Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          U8WnRmXkCcEAgZhwgNg6DFwov1bcY9+2qfl/Q8jM6+E=
Subject key identifier:   01:AE:80:49:36:57:33:49:48:C1:9F:83:90:57:42:5B:C6:1F:DF:63
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       3FCE3E7E2C23CC38330F3FDAB1E03EC2DE615E0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          03D7
Signing time:             Thu 09 Apr 2026 08:29:37 +0000
Manifest this update:     Thu 09 Apr 2026 08:24:37 +0000
Manifest next update:     Fri 10 Apr 2026 11:32:37 +0000
Files and hashes:         1: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: Mfi2YXsn4usozNTkApzXZOTp/npyplnvShsrNKnIPOg=)
                          2: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: TclpcayILjjiL4SM51EvHYjWfxgdMraqN7PQNZS1cA4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ce:3e:7e:2c:23:cc:38:33:0f:3f:da:b1:e0:3e:c2:de:61:5e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Apr  9 08:24:37 2026 GMT
            Not After : Apr 10 11:32:37 2026 GMT
        Subject: CN=01AE80493657334948C19F839057425BC61FDF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:3d:cb:1d:60:0f:b2:8a:ef:a7:b2:a1:ff:
                    83:38:11:19:b0:23:c0:0b:f9:62:4b:de:24:6d:7e:
                    e8:ea:d4:d4:cb:bc:ed:ba:d9:0c:03:90:2e:b8:bb:
                    34:18:00:34:2f:be:79:dd:e8:4c:f0:69:91:ab:e2:
                    af:15:22:b4:82:e7:22:a9:fb:ba:61:d9:e5:ce:0d:
                    0d:7b:dd:9c:7f:77:36:51:fa:32:74:27:ba:38:ca:
                    2d:4d:b1:4d:b7:7c:df:5a:da:a1:c4:3e:a6:77:72:
                    f5:4c:b7:44:bd:55:76:a5:8d:be:a3:d5:d3:c7:0d:
                    bd:f7:22:d0:a4:0a:7f:4c:cb:ab:98:c6:ea:2e:e6:
                    92:e9:ae:2f:15:ee:e0:e6:4a:0d:04:ab:a2:19:21:
                    c3:b8:f5:da:8d:b8:3a:ee:54:cd:e2:1e:cd:84:0b:
                    ff:2d:12:95:b6:88:7f:3d:ed:c4:ab:8b:bc:eb:31:
                    ef:8b:6f:e4:43:e5:50:78:fb:8e:30:5c:37:f3:3a:
                    07:bb:e7:19:70:0c:9d:69:dc:88:d6:d5:96:fd:fe:
                    47:97:69:c0:86:66:09:37:77:80:e5:07:c4:79:dd:
                    2c:ff:7b:ba:3c:70:8e:87:ea:10:dc:47:6c:79:1c:
                    61:d9:c9:d0:79:ef:2b:df:30:60:7a:b8:8f:71:bb:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AE:80:49:36:57:33:49:48:C1:9F:83:90:57:42:5B:C6:1F:DF:63
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7c:44:65:76:8c:d9:b0:2a:4d:aa:be:29:a2:99:e3:91:5d:
         bd:d3:4a:3b:90:73:d5:46:b7:4c:36:cc:5e:d3:08:26:03:d7:
         5d:c1:9f:90:3d:43:5b:53:ea:78:53:d9:0d:af:f7:ba:05:fb:
         8a:95:aa:1d:92:a6:97:4b:18:ff:db:88:a9:4a:7a:a2:22:c0:
         6f:4b:e9:06:ee:87:fd:de:68:90:07:ac:aa:6d:1b:eb:87:92:
         29:38:63:4c:33:06:66:d9:cd:41:81:97:5e:bf:fc:6b:ba:eb:
         81:a7:32:f6:06:56:d1:0b:b4:7e:3e:97:fc:a7:81:60:bb:d2:
         ee:2a:94:87:bc:84:8f:89:e7:6d:2e:4a:8e:cb:51:f0:f7:87:
         e5:fe:26:a2:18:c8:47:a4:56:a7:51:8d:e0:bd:93:76:13:96:
         7a:22:fd:e3:62:07:d2:89:42:fa:0f:2d:c8:f6:f2:ce:59:96:
         4d:22:c4:30:32:23:96:79:bd:35:82:be:80:55:73:8e:77:b1:
         1c:d2:38:fb:cf:00:6b:49:5f:b6:3c:3e:11:26:28:52:c8:47:
         e6:17:5e:ec:44:f1:fe:17:07:3c:b5:19:4a:c6:49:64:15:eb:
         ca:5a:49:d2:43:02:f5:75:5d:6f:86:f2:b9:43:91:34:9c:1c:
         31:9c:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:13:57 2026 by rpki-client