Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
File:                     21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft (raw, json)
Hash identifier:          QOE3xg5n9wKd9cIkpTsIAS0xuGL5B2nLZlhOab7qgwo=
Subject key identifier:   15:61:F0:FB:55:4D:90:C8:77:70:E5:EA:56:90:94:5E:6B:6F:DC:EC
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       6D19894E37A049F7B58E80D43B2F69B615C9CCA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
Manifest number:          A3
Signing time:             Thu 09 Apr 2026 04:10:45 +0000
Manifest this update:     Thu 09 Apr 2026 04:05:45 +0000
Manifest next update:     Fri 10 Apr 2026 07:00:45 +0000
Files and hashes:         1: 3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (hash: lUN+QHTKJKyHBU3vjixy9YwVPc/E7x0KU1Uy3nCCZ9k=)
                          2: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (hash: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs=)
                          3: 3137372e39312e3136322e302f32332d3233203d3e20323633343434.roa (hash: qfhSga2IMpoaAnUO25wNSoxFtOa32oTy1r7EZiIHqUA=)
                          4: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (hash: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=)
                          5: 3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (hash: rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=)
                          6: 323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa (hash: 87cH/zfVlYwo/lhL99VL56iNS+3f0irZ7ULeW4B23KA=)
                          7: 3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (hash: 8AGZo5c6QxM495LEDMYWHMa04vhnyj+L2PBY1psr7lo=)
                          8: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (hash: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI=)
                          9: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs=)
                          10: 21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl (hash: mGOcUPw/ZFNDy31QxQENxo8RYH8356acgfM/atP3zDQ=)
                          11: 3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (hash: msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=)
                          12: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: UTzGGjVGwAzOOUF7F0ZvNmPm5rv5LvLa1K3tF9sa8g4=)
                          13: 323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (hash: 47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=)
                          14: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=)
                          15: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (hash: jIt7K6cMDluL2ivR2MlC/lVEKDeY8cBnN5Cq1s8X470=)
                          16: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (hash: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo=)
                          17: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg=)
                          18: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (hash: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8=)
                          19: 323830343a313164633a653030303a3a2f33362d3336203d3e20323633343434.roa (hash: sdWDdEzXTllJ+b9NYdd0B6N/n2HV3FuMKb/yJx7dh8k=)
                          20: 3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (hash: RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:19:89:4e:37:a0:49:f7:b5:8e:80:d4:3b:2f:69:b6:15:c9:cc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Apr  9 04:05:45 2026 GMT
            Not After : Apr 10 07:00:45 2026 GMT
        Subject: CN=1561F0FB554D90C87770E5EA5690945E6B6FDCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:14:17:64:51:75:4f:10:c4:f9:6d:44:9d:
                    e2:4c:42:47:55:1f:4d:d6:d1:89:77:e5:28:87:d7:
                    de:a0:4f:c0:6e:c6:84:c1:08:4e:49:87:b5:80:31:
                    ce:09:54:27:58:92:62:39:9e:05:00:44:1e:09:65:
                    99:4c:d9:bb:9a:be:66:87:fd:ed:a2:ce:79:fa:1a:
                    8c:87:0b:29:2f:80:43:db:0b:ce:06:ea:ff:5c:07:
                    97:f5:90:44:2b:60:6b:1a:53:e3:fa:16:5f:fb:d8:
                    c5:55:7f:ec:1c:dc:71:41:b8:9f:a9:fd:32:5e:03:
                    08:ce:d0:2e:9d:af:7c:6a:b7:5f:fb:52:4f:a1:16:
                    5e:b2:55:13:9a:fb:35:45:6f:29:86:82:94:d4:ee:
                    d4:58:92:46:c0:e7:bf:d1:3f:fa:4b:b1:9a:60:e9:
                    e2:80:e1:53:6f:b3:80:76:36:f2:94:d2:b1:82:e2:
                    f1:4e:b7:ea:71:b6:96:dc:f8:5a:44:c0:ae:b4:e2:
                    91:d6:29:7d:2c:a6:8f:01:36:28:3a:bc:73:39:1e:
                    94:b3:80:1c:b4:0c:e4:8f:c2:ae:85:94:43:d7:c4:
                    b8:30:96:89:cb:7c:45:57:70:be:35:91:ed:d6:0f:
                    6d:4b:58:0b:9e:8f:bf:fc:8d:cb:fa:ff:0c:32:65:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:61:F0:FB:55:4D:90:C8:77:70:E5:EA:56:90:94:5E:6B:6F:DC:EC
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:06:ba:a0:86:47:b5:22:91:ac:50:4f:e8:b7:d9:d6:f5:
         c0:83:cd:e2:c3:75:a3:86:e9:60:a4:9a:16:3e:75:d6:a7:56:
         46:02:d3:ea:63:cc:a2:0c:7f:3e:5e:83:9e:21:e0:71:80:76:
         d0:bb:ad:ca:ea:9e:4c:71:09:63:54:b2:05:5f:15:b0:fa:6a:
         66:55:e9:23:2a:f1:49:ff:c9:8f:79:f8:20:b1:de:c4:f4:12:
         b4:fb:0e:44:af:eb:98:51:94:25:b5:03:1b:21:75:6e:e0:de:
         af:fe:84:d4:0b:f0:71:cc:6b:31:57:f7:92:14:c7:a4:e7:38:
         94:82:9f:e9:c4:73:29:b8:e4:90:9d:c5:9d:2f:19:45:75:b9:
         8e:15:4c:c4:cb:b2:cb:3f:18:cd:a9:12:7d:d4:8d:67:9b:77:
         2d:0a:6b:b7:c2:62:7a:f3:5f:12:28:b1:47:6a:74:41:01:0d:
         bc:dc:5d:fb:7a:8e:61:93:82:6a:41:be:c3:62:5d:b7:d9:a6:
         a4:93:35:dc:56:65:ff:31:a2:97:7c:59:be:9d:0b:e4:84:19:
         e4:d3:ac:34:54:90:73:a4:56:06:39:8d:7e:36:c3:4d:93:2d:
         62:09:2b:1b:08:5d:79:9e:dc:7e:c9:fb:f8:7a:b9:45:73:1e:
         3b:f2:96:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:48 2026 by rpki-client