Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          L6hDrroGqE8E2yTpjWIol5/S1hIcy4UYqa8lL6rOX0U=
Subject key identifier:   FE:C6:AB:3D:BD:3C:A5:09:8D:4F:E7:07:4B:21:70:1C:9D:7A:7B:95
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       422F9FAB0A6B63907E040B06D5047C5C27FA5599
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          0484
Signing time:             Sat 22 Aug 2026 21:40:03 +0000
Manifest this update:     Sat 22 Aug 2026 21:35:03 +0000
Manifest next update:     Sun 23 Aug 2026 23:52:03 +0000
Files and hashes:         1: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
                          2: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
                          3: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
                          4: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
                          5: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
                          6: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
                          7: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: YVf8sftqncmaYAjJaYQq10TypD+Iw3sqZq3g8tppQTA=)
                          8: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2f:9f:ab:0a:6b:63:90:7e:04:0b:06:d5:04:7c:5c:27:fa:55:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Aug 22 21:35:03 2026 GMT
            Not After : Aug 23 23:52:03 2026 GMT
        Subject: CN=FEC6AB3DBD3CA5098D4FE7074B21701C9D7A7B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:37:76:87:31:9c:8c:40:eb:64:c8:34:32:31:
                    fa:58:08:2c:52:c1:0a:d0:7a:49:e8:d7:67:65:3b:
                    db:77:97:4e:86:e8:bf:f3:5c:c7:bf:45:9b:ba:fd:
                    6d:8e:15:56:02:31:3f:bb:74:52:60:2f:2c:0c:1e:
                    91:0e:25:55:84:a1:28:74:08:dc:56:a9:12:a9:1e:
                    6e:67:31:87:b1:9b:0f:a4:89:f2:7c:1d:ec:85:9f:
                    c1:97:1a:b0:b3:ab:76:17:c0:d2:d2:c3:cc:4c:b0:
                    ff:80:c4:90:5c:46:81:5b:8d:c7:c3:e3:2d:49:68:
                    a3:ff:4a:67:38:61:c4:bc:ac:65:6c:60:9f:8e:91:
                    e4:6f:f1:ec:95:92:b8:76:21:ae:d6:be:87:93:1a:
                    4a:47:94:9b:8a:a9:30:8b:d3:94:d6:73:e7:62:60:
                    c7:f0:01:21:8e:8f:36:c8:16:83:88:07:ab:2e:f0:
                    30:68:b0:17:60:b9:6b:ed:86:dd:ea:4a:f9:e6:70:
                    fe:38:55:7b:16:df:fb:ca:c5:88:ba:06:9d:3c:68:
                    b6:fa:5c:be:57:8d:89:f6:0e:bc:53:34:a1:c6:5b:
                    ed:67:d1:de:4c:aa:dd:76:6b:7c:39:15:d9:5c:38:
                    bc:a2:20:a6:f8:5d:44:82:ee:4e:57:06:2e:ed:8f:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C6:AB:3D:BD:3C:A5:09:8D:4F:E7:07:4B:21:70:1C:9D:7A:7B:95
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:48:c3:de:6d:1d:4f:f7:e1:62:15:53:45:68:65:42:f4:80:
         5b:18:9c:83:c5:0f:18:d5:f4:3b:92:d6:76:fc:d0:4d:f6:14:
         56:b9:64:91:8b:83:ff:01:a0:bf:5e:66:ba:0e:dc:63:74:b6:
         88:0e:1f:27:e0:bd:ca:a1:46:a2:59:b7:3d:0b:37:cd:76:0e:
         4c:0b:3c:89:41:f1:1f:a6:2b:6f:3e:7a:2d:60:76:93:6d:c0:
         32:43:51:30:a1:34:d6:6f:7b:51:9e:8b:d9:4a:93:d0:bc:01:
         2e:a7:fe:c9:eb:83:85:43:41:58:29:2f:4d:d2:3c:2a:bb:86:
         10:99:cd:b2:8a:f6:59:b3:44:8f:94:4a:97:ce:01:72:db:42:
         d1:9b:5e:4c:89:2a:93:90:f2:1e:5b:b1:7f:d4:04:f5:aa:1e:
         ef:3c:3c:e5:0f:5a:39:c1:f5:ea:1f:c7:41:bf:ee:1a:31:64:
         c9:7b:2e:8d:4d:39:d3:27:49:e1:0c:4f:aa:10:32:44:7a:b6:
         4d:d1:2b:9e:0b:09:b1:4e:b0:5f:a5:7d:e6:fd:69:c5:b6:eb:
         e4:74:16:49:a7:b1:3e:bc:4f:94:18:a2:d6:3a:a0:16:cd:63:
         bd:85:93:b3:55:28:04:ae:a2:40:f2:ba:74:35:81:5a:25:82:
         b2:f4:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----