Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
File:                     19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft (raw, json)
Hash identifier:          4fUFJNjeq/6805CPGtGWSNGcpwcSk8Uv4+MDUr9/m80=
Subject key identifier:   63:95:24:8B:ED:CF:76:BC:89:D2:D6:39:07:01:66:AD:C0:22:6E:7B
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       04144CF9CE85B217B183C09CDF35900C8A10C19B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
Manifest number:          03C9
Signing time:             Thu 26 Mar 2026 08:24:22 +0000
Manifest this update:     Thu 26 Mar 2026 08:19:22 +0000
Manifest next update:     Fri 27 Mar 2026 11:20:22 +0000
Files and hashes:         1: 323830343a383530633a3a2f33362d3336203d3e20323732353534.roa (hash: fTrtvh5jWXrtHHgDxelUFnWrxLvZdbCM/jNrFat+3RE=)
                          2: 3137392e36332e32362e302f32342d3234203d3e20323732353534.roa (hash: aE2EiQhFYlMm6ywyrraG9Da3+aXL2lNjXyE6eVmQogM=)
                          3: 323830343a383530633a633030303a3a2f34342d3434203d3e20323732353534.roa (hash: idFJyXppHZI99JyPjvcJtP7v9iKBF0LYhP6ZU/ndU8w=)
                          4: 3137392e36332e32342e302f32322d3232203d3e20323732353534.roa (hash: tzLuubQzkO64hejy8GBWqXbmjVnUkAxRjQ92BacPm2o=)
                          5: 323830343a383530633a633030303a3a2f34302d3430203d3e20323732353534.roa (hash: xbuyu7KYUgtHkUGn2dGqkM42FdGrFj+pQsU7qq6e36A=)
                          6: 323830343a383530633a613030303a3a2f34302d3430203d3e20323732353534.roa (hash: J/tjhCVklMhLcv4vRMbuTTuPSmkufEzG8Zs4Cg8ILVU=)
                          7: 19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl (hash: o1M4StFi1fxtKgeYBymfDYqmjBmjr6pweVaE1hd6Cog=)
                          8: 3137392e36332e32372e302f32342d3234203d3e20323732353534.roa (hash: EphUmRMBbTsVnpqU5A5NgeP3qUDK/9B/az/Z9hB/9TU=)
                          9: 323830343a383530633a3a2f33322d3332203d3e20323732353534.roa (hash: R0Y7Pg74cpR/E5+JMgMMlyeGoF+rkMIC666SwhpZl6o=)
                          10: 323830343a383530633a383030303a3a2f34302d3430203d3e20323732353534.roa (hash: yaI/opd1Y7qjfd5YmsvAp4IBOfD8cChjWmKtcZjSOBg=)
                          11: 323830343a383530633a343030303a3a2f34302d3430203d3e20323732353534.roa (hash: jQNQR62vIcHnUXjNdGwrpLhzLpmS5kYi8GgglGsV4bs=)
                          12: 3137392e36332e32342e302f32342d3234203d3e20323732353534.roa (hash: AIHoM98KVpuhUhYvcgkrJeNoxzpxE8YJgU9gyBZpud0=)
                          13: 3137392e36332e32352e302f32342d3234203d3e20323732353534.roa (hash: sb7eeN0xo3bpqv1wZjrnLX7nVqCPQyYjT+A7UD2Pt+M=)
                          14: 323830343a383530633a623030303a3a2f34302d3430203d3e20323732353534.roa (hash: nn+yqHz5EZR1eNECu8yrLDjez5WBJapVo3YhTF2wAgk=)
                          15: 323830343a383530633a633038303a3a2f34342d3434203d3e20323732353534.roa (hash: P7QxkYKyf0kww8wBuGsb+vPPF5ndA23sZsBMEDe2Qqs=)
