Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft (raw, json)
Hash identifier:          SJTt8FkY7QcDHPYFD6BKmkGOnw37+2g2PrDvPFbxnaI=
Subject key identifier:   81:01:C1:E2:C9:48:CD:F9:0C:81:70:12:E0:A4:34:C8:80:44:F1:C8
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       254ABD4BC51B74D0C7B6B5B53F8557D234BA0073
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
Manifest number:          0280
Signing time:             Thu 26 Mar 2026 09:50:58 +0000
Manifest this update:     Thu 26 Mar 2026 09:45:58 +0000
Manifest next update:     Fri 27 Mar 2026 10:21:58 +0000
Files and hashes:         1: 3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (hash: PM0lHsUYnB12FJqt6xiReOJNg/ovKurUA+Xwa3EXzBQ=)
                          2: 3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (hash: NqWILxpBiHhsXEv2+8eKu6PDuTyCSzC9E8quU08aTX4=)
                          3: 3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (hash: ZKNo7Up8u1Jy7H1whaiVjqWCxsF4ovZTcSMZyUOLkWI=)
                          4: 3136302e32302e3137362e302f32342d3234203d3e20323731313130.roa (hash: d664kBWKzsrFuFfIjjQ+xw/oxEG/P16+rBO5QXAxHn8=)
                          5: 323830343a373636383a3a2f33322d3438203d3e20323731313130.roa (hash: vb9YUlejfRTr7kI1aYxQHYliUllejevQ+kOX2MTtokM=)
                          6: 3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (hash: 9nEqa5tSdE4U2Bk6FZixssrYslJxLVWNmjZzPYiScQE=)
                          7: 0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl (hash: iyCSJgJqS5NVO6R84EmRAxBwkMX679q6J2fZNGlG1mU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4a:bd:4b:c5:1b:74:d0:c7:b6:b5:b5:3f:85:57:d2:34:ba:00:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Mar 26 09:45:58 2026 GMT
            Not After : Mar 27 10:21:58 2026 GMT
        Subject: CN=8101C1E2C948CDF90C817012E0A434C88044F1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:2a:44:c9:96:bc:07:fc:e7:45:74:ac:99:
                    38:83:fa:55:87:bf:80:0b:ac:14:3d:67:e8:2f:cd:
                    d5:f8:26:ff:8c:9e:4e:f9:71:51:1d:02:59:99:5b:
                    c9:88:9e:1b:cb:08:43:fb:86:93:b9:75:28:92:f0:
                    68:06:b1:59:2e:9f:b0:74:05:a1:4b:ab:1f:63:60:
                    8a:98:97:b8:2c:51:be:e2:86:6e:21:6c:df:62:80:
                    52:f7:b3:9e:58:12:de:15:84:64:0a:1c:6d:61:06:
                    16:6d:55:24:ed:93:f4:8f:ce:43:9a:37:1a:64:ea:
                    ad:00:50:79:d1:8b:fa:fe:06:21:49:c4:04:f6:36:
                    4a:31:80:1f:44:46:74:a8:68:c3:71:92:21:a6:0f:
                    85:4c:a3:a5:b4:36:b9:ab:ef:a2:85:6e:c7:12:b3:
                    9a:87:0f:4d:5c:76:da:47:77:ce:37:45:0f:21:63:
                    ce:28:c9:31:4a:42:96:3b:9a:90:df:c0:24:41:53:
                    81:b6:b3:bb:53:c7:22:29:11:45:b4:82:85:a1:dc:
                    76:0b:7d:82:41:cd:ef:ca:6c:9c:58:3c:e5:1f:39:
                    c7:19:a8:07:41:c0:f8:ae:e8:6c:a7:59:1a:87:bf:
                    66:af:77:1f:b8:f0:a1:a4:d2:44:9b:fe:e8:ae:fb:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:01:C1:E2:C9:48:CD:F9:0C:81:70:12:E0:A4:34:C8:80:44:F1:C8
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:af:bf:2d:49:7c:5e:de:ad:93:23:92:93:97:e6:0b:48:
         40:24:fc:54:c9:67:96:93:36:e1:20:b9:54:97:44:a6:24:67:
         8f:4c:8b:90:82:c8:b7:14:d1:13:d7:be:1d:7e:f0:15:01:33:
         57:19:62:b2:68:31:7c:65:b8:88:32:5d:76:d2:87:7d:69:62:
         7a:0c:99:9b:1e:f0:b6:07:5b:d4:68:e0:c2:9c:28:fb:42:09:
         08:9f:be:3f:bf:2d:43:4f:54:e2:91:2c:dc:2b:f1:48:11:1a:
         fe:b1:a1:d9:82:fa:e4:7c:70:f0:92:43:8c:a9:2d:a8:5a:c6:
         9b:d0:45:d7:1c:29:f4:e7:c8:e1:bc:3d:df:89:43:fa:57:93:
         38:2e:50:32:6f:0a:dc:eb:b3:74:f9:06:b8:54:08:da:71:09:
         88:c2:6f:30:24:08:b4:ce:be:87:20:45:b8:09:cf:3b:6e:b2:
         82:e5:fe:41:07:a5:60:d6:78:76:2a:d8:4a:3c:04:0f:9f:48:
         8a:31:4c:f4:57:8b:23:25:0b:a1:9f:88:93:c5:27:8e:d9:4d:
         8e:4c:cf:56:ac:52:8e:f0:6f:a9:ab:35:40:2d:62:a0:3c:49:
         4e:2a:bf:0d:49:c9:77:b0:98:36:21:10:96:e2:ec:48:01:f9:
         24:5d:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:21:28 2026 by rpki-client