Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
File:                     749E21CDD000362F14CB5C6E5B975EFE08776886.mft (raw, json)
Hash identifier:          R3QkHkfzHhBL1TZVv1A9xHFQ4dGQdvveyN/JXvbgIok=
Subject key identifier:   25:EA:74:4F:04:61:5A:FC:C5:B0:18:D8:B5:EE:68:D8:7A:D6:67:89
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       762BAFD71507BE41554C5FB2D7B16D3A140045F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
Manifest number:          02D0
Signing time:             Thu 26 Mar 2026 14:00:14 +0000
Manifest this update:     Thu 26 Mar 2026 13:55:14 +0000
Manifest next update:     Fri 27 Mar 2026 15:59:14 +0000
Files and hashes:         1: 3137302e38312e3130312e302f32342d3332203d3e203631363138.roa (hash: fwC3d3+2u/SL5ZDteTfUTiwXQcfVJM22XObMEk7f1cs=)
                          2: 3137302e38312e3130332e302f32342d3236203d3e203631363138.roa (hash: 0UE7tFgO/yinmnyHXD2k7mg3ghywMVMuo0BX7Im+3R8=)
                          3: 3137302e38312e3130302e302f32342d3332203d3e203631363138.roa (hash: Wmm/JOSxwIFlGUw3dJnLiunkFqLoaG65ceJCVtAuTyw=)
                          4: AS61618.asa (hash: MxJE1Jup65iItrtyYAJAIUO1QK8S5KSOsOEt6bm3qQ4=)
                          5: 3137302e38312e3130302e302f32322d3233203d3e203631363138.roa (hash: EUmHOSvpo1YInT+KbsXa6AeaV5xfBewjy2x1dVcJ/OU=)
                          6: 749E21CDD000362F14CB5C6E5B975EFE08776886.crl (hash: O6e7ijfcyfTVtz6ic+oD+6wJvgVF3InHlF/mXV80OYc=)
                          7: 323830343a333736633a3a2f33322d3336203d3e203631363138.roa (hash: sA2O8uiPk/s1EPSiPdzofX2q8DADpRoryw5dLYbynGM=)
                          8: 3137302e38312e3130322e302f32342d3332203d3e203631363138.roa (hash: 1SR8tEtOw3A0JXxcX1FZA5kI5s361S4yOSIccdtmljE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl
                          rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2b:af:d7:15:07:be:41:55:4c:5f:b2:d7:b1:6d:3a:14:00:45:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: Mar 26 13:55:14 2026 GMT
            Not After : Mar 27 15:59:14 2026 GMT
        Subject: CN=25EA744F04615AFCC5B018D8B5EE68D87AD66789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:86:6a:b8:60:67:60:af:f6:4f:93:68:09:
                    6b:d2:16:91:c3:90:00:d6:94:a2:f4:5a:1c:c9:0c:
                    9b:39:ab:4c:b3:d0:15:b9:bf:c7:de:eb:7b:84:25:
                    e2:d5:49:65:37:13:af:3e:84:ef:8e:72:fc:76:2d:
                    dd:f9:f7:b8:35:6a:ce:06:b0:27:8e:82:ba:ef:f8:
                    24:99:1b:c4:6a:f1:3f:10:8c:72:df:18:07:87:87:
                    d1:77:13:f3:f9:06:09:a7:59:c2:e4:56:31:17:05:
                    b6:8d:3b:e8:02:c0:11:42:3f:d9:31:a7:c6:24:68:
                    2e:60:68:ac:c6:88:95:1d:85:a6:d8:27:3d:47:54:
                    c6:e2:ae:b2:91:7a:08:e5:d6:ba:b6:1e:3a:06:6e:
                    61:a3:4e:23:db:89:ea:9e:b4:19:1b:34:f0:2b:9a:
                    2f:df:c0:bd:53:11:0f:40:5e:0a:45:d8:df:1e:c8:
                    ee:41:47:97:7b:a0:f2:79:d6:e3:94:09:ee:3f:39:
                    6c:8a:db:79:02:eb:88:d8:60:58:cb:b7:f8:8e:2b:
                    75:90:89:95:72:dc:43:54:63:77:26:bf:f7:2f:70:
                    5b:c3:19:80:fe:95:72:60:ad:56:a0:76:d5:53:c3:
                    b9:37:66:28:f9:bf:16:dd:e3:48:19:ff:18:ed:a3:
                    c2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EA:74:4F:04:61:5A:FC:C5:B0:18:D8:B5:EE:68:D8:7A:D6:67:89
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:49:cf:bd:c0:c2:7c:81:b1:bf:56:35:09:3c:99:0f:d4:7e:
         2d:7f:bc:53:20:20:d8:f7:48:37:a2:43:6b:62:4f:b6:91:17:
         80:ad:a2:e9:22:61:d7:0d:2e:82:7e:c4:62:58:37:92:88:2f:
         bf:bb:47:ab:f4:1b:f7:1d:1b:1a:4b:08:22:9d:50:25:2b:5a:
         89:93:5c:32:d8:a7:61:26:ad:36:ba:78:fc:83:9b:5d:21:49:
         66:83:0a:63:99:65:3b:35:96:a6:3a:5c:11:c6:06:b8:51:15:
         04:b7:19:ad:50:18:8f:32:f3:e9:4c:84:07:cf:d4:a4:21:f3:
         0e:84:37:4b:a4:84:38:39:7c:cc:57:3b:52:b0:c0:71:a7:4d:
         e9:1c:7c:78:8b:30:84:a3:02:ed:47:42:46:2f:91:e3:cc:80:
         4c:79:b3:cd:0b:44:7c:5b:4d:ef:e0:99:ac:d8:aa:f2:c1:dc:
         21:63:c7:d8:8e:8f:5d:e2:0a:53:54:e5:ee:6a:f4:ab:0c:35:
         b1:c5:ec:4a:06:fa:10:32:25:47:47:7c:f6:31:42:5a:e4:53:
         cd:f8:2b:60:8c:db:e5:32:d9:ed:8c:6f:a2:de:82:27:ed:d5:
         c9:1d:73:5c:b2:35:03:75:bb:a0:57:6a:c7:42:ea:04:1f:d5:
         24:3b:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:49 2026 by rpki-client