Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
File:                     67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft (raw, json)
Hash identifier:          Xgl2a0x7vy2Haqj8qtqci++CzY8S07ehlTwMvKJlYFk=
Subject key identifier:   ED:73:C4:45:4D:93:EF:26:89:59:B0:D7:35:DE:D9:7C:2F:73:46:55
Authority key identifier: 67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B
Certificate issuer:       /CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
Certificate serial:       588A35390F93B84C42866D8826D1C6D408F8700B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
Manifest number:          043C
Signing time:             Thu 26 Mar 2026 06:20:00 +0000
Manifest this update:     Thu 26 Mar 2026 06:15:00 +0000
Manifest next update:     Fri 27 Mar 2026 06:20:00 +0000
Files and hashes:         1: 34352e3136322e33362e302f32322d3234203d3e20323638343934.roa (hash: Lo8PbrecpCoK0GBUm97e5EPmV/3YQQ/fzWOGICbdPxM=)
                          2: 323830343a353231383a3a2f33322d3335203d3e20323638343934.roa (hash: R9L/kMmN7S/9lZVlWx9nyQOiSYfk/inspmGIL6RrUsQ=)
                          3: 67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl (hash: RRGfwT6tcAgq5iposgckNg+UWOWr8YWvG1OK13y6xYg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl
                          rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8a:35:39:0f:93:b8:4c:42:86:6d:88:26:d1:c6:d4:08:f8:70:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B
        Validity
            Not Before: Mar 26 06:15:00 2026 GMT
            Not After : Mar 27 06:20:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:11:87:43:07:2a:53:c8:01:40:81:f3:5a:
                    78:10:1b:79:8b:d9:1f:24:56:2c:fb:fa:ec:3f:16:
                    07:f6:6f:13:fb:bc:4a:4d:d3:75:a2:30:1b:09:79:
                    62:ac:d5:41:98:3b:fd:b9:d7:1f:ad:2c:36:45:5c:
                    7a:79:1c:a1:e8:38:6f:02:6e:6e:f7:22:4e:a3:dc:
                    40:3c:85:2e:38:c0:22:b2:b9:25:47:cb:cb:fa:c5:
                    f2:80:c1:47:97:ed:91:05:95:f1:79:a6:d2:96:03:
                    8a:66:4f:37:35:f1:65:58:8a:bb:c8:4a:4d:c9:ba:
                    92:00:37:04:88:ac:75:d6:55:8f:f1:9a:7e:3f:cf:
                    4e:18:ba:c6:f9:1e:47:0a:c9:27:ce:bc:33:dd:37:
                    12:72:44:60:ac:f5:ae:4d:57:26:f1:46:59:93:88:
                    d0:68:42:3b:88:54:e9:d1:bc:4f:67:4d:4a:e6:e5:
                    a5:40:f3:c3:05:66:df:54:7f:a2:ab:9c:b0:02:ac:
                    03:83:2d:a8:49:0f:23:09:cb:e5:c4:ea:56:36:8d:
                    79:78:62:cb:11:5d:f2:36:59:c1:b2:24:00:23:52:
                    3a:c1:b3:9b:06:d6:11:bb:56:67:7d:63:8b:d1:1d:
                    c9:fe:c0:93:11:7d:94:ff:dd:74:98:3d:b6:bf:91:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:73:C4:45:4D:93:EF:26:89:59:B0:D7:35:DE:D9:7C:2F:73:46:55
            X509v3 Authority Key Identifier:
                keyid:67:21:0E:55:22:F5:15:3F:DA:7A:73:E4:EE:2B:30:0B:C0:CC:9A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28RxNbvKDESRGND9fnMpVQE2kp7QTaw5AeUHMgeQD9T6/1/67210E5522F5153FDA7A73E4EE2B300BC0CC9A0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:6c:e6:96:1b:28:9f:fe:11:8c:aa:f8:dd:73:af:ed:a6:
         e9:7e:44:b4:d0:06:2d:ea:a9:ff:d9:11:f6:d4:a0:4f:de:22:
