Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft (raw, json)
Hash identifier:          W27uOnNHjgHVhQ1TS45DrvAMzXXDWI8YdvEcdbtyUNY=
Subject key identifier:   52:C8:B2:CF:94:BA:48:B2:B3:4D:61:25:DC:FC:C6:9D:5A:C3:27:18
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       4E60BE1E66C37D3BCD6C3275678BA3849746EF06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
Manifest number:          0488
Signing time:             Sun 23 Aug 2026 02:50:00 +0000
Manifest this update:     Sun 23 Aug 2026 02:45:00 +0000
Manifest next update:     Mon 24 Aug 2026 03:04:00 +0000
Files and hashes:         1: 323830343a353839343a633030303a3a2f33342d3334203d3e20323638313337.roa (hash: cEwt9tAcYg/tPJsdu0h9v2jPxe6YnCNBUoRsDOeOpI4=)
                          2: 34352e3136392e3230322e302f32342d3234203d3e20323638313337.roa (hash: hbpAJfKG+q1lZWo45Xw+PI5oM7CqIFtAFxFHYOz+KV0=)
                          3: 323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (hash: bz1VOpj7Z4SDIz4QZ8GlIWPYemr430Xkb+/DgZugT5Y=)
                          4: 3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl (hash: 4tUsa9HzB7jJLh6Nl5kmQhiefYavX4OZcoEgsNCuQ/M=)
                          5: 323830343a353839343a3a2f33342d3334203d3e20323638313337.roa (hash: qrpBxrpryO91KOSp85X9LiP7JK2GnhJ1pt1IlNYa8L4=)
                          6: 34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (hash: NOpkkdKHZl2sm1Yk321itcmwn2cTp5cD+VylHt8rLQk=)
                          7: 34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (hash: samO1SX/LWGHZ+d14xtRy1V+AxvH9OpVmr/pVzxXc8w=)
                          8: 34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (hash: BW732DJf31ibZWHCBgengiBefKNcSEbzI1GLo2wgcys=)
                          9: 323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (hash: bt9vkEq68ix3LcHGlpNgMciOVQkDTAn4IyuIW/3oGs0=)
                          10: 34352e3136392e3230322e302f32332d3233203d3e20323638313337.roa (hash: GPLulI9Ql4WCONz8OpxK8x+jGuTOK8IkIzss5rZOHAM=)
                          11: 323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (hash: WzXfjD+aj3+LywIEc4PnqNSuvQQroIrxB1Q5JOrvgK4=)
                          12: 34352e3136392e3230312e302f32342d3234203d3e20323638313337.roa (hash: dc4/gja5cP4Se1wjmo3JEnEebVpqz/3lqWUTuirgZJ8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:60:be:1e:66:c3:7d:3b:cd:6c:32:75:67:8b:a3:84:97:46:ef:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Aug 23 02:45:00 2026 GMT
            Not After : Aug 24 03:04:00 2026 GMT
        Subject: CN=52C8B2CF94BA48B2B34D6125DCFCC69D5AC32718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:e0:d5:b5:82:c0:fc:28:64:16:30:f1:ed:
                    7f:ed:0c:f6:9d:af:b0:c9:20:77:33:04:56:d7:da:
                    89:4d:99:70:f8:6d:aa:1b:59:bd:59:92:35:3c:da:
                    bb:2d:58:cc:23:10:48:a9:db:1e:b3:a9:61:e3:fa:
                    f6:31:c0:97:31:d9:d8:20:86:6b:ac:4c:5f:68:00:
                    b8:c1:29:97:f1:aa:f9:b6:f0:4b:e2:ab:86:1f:42:
                    3c:3d:52:0a:6f:ad:eb:a1:cd:3c:8c:87:e5:76:8a:
                    0c:15:1a:17:76:cd:86:3c:84:bd:55:c5:99:3e:28:
                    27:b1:c4:36:da:1a:7f:f8:5a:b7:ab:53:fb:53:23:
                    4c:b6:d4:92:a1:2f:30:14:4d:87:92:91:9a:ba:eb:
                    db:e0:1e:13:f7:e2:56:a5:dd:b4:e5:0b:2f:bd:22:
                    0a:05:03:d3:12:e3:4f:89:cc:b2:81:0d:f6:95:c8:
                    aa:10:8e:7f:1e:72:e8:40:57:6d:56:da:86:07:c4:
                    79:df:c6:89:c6:72:7d:1f:36:05:91:cb:8d:77:85:
                    31:d8:b0:d8:84:4c:d0:c7:ba:6d:9e:00:7e:8a:bd:
                    93:ad:46:fd:08:b6:28:fa:a8:08:46:f6:13:90:44:
                    a5:38:f9:12:bf:76:90:27:1a:2c:64:56:98:93:3a:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C8:B2:CF:94:BA:48:B2:B3:4D:61:25:DC:FC:C6:9D:5A:C3:27:18
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6d:6d:a9:44:c8:87:a4:84:28:e4:42:e8:1f:05:40:10:66:
         bf:79:64:00:29:3c:50:bb:92:a7:d4:cf:6a:ec:ea:a2:74:2b:
         5e:d7:dc:08:93:c1:78:c6:a2:cf:5d:77:5b:e9:5f:8a:3d:f8:
         04:a5:35:d0:11:2c:d8:35:92:6d:51:74:b9:2a:17:aa:d9:fd:
         5d:ff:f1:7e:6d:e6:3c:74:32:38:e8:4c:6b:02:74:c7:f1:7c:
         ef:db:31:3e:42:ea:e5:79:af:9a:b5:b7:88:ed:d0:17:57:f8:
         e4:80:cb:c2:b4:1d:eb:3d:3a:14:08:76:21:44:88:b0:9f:b5:
         69:bf:ec:2f:87:36:10:c9:d8:0b:4e:fb:c3:bf:22:11:b4:08:
         13:70:ae:55:1d:5c:0b:f8:b9:ca:6e:1f:c3:2e:67:80:17:2f:
         b2:31:18:98:6b:f5:0a:c4:57:ee:a5:12:19:06:6d:89:70:8b:
         2b:55:c6:9a:dc:8c:f3:dc:de:c5:d7:96:11:fe:8c:c4:4b:4f:
         95:04:28:be:c1:ad:30:bf:ed:65:21:6c:1d:15:17:10:f5:02:
         c2:0a:1c:63:9b:9d:6e:ea:30:32:1c:1f:db:e1:ee:f7:db:d7:
         93:78:b2:2a:68:57:d0:b6:1b:b8:d0:43:fa:e0:8a:c3:50:9e:
         06:12:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----