Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
File:                     D1171AF24520C9934655F1D0B335CC88750F0C2F.mft (raw, json)
Hash identifier:          gI7Rx52ZiFxdMyZDeezYdSiI24HaRF7QI0SIXLl3yWU=
Subject key identifier:   35:05:10:09:0E:B0:E2:52:BB:0B:2E:B2:4B:20:9F:9C:68:3F:B2:DD
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       7CA6FE82E0417CCA4076D49E20C6FDDAD52CCC8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
Manifest number:          01CA
Signing time:             Thu 26 Mar 2026 15:16:28 +0000
Manifest this update:     Thu 26 Mar 2026 15:11:28 +0000
Manifest next update:     Fri 27 Mar 2026 16:17:28 +0000
Files and hashes:         1: 323830343a373732633a3a2f33322d3332203d3e20323731313630.roa (hash: ByDp3qULJaxzSt/yDl9lTXPoMUd5pw96dw96K6x/a1s=)
                          2: 323830343a373732633a383030303a3a2f33332d3333203d3e20323731313630.roa (hash: ZKdfWmC05sSuMnqucSxY6A7mqxOhUwZSYyfZzQv1sds=)
                          3: D1171AF24520C9934655F1D0B335CC88750F0C2F.crl (hash: FP6poLe4bbGXgXObxHyv2nb2zioeew8dW9hnxN8Y97I=)
                          4: 3137392e34382e31322e302f32332d3233203d3e20323731313630.roa (hash: 4V6/8XRGdIFW6HKwVui+GXH0vasvGEREWkJLJvKm2bw=)
                          5: 3137392e34382e31342e302f32332d3233203d3e20323731313630.roa (hash: uY3OZdoNJ8SmQ2bu3hzlBbRfk0b/IOx7kIwwgzD1x7c=)
                          6: 3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (hash: u+/aMz96Tv5ij4acoKOUxVw09Re1m27/pQcsJEWlGLo=)
                          7: 323830343a373732633a3a2f33332d3333203d3e20323731313630.roa (hash: fPA4tttYq1aMxqex1rc0XR52rLzSm2WCHxKnWh3eXls=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:fe:82:e0:41:7c:ca:40:76:d4:9e:20:c6:fd:da:d5:2c:cc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Mar 26 15:11:28 2026 GMT
            Not After : Mar 27 16:17:28 2026 GMT
        Subject: CN=350510090EB0E252BB0B2EB24B209F9C683FB2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:2b:05:f3:f6:e7:c8:85:9a:a9:8f:71:f6:
                    b3:8e:26:86:7e:ce:0f:e3:51:8b:2d:56:87:15:b9:
                    a5:b5:c5:f7:c0:1f:ff:62:cf:5a:2f:dd:cb:95:5e:
                    2d:7d:63:25:b5:60:0c:38:03:f3:d8:4c:6d:c6:e6:
                    74:98:bb:11:a5:28:a7:f5:c0:43:be:31:c3:1a:c3:
                    a0:e9:a1:21:df:49:b9:4e:d7:0b:5e:7f:83:a9:0c:
                    05:35:1e:00:f2:8d:25:31:74:d2:42:c2:ba:82:d1:
                    03:f3:99:dd:b2:f6:e5:34:37:e8:e9:f3:14:97:5f:
                    0b:2e:60:23:67:28:1f:f9:40:47:0e:7c:9e:cb:08:
                    c2:33:08:b7:a5:cc:67:65:13:b5:0a:53:c4:90:cf:
                    ea:62:f2:36:19:1c:34:44:e0:0a:a3:40:43:be:90:
                    02:f5:4a:ef:29:90:d4:9e:6f:2c:16:77:9a:a7:dd:
                    51:ab:83:cf:37:c1:bf:b0:03:33:cc:c8:f6:7b:92:
                    40:64:ab:98:3f:ba:5c:8b:56:a8:b2:74:eb:12:97:
                    4f:02:a7:d8:80:d0:de:01:60:bb:b1:48:bc:ce:e0:
