Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
File:                     3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft (raw, json)
Hash identifier:          gpSbjW7Hx3ImScZzqMEeN2hlqImUoctC5+2yEAmBavs=
Subject key identifier:   1B:A9:6C:7A:C0:50:81:C4:C5:4F:3D:C9:F2:C6:17:9F:A7:55:6F:15
Authority key identifier: 3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97
Certificate issuer:       /CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
Certificate serial:       73690C32B8280656A824FA052F799E47DB50AB48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
Manifest number:          11
Signing time:             Sun 23 Aug 2026 04:01:13 +0000
Manifest this update:     Sun 23 Aug 2026 03:56:13 +0000
Manifest next update:     Mon 24 Aug 2026 07:55:13 +0000
Files and hashes:         1: 3230302e37312e38332e302f32342d3234203d3e20323731323030.roa (hash: DhLZVHHQ98Na0VxpgnaeNPVQScSruL7QG9OTmUNP1K0=)
                          2: 323830343a373763633a3a2f34382d3438203d3e20323731323030.roa (hash: ujceckYtiM+rfwMcT0RLMM7ErqJtLBrQDfn5kQb+xE4=)
                          3: 3230302e37312e38322e302f32332d3233203d3e20323731323030.roa (hash: f56Q/Fieb9tfMWmyzIbiTvqj9p1hIf3Q6auf3VDNchE=)
                          4: 323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa (hash: icngFpLv/E1t640YX1D1jWo39mIj8Rlff3UglL/ipSo=)
                          5: 3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (hash: B9u0ZAWjZeZDqxqfaH4pKUi7mdybudolNPJXOXZtQAo=)
                          6: 3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl (hash: 8KsCxL1mLrtwkAt7iUGZWC+ylInP1EspQ/hbrU5JQj4=)
                          7: 323830343a373763633a3a2f33322d3332203d3e20323731323030.roa (hash: jy6+ZMDEkumdht3Uwyc+QVU4MDrPMMtfJwYGF4t1blU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:69:0c:32:b8:28:06:56:a8:24:fa:05:2f:79:9e:47:db:50:ab:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
        Validity
            Not Before: Aug 23 03:56:13 2026 GMT
            Not After : Aug 24 07:55:13 2026 GMT
        Subject: CN=1BA96C7AC05081C4C54F3DC9F2C6179FA7556F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:c1:e9:34:e7:ba:c2:78:f9:fa:d3:55:88:
                    02:51:fa:6d:1e:2c:56:73:1c:76:7b:e8:41:26:53:
                    6e:37:b0:30:a6:d8:c6:43:ba:e7:71:c2:c8:f6:32:
                    f9:94:2a:85:36:f3:41:fc:90:f1:13:75:de:f7:9f:
                    00:22:2c:84:d7:85:9f:a4:2c:0a:a1:f5:8f:b1:83:
                    41:58:39:a9:0b:8e:43:df:92:1c:77:2e:b8:64:62:
                    e4:7b:84:6d:d8:20:f7:fd:88:7e:3f:a0:6c:0c:12:
                    bd:bf:b3:38:5e:09:de:54:fa:be:52:04:73:9b:3f:
                    0a:cd:57:ad:23:ef:1a:8b:c5:b3:a4:0d:f2:1e:6f:
                    bc:38:98:ad:f7:f4:fe:11:6d:82:ac:67:48:93:6d:
                    36:74:1d:b7:c8:11:a0:fd:36:1d:c6:4e:35:ae:c7:
                    39:ec:54:d4:99:43:6f:10:d1:73:2e:7f:20:e5:b3:
                    84:74:f9:79:59:73:07:fc:3b:d3:34:02:c2:c8:30:
                    12:77:cd:12:f9:5b:a5:7f:74:e5:2e:1c:fa:da:36:
                    98:b2:d5:3c:a7:54:da:08:8f:3d:dc:c8:5b:de:52:
                    49:72:cd:80:90:5e:f2:12:f9:3b:68:3c:7e:48:68:
                    73:3c:6b:07:fc:c3:eb:80:14:a4:b7:eb:9a:f4:a3:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:6C:7A:C0:50:81:C4:C5:4F:3D:C9:F2:C6:17:9F:A7:55:6F:15
            X509v3 Authority Key Identifier:
                keyid:3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:06:9c:7b:63:a2:e5:75:10:52:87:0a:ea:1f:56:43:6e:
         52:37:eb:03:df:fa:a5:1c:85:5a:5b:82:0e:7d:21:fb:d7:3a:
         fa:97:ae:79:a4:41:61:1f:00:d2:9e:b6:50:ab:8d:3c:f9:b5:
         ba:0a:bc:96:87:d3:b5:0a:d2:52:3f:80:d5:dc:b5:05:0d:f1:
         40:9b:09:27:6f:22:85:53:c1:c4:5d:b9:03:e7:e4:95:7b:78:
         48:cb:21:29:ff:f9:0d:68:46:02:e2:68:e7:99:e0:8f:a4:e9:
         e1:55:a1:bc:0e:94:77:14:de:9a:4e:9b:51:e5:81:84:fd:fe:
         a0:1b:f6:24:e1:a9:8a:c9:0f:19:bf:35:96:88:59:56:37:4e:
         bf:72:e3:de:25:d6:13:a0:83:3a:a3:63:70:38:39:81:23:e0:
         58:b4:ff:7a:44:1a:b3:74:08:e3:db:10:a7:7b:90:84:70:01:
         b7:2d:a5:cc:9d:40:3b:60:ab:19:92:1b:bd:c0:88:c0:b3:60:
         2f:c9:91:0c:60:f9:fa:39:84:44:3e:e0:ce:d4:42:44:3d:26:
         5a:47:a0:05:f6:0b:c6:cb:08:89:7a:b7:5f:b9:6a:be:e9:1f:
         a1:13:0b:e9:c6:e6:b7:82:24:60:a8:d3:d2:83:29:9b:87:19:
         b3:5e:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:20 2026 by rpki-client