Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
File:                     DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft (raw, json)
Hash identifier:          u/U2dlfoMZQj7N5lAYKhnhyRHi8LCiuW85sjkfuamTU=
Subject key identifier:   B4:8A:A6:06:B5:58:05:56:FC:93:C8:60:98:03:2B:76:A3:1E:3C:D9
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       3711AEFD23EEE3551B38776CDB7551B4A31C02EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
Manifest number:          4B
Signing time:             Wed 25 Mar 2026 10:30:30 +0000
Manifest this update:     Wed 25 Mar 2026 10:25:30 +0000
Manifest next update:     Thu 26 Mar 2026 12:13:30 +0000
Files and hashes:         1: 34352e3137362e3137312e302f32342d3234203d3e20323638393539.roa (hash: ii9pFt+RkMAk4PevpKuPOvSk/sQlA7yUiw/whIqho8A=)
                          2: 34352e3137362e3136382e302f32322d3232203d3e20323638393539.roa (hash: iZXcozE+/gB+49x4ZWBIn7/BCnO3o5hHCP9rpIx2zq0=)
                          3: DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl (hash: aw6rAnb6U5U3OHcgkXdOuR4p9lOXaKX3kjyg1MUYtQ8=)
                          4: 34352e3137362e3137302e302f32342d3234203d3e20323638393539.roa (hash: b14AIGBSMBTB9au/qR9EmFbunDJJlyfHqtTdX7l7npA=)
                          5: 34352e3137362e3136392e302f32342d3234203d3e20323638393539.roa (hash: y/8BRqAaFQuOd1hHfKDkNa8zh4lge8+s4X2vwi6NisM=)
                          6: 323830343a356433633a383030303a3a2f33332d3333203d3e20323638393539.roa (hash: WuRFlL+a4c1DLeCNCMJOnc5ctv3lm5OfQCWqZbKCUSA=)
                          7: 34352e3137362e3136382e302f32332d3233203d3e20323638393539.roa (hash: 6qw7xC2rjIb3q9tAN2jDP7aPlpfTMwTvnZzsSxZ3ePM=)
                          8: 323830343a356433633a633030303a3a2f33342d3334203d3e20323638393539.roa (hash: xuhoiNhxrTj5facSIgpGxOkz4MY1577hkMHuj9uGfOg=)
                          9: 323830343a356433633a343030303a3a2f33342d3334203d3e20323638393539.roa (hash: oU4OEtt3Te10l6+bVJVshrHm86nEMDd7SZg9Ka+kXdI=)
                          10: 34352e3137362e3136382e302f32342d3234203d3e20323638393539.roa (hash: 60sy+bNl2jufu4lP3NSzomWrk4h/1HNpqJIrM7b1yPA=)
                          11: 323830343a356433633a3a2f33332d3333203d3e20323638393539.roa (hash: CCX6Bf9Hf1ZhC5HxyJVeLoPvatx27N7gkcUWym5ML78=)
                          12: 323830343a356433633a3a2f33342d3334203d3e20323638393539.roa (hash: 0sTxK5Z9tvSKGJHnMvfyviV6WLgIbb/VZPhe7msjQhU=)
                          13: 323830343a356433633a383030303a3a2f33342d3334203d3e20323638393539.roa (hash: gVrezvi3R1Xq8aWYYGo6vEbXMg803xylwc7iIb3oy5w=)
                          14: 34352e3137362e3137302e302f32332d3233203d3e20323638393539.roa (hash: 4XEZjARH5g4zdORY2z+O6xzfRufNLG12l2/7HGy3M5A=)
                          15: 323830343a356433633a3a2f33322d3332203d3e20323638393539.roa (hash: WaksDVWMYjNiTo6Cuzom0cvyTzhnCRbPk42n42W+uO0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:11:ae:fd:23:ee:e3:55:1b:38:77:6c:db:75:51:b4:a3:1c:02:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Mar 25 10:25:30 2026 GMT
            Not After : Mar 26 12:13:30 2026 GMT
        Subject: CN=B48AA606B5580556FC93C86098032B76A31E3CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:8b:ec:74:60:a3:88:d0:fe:bf:51:50:d4:
                    26:cf:1c:a7:a0:77:a2:3b:e0:6b:40:0b:ea:70:dd:
                    e2:f4:d5:cc:74:3c:e6:25:1d:55:d4:d6:4b:89:bd:
                    71:64:e9:d7:af:bb:9c:32:be:fd:ff:0b:4b:22:af:
                    f4:ff:2d:bb:86:a8:06:69:41:19:27:18:34:bd:93:
                    97:f9:47:2c:fe:de:60:b6:6a:a0:5f:dc:78:f3:df:
                    79:db:89:0a:73:78:99:d0:88:a1:e0:c6:56:26:f8:
                    43:0e:97:2e:1d:ce:c9:b1:c6:6a:e6:cc:f9:ad:b6:
                    77:35:0e:78:95:57:23:99:1e:86:0b:16:74:21:35:
                    04:45:43:72:a4:60:c6:c2:6a:ed:e4:7e:88:1a:df:
                    6a:18:93:53:72:20:b6:89:f0:8f:ae:d2:e8:39:63:
                    f7:7c:92:cd:10:fc:23:67:dc:a1:87:7d:4f:2d:ff:
                    65:a4:46:35:08:66:9f:c1:56:b3:fb:a6:24:7c:eb:
                    8e:7a:3b:34:da:67:41:bc:7f:b3:c4:49:3b:c1:25:
                    05:c6:18:14:18:25:28:79:85:42:d6:9d:9c:26:17:
                    47:6b:d1:24:c0:6f:8b:3a:ff:e9:0d:2e:0b:62:19:
                    0a:05:88:c4:48:02:2e:9d:44:d1:e6:0a:60:5a:35:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:A6:06:B5:58:05:56:FC:93:C8:60:98:03:2B:76:A3:1E:3C:D9
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:48:f5:e5:c7:16:76:d4:b4:9c:e5:2e:83:9d:82:0e:15:58:
         d4:b8:58:8d:87:09:8c:bf:90:9c:92:49:1c:01:1d:c5:42:9b:
         6a:4d:39:1e:1d:81:59:14:09:2a:b4:d9:08:9f:c4:34:9a:6c:
         5b:18:a7:72:cf:c1:35:24:fd:35:b6:d1:e5:67:b4:4b:b2:1e:
         f4:64:d6:cd:62:61:5d:8a:4a:d6:9a:eb:f6:a2:b3:e6:80:8e:
         23:42:9a:62:d9:eb:10:09:9d:6e:36:71:fd:38:87:38:5a:49:
         11:a5:e2:07:34:c9:49:0e:42:80:28:3e:35:27:f4:8f:12:2b:
         55:14:a9:ab:bd:9c:46:88:b8:6f:66:6a:e2:13:75:c8:88:00:
         75:dc:95:cb:8f:b5:c1:ce:1f:18:79:93:49:3b:dd:13:4b:76:
         ee:f8:86:ba:03:0b:aa:dc:0c:2c:86:88:b8:65:e3:6b:9e:18:
         28:c3:3d:01:8c:ae:63:20:90:48:30:69:60:03:cd:ca:ea:93:
         e6:9a:d6:ff:de:a4:69:4a:17:c3:46:8a:f8:4a:b8:fd:51:ef:
         ba:f1:2f:ab:8e:be:a3:01:fc:92:8f:83:f4:36:33:f4:c8:93:
         0c:09:97:83:10:f8:e8:d7:de:57:33:f3:c0:4c:bb:32:fd:68:
         e4:79:98:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:59:25 2026 by rpki-client