                    95:c1:37:2d:d3:55:70:76:44:ea:5b:08:e5:1c:08:
                    96:eb:b8:43:6b:36:1a:e4:c7:90:51:f8:cd:42:0b:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:10:09:0E:B0:E2:52:BB:0B:2E:B2:4B:20:9F:9C:68:3F:B2:DD
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f2:24:8e:1a:bc:68:30:0e:3f:79:7c:b4:19:c6:98:4c:6b:
         6f:81:fe:29:71:2b:72:dd:47:ef:d9:4b:0f:3f:8a:47:b1:af:
         ec:6b:db:e8:09:d7:51:4b:d3:8e:f7:3e:61:d3:81:13:42:7a:
         83:8c:1e:d9:be:a6:8b:33:a7:5a:9a:e0:7b:05:55:55:b2:d3:
         fe:34:ed:a9:70:14:46:91:5e:97:b0:ad:3d:f3:bc:1c:ae:41:
         ed:80:0c:51:48:e6:76:96:1c:23:90:7d:6b:9d:4d:f2:5f:36:
         eb:f4:a0:9c:08:67:f3:7d:bc:b1:a0:f3:63:91:a3:ac:80:0b:
         b7:35:76:98:d1:8c:b0:37:39:92:83:fe:53:fd:2f:ef:2e:5b:
         df:17:22:b6:b7:27:32:4c:21:d8:2f:ac:35:c0:63:c2:6a:57:
         de:ac:34:f7:4e:a6:96:e7:f2:f1:21:93:9f:e5:2c:c1:e8:ed:
         a4:6e:97:28:87:c7:32:61:e3:c2:09:aa:3a:26:77:a9:ad:fa:
         59:4b:22:e2:46:06:f9:4f:39:eb:2e:ba:9d:e6:ad:5e:06:94:
         c1:ab:76:15:cf:23:24:84:3f:64:39:1c:75:cb:b2:3c:b0:df:
         76:95:ce:88:c7:e5:39:c3:ce:4f:96:57:a5:c9:e8:d9:f6:05:
         a8:cb:32:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfKb+guBBfMpAdtSeIMb92tUszIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExNzFBRjI0NTIwQzk5MzQ2NTVGMUQwQjMzNUNDODg3
NTBGMEMyRjAeFw0yNjAzMjYxNTExMjhaFw0yNjAzMjcxNjE3MjhaMDMxMTAvBgNV
BAMTKDM1MDUxMDA5MEVCMEUyNTJCQjBCMkVCMjRCMjA5RjlDNjgzRkIyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGCsF8/bnyIWaqY9x9rOOJoZ+
zg/jUYstVocVuaW1xffAH/9iz1ov3cuVXi19YyW1YAw4A/PYTG3G5nSYuxGlKKf1
wEO+McMaw6DpoSHfSblO1wtef4OpDAU1HgDyjSUxdNJCwrqC0QPzmd2y9uU0N+jp
8xSXXwsuYCNnKB/5QEcOfJ7LCMIzCLelzGdlE7UKU8SQz+pi8jYZHDRE4AqjQEO+
kAL1Su8pkNSebywWd5qn3VGrg883wb+wAzPMyPZ7kkBkq5g/ulyLVqiydOsSl08C
p9iA0N4BYLuxSLzO4JXBNy3TVXB2ROpbCOUcCJbruENrNhrkx5BR+M1CC4svAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNQUQCQ6w4lK7Cy6ySyCfnGg/st0wHwYDVR0j
BBgwFoAU0Rca8kUgyZNGVfHQszXMiHUPDC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpkSnFGY05heTNkcnJKbTZyOEREczNWR05XZEpMZnJRZTg2WjNkV2Nl
ZlYvMC9EMTE3MUFGMjQ1MjBDOTkzNDY1NUYxRDBCMzM1Q0M4ODc1MEYwQzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMTcxQUYyNDUyMEM5OTM0
NjU1RjFEMEIzMzVDQzg4NzUwRjBDMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OEpkSnFGY05heTNkcnJKbTZyOEREczNWR05XZEpMZnJRZTg2WjNkV2NlZlYvMC9E
MTE3MUFGMjQ1MjBDOTkzNDY1NUYxRDBCMzM1Q0M4ODc1MEYwQzJGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjfIkjhq8aDAOP3l8tBnGmExrb4H+KXErct1H79lLDz+KR7Gv7Gvb6AnXUUvT
jvc+YdOBE0J6g4we2b6mizOnWprgewVVVbLT/jTtqXAURpFel7CtPfO8HK5B7YAM
UUjmdpYcI5B9a51N8l826/SgnAhn8328saDzY5GjrIALtzV2mNGMsDc5koP+U/0v
7y5b3xcitrcnMkwh2C+sNcBjwmpX3qw0906mlufy8SGTn+UswejtpG6XKIfHMmHj
wgmqOiZ3qa36WUsi4kYG+U856y66neatXgaUwat2Fc8jJIQ/ZDkcdcuyPLDfdpXO
iMflOcPOT5ZXpcno2fYFqMsyrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:05 2026 by rpki-client