Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
File:                     68B41BBED51EE048421EC599A4F5A1921313EE8A.mft (raw, json)
Hash identifier:          Gb2Uc3u7KXYr1c/86mth/0+DzzmeXR6GX64HcuofJXA=
Subject key identifier:   D0:9B:E1:DE:C8:E5:83:9C:01:5C:F9:DD:CD:A7:68:D2:E2:F4:F1:E7
Authority key identifier: 68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A
Certificate issuer:       /CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
Certificate serial:       7C2F3D1BEB997FB5583FA6C197F2C9855F80C0ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
Manifest number:          38
Signing time:             Thu 09 Apr 2026 00:08:23 +0000
Manifest this update:     Thu 09 Apr 2026 00:03:23 +0000
Manifest next update:     Fri 10 Apr 2026 03:34:23 +0000
Files and hashes:         1: 68B41BBED51EE048421EC599A4F5A1921313EE8A.crl (hash: Oqewqsx704smAA7qgKtV3IyASJraHX0YC3Ebf4ccAZk=)
                          2: 3134332e302e3230392e302f32342d3234203d3e20323634303732.roa (hash: tON0s8T5pvUfZu/V5hro0iOgf1Nf6nERHxxOBV8KRtQ=)
                          3: 3134332e302e3231302e302f32342d3234203d3e20323634303732.roa (hash: r3lZ+wNjKx8dDydw8Gk3bx0YoHVTzu2J+UEDifWQZfw=)
                          4: 3134332e302e3230382e302f32342d3234203d3e20323634303732.roa (hash: Zzhw+XxTzHQ/UX9R7g24DO/SLqsavmh8vXRkUvCM5tg=)
                          5: 3134332e302e3231312e302f32342d3234203d3e20323634303732.roa (hash: b4sz9n0viOdaQJvP+/qcOXce3XtJO2fTIRsFf/k+CjE=)
                          6: 323830343a326136633a3a2f33322d3332203d3e20323634303732.roa (hash: wxalZ4pmCdSaD1nNXmEQteaVSjY/BuOm/g8GVOx8t0k=)
                          7: 3134332e302e3230382e302f32322d3232203d3e20323634303732.roa (hash: zM6jafO7E4+LwdVbuLQZ02WcHpaj4z7JNMvPD+59/iQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:3d:1b:eb:99:7f:b5:58:3f:a6:c1:97:f2:c9:85:5f:80:c0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
        Validity
            Not Before: Apr  9 00:03:23 2026 GMT
            Not After : Apr 10 03:34:23 2026 GMT
        Subject: CN=D09BE1DEC8E5839C015CF9DDCDA768D2E2F4F1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:ae:04:7c:23:43:a9:5f:aa:5d:1c:98:a1:
                    a2:1f:58:71:fe:8f:c5:8f:93:e3:15:1c:b3:32:f4:
                    4e:26:4f:5a:8d:7c:ee:91:68:e9:e2:82:53:4a:3d:
                    3f:3f:99:30:a0:37:d8:36:dc:9c:b3:c2:81:a4:48:
                    22:98:df:92:11:2a:31:8f:98:5f:0d:9a:64:62:cc:
                    49:1a:c1:e7:da:61:a0:75:34:1a:7c:7d:10:78:4a:
                    6e:14:16:47:32:da:55:f4:8f:6b:a6:fb:2d:48:9b:
                    29:9a:9e:7b:75:dc:64:e0:3d:e0:57:69:d9:a5:8e:
                    19:8f:5d:ec:dc:db:d0:91:97:31:9c:f8:d7:22:cd:
                    f9:6a:8d:f0:ef:58:b5:a6:75:4d:c7:15:7f:33:b3:
                    63:9e:99:c2:17:83:06:1d:9b:00:28:cd:f3:8d:71:
                    d5:83:bc:ff:c8:6c:78:1f:32:a6:1e:7c:6f:7b:91:
                    47:f3:d8:5c:38:29:ad:a7:80:ab:c1:24:20:5c:b1:
                    d9:5a:9b:52:0e:e3:cd:a0:21:2b:32:53:16:58:90:
                    a8:2a:21:22:2c:aa:f4:f5:5d:2f:5e:2f:67:b1:fa:
                    d0:c0:54:97:5e:bf:cb:a1:6a:88:8c:07:53:b9:3e:
                    10:f3:a5:cd:2b:61:e6:24:fd:90:5c:eb:73:53:6a:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9B:E1:DE:C8:E5:83:9C:01:5C:F9:DD:CD:A7:68:D2:E2:F4:F1:E7
            X509v3 Authority Key Identifier:
                keyid:68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:70:6a:ff:2d:b6:92:fd:70:2b:55:9d:b8:d0:6e:5f:cd:15:
         c3:aa:6f:19:06:3e:26:0a:22:f3:71:fb:0d:62:fc:85:1c:06:
         25:3e:9c:d8:ae:b3:fe:cb:31:4d:f0:7e:f7:13:b1:11:7e:84:
         7c:90:d9:f2:42:99:d6:14:58:ea:e2:77:29:80:e0:8c:4b:25:
         73:84:16:de:c9:8f:f8:b5:07:b6:f1:1b:33:1c:07:f8:3b:9c:
         60:e5:8d:90:ab:88:da:cb:23:05:1b:2f:3b:b6:64:52:cd:66:
         78:9b:a4:85:5e:27:73:b9:4c:cb:48:04:8b:d1:c3:97:a9:cc:
         ec:5c:df:ca:79:ce:66:9d:22:16:38:d0:ee:2e:9e:a7:9e:20:
         53:25:d5:60:87:15:9d:8b:3e:9f:d9:87:b8:88:69:4b:b3:a9:
         21:00:87:a8:09:a1:a9:ec:ab:ab:25:ec:4a:5c:c1:d3:37:f8:
         a1:ad:e9:e2:ed:d7:c4:78:ae:ca:e8:c4:83:69:98:bc:84:e3:
         5b:21:a5:3e:f6:17:ba:5f:2d:bd:f5:6e:12:0d:af:72:be:0b:
         7e:37:c3:5d:5f:5f:dc:a0:96:6d:67:ff:82:5d:26:25:a7:ad:
         3e:02:6d:d0:91:bc:e1:c8:64:d8:8e:b6:a4:d0:3a:db:ae:44:
         d3:f1:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:11:39 2026 by rpki-client