Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft
File:                     3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft (raw, json)
Hash identifier:          5mrHB2uJpIR5Iq14HNTTn9eQv0ba7DkIaBLtcpLhQ6w=
Subject key identifier:   C3:F2:08:A7:51:16:19:C9:B6:FA:E6:D5:52:EA:49:A0:5E:BB:38:20
Authority key identifier: 3F:25:0E:6F:BC:F5:BE:6D:ED:38:51:E0:5B:02:4B:B8:3D:E7:50:AB
Certificate issuer:       /CN=3F250E6FBCF5BE6DED3851E05B024BB83DE750AB
Certificate serial:       3D5F0425AD80DF0D4A9C36331116A20681094079
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft
Manifest number:          4D
Signing time:             Thu 26 Mar 2026 16:36:49 +0000
Manifest this update:     Thu 26 Mar 2026 16:31:49 +0000
Manifest next update:     Fri 27 Mar 2026 18:05:49 +0000
Files and hashes:         1: 34352e3232362e3232302e302f32322d3332203d3e20323637303036.roa (hash: 0s2HaJKOn3j8CJ3qgV+m0DcSdboj4mNkfAoqYIL3c70=)
                          2: 3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl (hash: jqMytPP6ZExGoax+/coWR3Hsg+VKwm7A0njPs/z9VFM=)
                          3: 323830343a343662343a3a2f33322d313238203d3e20323637303036.roa (hash: 3ESTssKrO59TEX6cyJb31b74gWXJaUZoZeY9XHKgg/A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl
                          rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5f:04:25:ad:80:df:0d:4a:9c:36:33:11:16:a2:06:81:09:40:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F250E6FBCF5BE6DED3851E05B024BB83DE750AB
        Validity
            Not Before: Mar 26 16:31:49 2026 GMT
            Not After : Mar 27 18:05:49 2026 GMT
        Subject: CN=C3F208A7511619C9B6FAE6D552EA49A05EBB3820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:52:fd:e2:4e:dc:99:e3:7d:1b:c4:be:c3:
                    e1:50:97:c4:42:66:d3:4a:7d:76:77:fc:5c:50:ce:
                    67:a2:52:60:cf:6e:a1:fe:1e:8c:1e:01:56:21:dc:
                    16:b6:53:94:f5:a3:c3:ab:fd:59:fe:81:d0:fa:92:
                    86:18:22:03:06:04:3b:dc:ad:f7:9a:81:fc:77:79:
                    62:99:60:6e:c8:7d:82:0f:e8:de:51:83:fa:3f:fd:
                    1a:75:81:a5:92:e3:7d:63:2a:51:74:70:b9:0c:fe:
                    af:33:5a:e5:68:af:cc:27:01:d1:0b:a1:4a:9a:d8:
                    90:0a:bb:e0:be:16:01:a1:d9:6e:71:c5:a7:f6:09:
                    75:14:d2:98:66:34:ca:a3:60:fc:a2:92:c6:96:52:
                    cd:10:3b:ea:7f:f1:19:10:e1:3a:5f:e6:df:48:aa:
                    f2:fe:7a:16:7d:73:ac:1f:65:49:08:28:95:48:28:
                    54:25:f5:df:0c:41:5b:30:31:aa:c9:1f:72:53:e0:
                    66:65:d2:d3:97:7d:81:12:da:85:8a:b8:3b:4b:3a:
                    b4:f4:a1:1c:65:51:9c:d5:3e:86:9b:af:30:20:10:
                    50:13:7d:c2:da:fe:65:61:1f:17:71:af:a9:db:f2:
                    a1:00:e3:bc:c9:dc:90:85:ef:8f:6c:83:2f:56:a7:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:08:A7:51:16:19:C9:B6:FA:E6:D5:52:EA:49:A0:5E:BB:38:20
