Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
File:                     D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft (raw, json)
Hash identifier:          eGpn5Y1nH593qV/lNuV41x2bzKgAauXvm3/vxlb4HRs=
Subject key identifier:   99:47:3B:0C:30:ED:BD:6B:C9:C5:6E:20:64:2B:7F:B3:5F:1F:90:1F
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       37AE7D7BC69FBE3A3BD483973919FA2F2CD70183
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
Manifest number:          0420
Signing time:             Sun 24 May 2026 10:48:39 +0000
Manifest this update:     Sun 24 May 2026 10:43:39 +0000
Manifest next update:     Mon 25 May 2026 13:58:39 +0000
Files and hashes:         1: 3136382e39302e3230362e302f32332d3234203d3e20323635323930.roa (hash: I7/+tc9Gco5v6aieNXfvG44RRwq6Pnk+nFax4Wsw0nM=)
                          2: 323830343a326439343a3a2f33322d3334203d3e20323635323930.roa (hash: WoH36DchhyfMMnaTBZudh1PyvGPqfTPoPrxPPqkfiJI=)
                          3: D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl (hash: yfpRTyl0Z0hH/b2gfKCxkq8l2v2GOxuKXGOjZib+Yho=)
                          4: 3136382e39302e3230342e302f32332d3234203d3e20323635323930.roa (hash: p3ijvNYejijyQQO6mVo8qXLR5KMrGrd5/Ft03bt2xwc=)
                          5: 323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (hash: NuES/p5zdtlcVvqdl+3ByjpMNejdqw1ZB8I1DvCu3tI=)
                          6: 323830343a326439343a3a2f34302d3431203d3e20323632353930.roa (hash: RWU07+lSz6LvybZadHrlkQqo01ax2bQvA9K8Y4Q86Tw=)
                          7: 3136382e39302e3230342e302f32322d3232203d3e20323635323930.roa (hash: M0LJfLJx8QGcmpO6DoaJdp6AJUvs3NESb9tkv617CEk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ae:7d:7b:c6:9f:be:3a:3b:d4:83:97:39:19:fa:2f:2c:d7:01:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: May 24 10:43:39 2026 GMT
            Not After : May 25 13:58:39 2026 GMT
        Subject: CN=99473B0C30EDBD6BC9C56E20642B7FB35F1F901F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:64:ae:1c:3b:a6:e3:b0:76:01:6c:33:26:
                    da:de:1f:4c:12:22:ef:15:d4:9a:bf:27:8c:40:c8:
                    44:31:03:09:c9:fe:76:e0:e9:0f:47:84:fa:f8:0a:
                    86:f7:df:36:de:9b:2d:64:53:cc:a9:f4:70:d1:da:
                    ff:39:63:5e:83:4d:bb:b5:93:22:21:a1:6f:21:1f:
                    bb:4a:0c:c9:88:91:ee:f7:55:08:9a:7e:d7:b2:8a:
                    82:5f:6a:a9:68:15:7a:1d:62:cf:05:b6:b1:3a:b4:
                    e9:14:7c:71:2f:d3:a3:ed:a3:b0:78:e0:67:0b:41:
                    de:08:d5:d3:7f:66:e8:be:02:95:3f:73:45:46:2e:
                    89:b1:25:d7:fb:98:49:14:7e:b0:9a:12:38:6f:a3:
                    4c:51:7c:cd:7a:da:82:8b:ef:cd:50:28:0f:a7:1e:
                    41:e4:50:31:70:52:9f:8d:3c:61:c6:01:11:1c:9e:
                    c2:b1:c3:8a:4d:6c:8a:a2:3c:b4:ba:4b:fa:f6:89:
                    e8:13:1d:64:f7:38:f4:e6:65:5d:24:6e:c9:5c:cf:
                    a3:6c:05:96:e2:ec:21:3b:17:b0:2d:4e:58:f0:f5:
                    2f:c8:f6:8b:a5:5e:5e:7b:58:58:49:0c:89:c9:2e:
                    24:8e:b4:45:a6:a0:e7:76:28:7f:a7:68:c6:79:18:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:3B:0C:30:ED:BD:6B:C9:C5:6E:20:64:2B:7F:B3:5F:1F:90:1F
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:bc:dc:39:5a:14:a8:5b:38:e1:e8:79:b2:04:5f:ad:6c:
         a7:f7:9e:b3:db:32:92:22:6c:78:0b:cf:18:e5:6a:90:0e:18:
         4f:ed:f2:58:46:71:78:50:b5:26:64:1e:03:aa:bc:ec:6d:62:
         e7:52:e9:1d:f1:23:a5:43:2e:ae:f3:b6:17:11:41:a2:77:c3:
         e5:03:af:c5:c5:4a:c5:fe:9c:50:b7:5f:9c:18:97:87:01:59:
         66:d1:68:eb:74:ce:9e:e4:0d:ba:72:e5:bb:3f:22:ba:2f:b1:
         f4:b7:40:3a:62:42:3f:f8:11:39:cb:7d:9f:1e:ff:fa:4e:d6:
         b5:b9:1c:a5:d2:39:be:c0:a2:c8:5d:b2:d0:18:9b:57:e0:73:
         6b:09:a6:2a:d7:21:9f:2e:c1:14:66:4b:79:bb:53:bd:3a:af:
         db:8c:60:2e:bd:29:ca:3f:db:e1:fc:ef:2e:58:20:3b:6b:a0:
         c3:9b:f1:31:82:da:75:58:de:65:91:f3:06:55:cf:8b:d5:6e:
         92:df:54:23:df:87:df:67:82:c6:5e:86:14:04:67:da:d2:59:
         5c:78:f7:9e:e8:a8:ca:db:cf:80:fb:2f:19:22:be:b0:8c:0d:
         3e:d5:9e:1e:2e:66:d7:cd:1e:f3:6d:39:3c:94:f0:7a:95:ae:
         23:aa:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:18:15 2026 by rpki-client