Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
File:                     D357DC68A05ED575BA6451EB468F237AA28B467D.mft (raw, json)
Hash identifier:          2lzeBZyXXvfbtBptzITfJ6INdUQdnFcVoaIf6ryZC8Y=
Subject key identifier:   DB:73:FF:52:E3:F5:1E:B3:D0:55:36:5D:FA:BB:54:A2:1F:4A:12:4F
Authority key identifier: D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D
Certificate issuer:       /CN=D357DC68A05ED575BA6451EB468F237AA28B467D
Certificate serial:       71F62CFBCBD54F06FE75F10578AC3AAC9AF85306
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
Manifest number:          15
Signing time:             Wed 08 Apr 2026 19:52:59 +0000
Manifest this update:     Wed 08 Apr 2026 19:47:59 +0000
Manifest next update:     Thu 09 Apr 2026 23:36:59 +0000
Files and hashes:         1: 34352e3138312e32302e302f32322d3232203d3e20323639313636.roa (hash: /cm/zTVx+fTAa7W4Y7HL83D5Bw+dp1W0fT+7KW4gOEA=)
                          2: 323830343a363036633a3a2f33322d3332203d3e20323639313636.roa (hash: a1EIt8+P6UuzU/4yMAlo9tuZ8mDcowKohV4IscOIHLM=)
                          3: 34352e3138312e32302e302f32342d3234203d3e20323639313636.roa (hash: x6IZzlv+DoDREZ9xvGXErgQWgHv3A8HqvS+yZk6O5cQ=)
                          4: 34352e3138312e32322e302f32342d3234203d3e20323639313636.roa (hash: 88GTJ5jgzIdA4n/LKWeR41RVT6v19QuT5FeiQgMnbqA=)
                          5: 34352e3138312e32322e302f32332d3233203d3e20323639313636.roa (hash: 4VAkRpmeewEer1R+SRjpPm9uWFKrjDaxtYpAFgd8d+U=)
                          6: 34352e3138312e32312e302f32342d3234203d3e20323639313636.roa (hash: n+alAGpmiUxr+rZJxcGmXqOaIR72D7you6hpi6PHep8=)
                          7: 34352e3138312e32332e302f32342d3234203d3e20323639313636.roa (hash: WSQDqS765U98sOev9jQVFoS9maBo8w63vwgbi+HXKxc=)
                          8: D357DC68A05ED575BA6451EB468F237AA28B467D.crl (hash: s9DSaV0HiezaXPPTp4HTGknndESHQhxnh2XrgPs0b90=)
                          9: 34352e3138312e32302e302f32332d3233203d3e20323639313636.roa (hash: hOZICdf5lcxfEjdggJVYwsaB2i5Q484ZxI9Tm9zPftI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl
                          rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f6:2c:fb:cb:d5:4f:06:fe:75:f1:05:78:ac:3a:ac:9a:f8:53:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D357DC68A05ED575BA6451EB468F237AA28B467D
        Validity
            Not Before: Apr  8 19:47:59 2026 GMT
            Not After : Apr  9 23:36:59 2026 GMT
        Subject: CN=DB73FF52E3F51EB3D055365DFABB54A21F4A124F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:6e:43:82:e2:27:27:57:23:c8:33:fa:4a:
                    36:f6:aa:ba:08:50:ed:aa:6c:f9:90:a7:91:92:40:
                    0f:48:ce:30:89:20:39:d6:6d:57:49:6d:20:69:24:
                    97:59:2a:b4:0c:60:73:81:0d:7b:4e:67:eb:b1:84:
                    b4:c9:2a:19:1f:6a:33:8c:41:7e:61:3c:20:ca:fd:
                    43:f6:ab:7c:0a:64:22:44:73:8b:d7:7d:d8:e5:d9:
                    d4:17:63:10:d9:fe:64:82:51:10:41:91:32:3b:2b:
                    00:b1:9a:43:8d:79:97:4b:72:45:05:78:55:cd:a7:
                    dd:56:79:35:76:1b:6f:d8:b7:ab:9a:cd:8f:77:e3:
                    c2:c5:c0:c3:c6:b3:86:d4:d3:ba:71:1a:8a:c1:76:
                    26:49:78:39:86:94:79:23:c3:49:5c:ba:84:a5:01:
                    f5:fd:75:42:16:a8:d6:d4:55:7c:75:78:ce:b4:b1:
                    45:62:11:3b:9d:c1:b2:d5:b8:28:77:f1:88:f9:f7:
                    2a:33:44:68:28:f7:45:99:01:83:4d:23:5d:61:76:
                    ef:95:a0:d4:cb:94:45:4f:56:87:b7:d2:dd:df:28:
                    12:2a:2d:3a:a3:7d:df:40:e5:45:13:0e:61:7f:2f:
                    84:ec:db:01:0a:82:fd:48:80:45:f4:d5:ee:cd:54:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:73:FF:52:E3:F5:1E:B3:D0:55:36:5D:FA:BB:54:A2:1F:4A:12:4F
            X509v3 Authority Key Identifier:
                keyid:D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a9:e6:7f:b0:31:c5:f4:45:b8:63:21:0e:93:4c:80:32:40:
         89:a8:50:55:ac:b5:53:43:7f:ff:d7:5d:01:d7:19:07:5d:52:
         ba:3f:dd:04:e9:5c:03:6b:6b:21:3a:b1:ee:bf:f1:6b:f3:ec:
         71:bd:f6:f4:01:05:81:d9:d6:a1:02:67:2f:f6:a0:3c:b8:1d:
         ee:50:b1:31:1c:1d:c3:b9:d9:96:b3:8a:96:81:58:da:dd:4a:
         27:b1:d0:02:2d:3e:d9:78:6a:d3:3b:0a:64:46:2f:8e:24:21:
         11:f2:42:4d:d1:cc:3a:90:f4:f8:84:c9:d7:80:eb:13:12:6e:
         e9:8d:79:7f:22:e8:c7:4e:b1:fc:8e:00:98:59:94:d1:1d:89:
         a1:66:cc:8e:bc:ed:a1:50:d1:41:ad:d7:fe:8a:6c:9b:48:4b:
         4c:2a:0b:c1:07:d7:65:c4:75:76:94:7f:22:2f:47:b0:96:cb:
         89:48:32:86:b2:fd:1c:ae:e0:69:28:fd:b0:b0:d2:67:47:33:
         9c:91:5d:2f:79:27:51:f8:31:6d:13:00:c1:e7:d8:a7:72:71:
         1a:04:cf:5e:eb:cb:5e:cb:bc:1c:cb:06:78:95:8f:ea:e7:c4:
         e1:d8:58:d9:32:61:0e:a3:a4:f7:61:ba:37:9f:0c:0a:53:60:
         c1:51:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:33:58 2026 by rpki-client