                          16: 323830343a383530633a653030303a3a2f34302d3430203d3e20323732353534.roa (hash: 0sBlvmwr2IPlA8DYkK6e3y6NumWdvNfqFUI+m27g034=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:4c:f9:ce:85:b2:17:b1:83:c0:9c:df:35:90:0c:8a:10:c1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Mar 26 08:19:22 2026 GMT
            Not After : Mar 27 11:20:22 2026 GMT
        Subject: CN=6395248BEDCF76BC89D2D639070166ADC0226E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:fa:7f:0e:40:23:47:56:8b:52:b9:f9:a2:
                    63:d5:22:46:58:84:4e:65:bc:bb:21:e5:2b:fc:6f:
                    b3:d0:b5:1c:9f:5a:4f:70:52:f6:9f:12:a7:3c:63:
                    9c:67:5a:60:89:c2:73:b9:92:97:b7:17:62:31:c0:
                    64:37:3a:2e:13:b2:03:64:a5:2c:f0:35:94:b6:f9:
                    35:f7:61:8e:90:55:20:b5:f0:4b:2b:38:88:68:c0:
                    66:50:8a:5f:79:48:d7:ef:81:26:9f:38:a2:a1:e9:
                    87:29:a4:34:6f:bd:77:e0:fe:63:9a:bb:37:33:17:
                    a3:c1:ad:da:09:c6:37:c1:a5:3a:36:79:41:e7:72:
                    b0:e1:86:23:a3:3d:6c:72:cb:0d:0b:87:da:f6:4b:
                    43:21:e6:51:8c:e6:b6:65:db:c4:75:1f:fb:3c:d6:
                    7c:69:52:2c:02:ab:a0:7f:4a:66:32:5c:a0:92:d0:
                    e6:db:68:9a:21:50:3a:0c:06:ee:f9:0a:d0:b3:57:
                    71:a9:fb:c5:d7:7e:e8:d0:50:dc:2e:95:62:34:12:
                    26:37:11:4e:e7:6a:5e:ba:d8:62:a7:09:cd:74:b4:
                    10:54:2a:ec:78:9a:6e:1a:c1:06:33:22:f2:9a:e5:
                    85:79:36:91:fe:ff:83:b5:38:18:a7:80:e5:f4:a9:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:24:8B:ED:CF:76:BC:89:D2:D6:39:07:01:66:AD:C0:22:6E:7B
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:19:e1:8f:65:cf:01:f3:66:3b:0e:28:36:95:38:70:0c:e7:
         cb:0f:d6:b2:af:15:89:c3:64:e9:a8:16:32:a1:0d:e2:10:30:
         91:b9:50:4b:2a:f3:be:7e:ca:f5:49:24:4b:e3:c8:1f:c8:f8:
         8a:c8:d2:85:80:88:e1:72:1c:61:80:3b:b7:9f:ae:f0:b7:2b:
         a6:9e:0a:55:4e:57:0e:3c:3c:19:60:f3:0d:0d:f2:be:8f:5c:
         14:c9:71:24:c1:73:ff:71:65:17:c7:fc:d6:3f:ce:49:85:49:
         46:e7:99:c2:fd:99:6c:e9:56:6f:a9:f4:90:a1:60:1e:ad:7a:
         d4:25:44:fa:ed:37:32:8f:69:1e:58:2b:d1:0b:79:a0:62:db:
         ab:f9:1c:8f:38:41:83:eb:7b:a0:8d:de:65:10:80:97:69:8b:
         98:97:e6:80:79:74:07:6b:ff:8d:2c:eb:52:0e:00:49:fe:9a:
         b7:cf:68:7d:22:9f:56:60:47:9b:4b:57:da:9b:37:2c:80:13:
         be:da:f3:db:b8:d1:51:62:53:f4:9e:6d:ec:66:f2:c5:82:05:
         e2:0e:70:33:b3:48:8e:15:bc:0c:db:97:fc:28:a5:77:95:38:
         e7:2b:77:cb:f7:b5:b2:e9:09:b5:0b:88:8c:c2:9e:aa:29:19:
         7c:13:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:17 2026 by rpki-client