29:
         19:55:dd:c3:1f:fb:1e:88:9a:47:37:e5:36:c8:2b:ae:75:56:
         38:20:08:93:5a:8e:4b:a1:8b:ad:68:f1:8d:94:87:01:30:ab:
         6e:b5:00:26:54:c3:41:14:31:eb:af:ae:34:2d:ed:5b:d0:93:
         46:db:8b:b0:40:22:c5:68:45:34:3a:37:ff:e2:e3:b1:ec:77:
         3f:f6:3f:aa:dc:5d:df:99:04:1f:f3:3a:21:76:10:b0:07:33:
         b5:a8:0b:14:ab:da:6f:e7:e9:8d:df:df:83:fe:36:6f:02:e5:
         4a:de:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:58:45 2026 by rpki-client