            X509v3 Authority Key Identifier:
                keyid:3F:25:0E:6F:BC:F5:BE:6D:ED:38:51:E0:5B:02:4B:B8:3D:E7:50:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/3F250E6FBCF5BE6DED3851E05B024BB83DE750AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:48:b9:cf:35:51:4c:d3:fd:ef:1a:f0:20:81:02:20:e5:
         8a:f0:7c:40:14:2b:2c:74:3c:b7:b6:ec:7c:c9:ee:43:9a:75:
         30:14:7a:0b:e6:b1:44:ab:d3:67:f2:80:49:45:ca:b8:39:a1:
         73:02:15:78:44:86:0d:67:63:0d:29:79:08:66:3f:b3:56:10:
         a0:df:83:35:be:7b:f0:2a:73:08:6a:28:da:15:36:8e:48:50:
         a0:09:56:7b:1c:11:98:fe:1f:4c:4a:be:2a:58:ef:11:92:d2:
         13:13:b5:b9:72:68:d7:7a:1f:c8:f2:88:3f:db:d3:07:49:9d:
         a0:4f:71:c2:ee:90:96:86:4f:e5:fa:03:16:3c:c1:09:c2:c4:
         49:b4:90:12:f3:58:83:d0:d7:62:8e:e0:f9:1a:2d:95:2a:93:
         08:af:c2:77:c7:4a:9c:c0:de:1b:11:4a:19:7e:76:75:78:a9:
         59:c6:5a:8a:ad:d4:e8:0c:2c:8c:7d:8d:c8:85:b5:1b:6f:cd:
         3c:23:14:49:01:9a:c8:46:cc:c2:9d:94:ef:f3:dd:79:37:38:
         14:79:a9:89:63:3c:68:69:c0:17:ef:6d:5a:92:a1:c3:56:58:
         cc:2d:7e:af:98:7d:21:78:e8:dd:4a:a1:d6:21:0d:32:7b:ca:
         b0:e5:a6:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPV8EJa2A3w1KnDYzERaiBoEJQHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YyNTBFNkZCQ0Y1QkU2REVEMzg1MUUwNUIwMjRCQjgz
REU3NTBBQjAeFw0yNjAzMjYxNjMxNDlaFw0yNjAzMjcxODA1NDlaMDMxMTAvBgNV
BAMTKEMzRjIwOEE3NTExNjE5QzlCNkZBRTZENTUyRUE0OUEwNUVCQjM4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/A1L94k7cmeN9G8S+w+FQl8RC
ZtNKfXZ3/FxQzmeiUmDPbqH+HoweAVYh3Ba2U5T1o8Or/Vn+gdD6koYYIgMGBDvc
rfeagfx3eWKZYG7IfYIP6N5Rg/o//Rp1gaWS431jKlF0cLkM/q8zWuVor8wnAdEL
oUqa2JAKu+C+FgGh2W5xxaf2CXUU0phmNMqjYPyiksaWUs0QO+p/8RkQ4Tpf5t9I
qvL+ehZ9c6wfZUkIKJVIKFQl9d8MQVswMarJH3JT4GZl0tOXfYES2oWKuDtLOrT0
oRxlUZzVPoabrzAgEFATfcLa/mVhHxdxr6nb8qEA47zJ3JCF749sgy9Wp4sjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUw/IIp1EWGcm2+ubVUupJoF67OCAwHwYDVR0j
BBgwFoAUPyUOb7z1vm3tOFHgWwJLuD3nUKswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYR012YVJxZmN6QzNDdEZoNXc5S0hqMWlhYVhTWWlMZUhENHFqcTN2
WFEvMC8zRjI1MEU2RkJDRjVCRTZERUQzODUxRTA1QjAyNEJCODNERTc1MEFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMjUwRTZGQkNGNUJFNkRF
RDM4NTFFMDVCMDI0QkI4M0RFNzUwQUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEdYR012YVJxZmN6QzNDdEZoNXc5S0hqMWlhYVhTWWlMZUhENHFqcTN2WFEvMC8z
RjI1MEU2RkJDRjVCRTZERUQzODUxRTA1QjAyNEJCODNERTc1MEFCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJOtIuc81UUzT/e8a8CCBAiDlivB8QBQrLHQ8t7bsfMnuQ5p1MBR6C+axRKvT
Z/KASUXKuDmhcwIVeESGDWdjDSl5CGY/s1YQoN+DNb578CpzCGoo2hU2jkhQoAlW
exwRmP4fTEq+KljvEZLSExO1uXJo13ofyPKIP9vTB0mdoE9xwu6QloZP5foDFjzB
CcLESbSQEvNYg9DXYo7g+RotlSqTCK/Cd8dKnMDeGxFKGX52dXipWcZaiq3U6Aws
jH2NyIW1G2/NPCMUSQGayEbMwp2U7/PdeTc4FHmpiWM8aGnAF+9tWpKhw1ZYzC1+
r5h9IXjo3Uqh1iENMnvKsOWmfw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:48 2026 by rpki-client