         a1:01:92:a0:e6:87:73:6c:51:ed:57:a4:0d:96:6c:28:b5:d8:
         31:43:a4:16:fa:0e:83:36:8b:0e:fe:13:be:ce:8d:c7:c4:b6:
         66:51:b8:55:53:6b:19:62:bc:a8:53:b8:e4:93:09:5a:3b:37:
         f1:5e:72:28:ee:7f:e2:96:97:46:85:3f:59:93:35:52:1d:27:
         cb:21:09:33:5a:7b:00:6d:b8:ca:0e:e4:88:b3:13:02:a6:1e:
         7a:91:d2:44:79:c7:1c:89:0f:5e:36:8b:8e:92:44:17:28:b3:
         56:51:d2:ce:6a:43:15:8d:8f:91:38:5f:99:04:71:db:16:b7:
         06:b6:28:cc:1b:7d:ac:66:01:a7:a2:9f:f7:5b:4b:33:64:d6:
         d2:1b:c8:8a:94:32:d5:f8:0f:d0:45:ab:65:69:dc:72:04:7d:
         56:d7:25:16:4a:f7:3d:4a:71:ea:cb:cf:16:9a:f4:5a:c1:67:
         36:cd:9f:1c:58:7e:2b:fe:f1:7c:e8:f9:71:41:10:71:f9:14:
         37:7d:a7:65:f4:ca:e8:ef:7c:88:17:bf:2d:b2:7d:7a:7f:55:
         11:d6:c6:ab
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUWIo1OQ+TuExChm2IJtHG1Aj4cAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyMTBFNTUyMkY1MTUzRkRBN0E3M0U0RUUyQjMwMEJD
MENDOUEwQjAeFw0yNjAzMjYwNjE1MDBaFw0yNjAzMjcwNjIwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg0MTExODc0MzA3MkE1M0M4
MDE0MDgxRjM1QTc4MTAxQjc5OEJEOTFGMjQ1NjJDRkJGQUVDM0YxNjA3RjY2RjEz
RkJCQzRBNEREMzc1QTIzMDFCMDk3OTYyQUNENTQxOTgzQkZEQjlENzFGQUQyQzM2
NDU1QzdBNzkxQ0ExRTgzODZGMDI2RTZFRjcyMjRFQTNEQzQwM0M4NTJFMzhDMDIy
QjJCOTI1NDdDQkNCRkFDNUYyODBDMTQ3OTdFRDkxMDU5NUYxNzlBNkQyOTYwMzhB
NjY0RjM3MzVGMTY1NTg4QUJCQzg0QTREQzlCQTkyMDAzNzA0ODhBQzc1RDY1NThG
RjE5QTdFM0ZDRjRFMThCQUM2RjkxRTQ3MEFDOTI3Q0VCQzMzREQzNzEyNzI0NDYw
QUNGNUFFNEQ1NzI2RjE0NjU5OTM4OEQwNjg0MjNCODg1NEU5RDFCQzRGNjc0RDRB
RTZFNUE1NDBGM0MzMDU2NkRGNTQ3RkEyQUI5Q0IwMDJBQzAzODMyREE4NDkwRjIz
MDlDQkU1QzRFQTU2MzY4RDc5Nzg2MkNCMTE1REYyMzY1OUMxQjIyNDAwMjM1MjNB
QzFCMzlCMDZENjExQkI1NjY3N0Q2MzhCRDExREM5RkVDMDkzMTE3RDk0RkZERDc0
OTgzREI2QkY5MUFBRDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyEERh0MHKlPIAUCB81p4EBt5i9kfJFYs+/rsPxYH9m8T+7xKTdN1
ojAbCXlirNVBmDv9udcfrSw2RVx6eRyh6DhvAm5u9yJOo9xAPIUuOMAisrklR8vL
+sXygMFHl+2RBZXxeabSlgOKZk83NfFlWIq7yEpNybqSADcEiKx11lWP8Zp+P89O
GLrG+R5HCsknzrwz3TcSckRgrPWuTVcm8UZZk4jQaEI7iFTp0bxPZ01K5uWlQPPD
BWbfVH+iq5ywAqwDgy2oSQ8jCcvlxOpWNo15eGLLEV3yNlnBsiQAI1I6wbObBtYR
u1ZnfWOL0R3J/sCTEX2U/910mD22v5Gq1QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FO1zxEVNk+8miVmw1zXe2Xwvc0ZVMB8GA1UdIwQYMBaAFGchDlUi9RU/2npz5O4r
MAvAzJoLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdO
RDlmbk1wVlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUz
RkRBN0E3M0U0RUUyQjMwMEJDMENDOUEwQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82NzIxMEU1NTIyRjUxNTNGREE3QTczRTRFRTJCMzAwQkMwQ0M5
QTBCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI4UnhOYnZLREVTUkdORDlmbk1w
VlFFMmtwN1FUYXc1QWVVSE1nZVFEOVQ2LzEvNjcyMTBFNTUyMkY1MTUzRkRBN0E3
M0U0RUUyQjMwMEJDMENDOUEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAErNbOaWGyif/hGMqvjdc6/t
pul+RLTQBi3qqf/ZEfbUoE/eIqEBkqDmh3NsUe1XpA2WbCi12DFDpBb6DoM2iw7+
E77OjcfEtmZRuFVTaxlivKhTuOSTCVo7N/Fecijuf+KWl0aFP1mTNVIdJ8shCTNa
ewBtuMoO5IizEwKmHnqR0kR5xxyJD142i46SRBcos1ZR0s5qQxWNj5E4X5kEcdsW
twa2KMwbfaxmAaein/dbSzNk1tIbyIqUMtX4D9BFq2Vp3HIEfVbXJRZK9z1KcerL
zxaa9FrBZzbNnxxYfiv+8Xzo+XFBEHH5FDd9p2X0yujvfIgXvy2yfXp/VRHWxqs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:26 2026 by rpki-client