Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
File:                     3A039835A68C92594BA889BF185A560E86C0CFD1.mft (raw, json)
Hash identifier:          CbI6JVJt8svhZXp5RY3lsA0zH8Z/EofjOFlcfS24sHk=
Subject key identifier:   5E:E2:88:C1:57:B3:CF:36:DA:F2:5F:FA:32:97:62:84:A6:8B:13:25
Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1
Certificate issuer:       /CN=3A039835A68C92594BA889BF185A560E86C0CFD1
Certificate serial:       7F5291E417FCAE82499F640200A6F51D0F27DB54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
Manifest number:          021A
Signing time:             Thu 23 Jul 2026 14:59:19 +0000
Manifest this update:     Thu 23 Jul 2026 14:54:19 +0000
Manifest next update:     Fri 24 Jul 2026 15:58:19 +0000
Files and hashes:         1: 323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa (hash: lbzq2tAXRMoHrt5RPrxpeRldsgZjhpc2YTTuAWVgAAs=)
                          2: 323830343a393435633a313030303a3a2f34382d3438203d3e203631363234.roa (hash: uuEuEktLWudAmuYeResON2BeKpn7qQts0zaXus8nkLk=)
                          3: 3A039835A68C92594BA889BF185A560E86C0CFD1.crl (hash: p/R+rYFW3YAgjb28bS/8bTbq7WFQi1bIa8EwgwAknxo=)
                          4: 323830343a393435633a3a2f33322d3332203d3e203631363234.roa (hash: qqaZ9qMzxwBk/j4r/MDz/jb4GMlz1dtS9JyfpAnWrtI=)
                          5: 323830343a393435633a31323a3a2f34382d3438203d3e203631363234.roa (hash: GS8KHbQRI4PyamdhZl6DJVBemcQkz6Ags9WznVxqWdE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl
                          rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 15:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:52:91:e4:17:fc:ae:82:49:9f:64:02:00:a6:f5:1d:0f:27:db:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1
        Validity
            Not Before: Jul 23 14:54:19 2026 GMT
            Not After : Jul 24 15:58:19 2026 GMT
        Subject: CN=5EE288C157B3CF36DAF25FFA32976284A68B1325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:ab:b2:ae:dd:c1:85:04:85:6a:68:9e:bf:
                    45:1c:62:90:9a:87:d3:71:53:c2:95:75:95:3e:26:
                    d6:f8:fd:5c:65:83:23:2d:cd:e4:77:bd:23:90:5c:
                    52:6d:eb:5e:83:2b:83:e4:1c:51:58:77:c8:ad:b4:
                    5f:e9:c1:9d:aa:4b:3c:0c:69:55:d4:1c:ca:b6:35:
                    dc:98:5b:54:0b:32:b1:5e:9f:d5:63:87:ed:61:78:
                    15:95:9c:7f:ab:29:4c:ae:ab:e8:77:a5:15:b0:de:
                    c3:4e:6f:9a:4d:77:4b:b4:76:bf:32:b9:3a:a1:1e:
                    1d:d8:96:f1:dd:49:37:d3:a1:7a:06:ee:41:3a:94:
                    66:aa:57:32:cb:35:35:9f:e1:0d:75:01:57:f7:dd:
                    21:8c:cb:17:0b:b4:21:bf:b5:75:dc:c3:3a:e0:50:
                    e7:67:0c:4c:86:00:94:be:9e:17:b9:5e:f9:c9:93:
                    47:c4:a3:46:9f:83:c9:2c:bf:c7:d8:79:c0:3f:1f:
                    6f:ae:51:13:fd:65:78:3b:1f:78:b4:0e:32:70:11:
                    f6:18:03:67:3c:44:cd:86:6e:03:e0:76:18:8a:59:
                    66:c3:b8:c4:04:34:09:58:bd:c0:b3:36:8f:8c:3d:
                    1a:0a:6d:af:0d:66:77:a0:f4:99:2c:b2:87:fc:58:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:88:C1:57:B3:CF:36:DA:F2:5F:FA:32:97:62:84:A6:8B:13:25
            X509v3 Authority Key Identifier:
                keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:66:a1:39:35:51:61:0b:77:74:3d:38:42:94:12:4d:5c:
         57:c7:f6:81:f8:f0:95:fb:1d:27:7b:78:14:9b:df:64:f8:d0:
         bf:1f:e1:fe:b1:53:5f:f9:1c:d4:af:4e:eb:62:56:00:79:08:
         70:ad:15:c9:db:d2:f4:fa:a3:dd:e2:15:97:c8:2d:22:64:9e:
         69:58:56:29:6c:7a:37:f5:01:e1:87:53:63:9c:d7:87:35:45:
         8b:af:96:4f:9e:37:b2:5c:63:f6:c5:ec:4e:8c:7b:54:2a:a9:
         c1:16:d2:d1:b6:a2:7f:9c:7c:5a:fc:c8:d2:1d:43:66:b5:c5:
         84:df:67:16:b4:6c:86:34:c4:cd:cd:df:2e:20:12:2f:70:44:
         76:50:64:d4:05:b5:c2:0e:69:71:65:b0:ea:2f:ee:23:cc:ba:
         34:b4:d4:b7:9e:e5:a4:3f:61:56:bc:3b:8e:97:6c:f4:1a:12:
         98:3f:7f:57:e5:ac:78:fb:2c:8b:e9:39:c7:a0:49:ef:c8:5f:
         2e:31:21:49:f1:1c:d3:4a:cc:2b:1d:86:fc:8b:24:b3:ef:0b:
         89:92:fb:e0:ed:87:cf:0b:56:76:78:1f:bd:95:44:e5:27:40:
         83:f0:36:01:96:98:a5:c8:e0:7a:fd:9b:68:7d:39:2d:c5:8a:
         6f:0d:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:33 2026 by rpki-client