Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft
File:                     3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft (raw, json)
Hash identifier:          Ibx/lmi5odmWnhj2b3KAh+v4hsvrMDI510YVIz0Nemw=
Subject key identifier:   32:4A:4F:E2:0F:9E:57:7C:B3:65:46:1F:C7:20:A3:1B:29:F9:95:46
Authority key identifier: 3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B
Certificate issuer:       /CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
Certificate serial:       0A670616142DE4E02457470F06EC519A2D0AF49C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft
Manifest number:          017B
Signing time:             Thu 26 Mar 2026 05:37:47 +0000
Manifest this update:     Thu 26 Mar 2026 05:32:47 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:47 +0000
Files and hashes:         1: 323830343a333066303a3130303a3a2f34302d3430203d3e20323634393832.roa (hash: k46AkaiPbPzm3kleJK2UwZp1qsPUi18pSM93cdJKam0=)
                          2: 3137302e302e3133352e302f32342d3234203d3e20323634393832.roa (hash: WpSyqlM8q9vw918/C5O5QDmq89kkMxxcsa3wy6hGVjY=)
                          3: 323830343a333066303a3230303a3a2f34312d3431203d3e20323634393832.roa (hash: jfQ4POu20xNgu+0qJlI0JgZz9otZ67jqtB/3UYqPybk=)
                          4: 323830343a333066303a3230303a3a2f34302d3430203d3e20323634393832.roa (hash: DoWQFy7aGZ3YOLeQgrV+5tIq1mIBPxaPMhreTYDUKq4=)
                          5: 3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl (hash: Vidy8JRAQtORe4dZVGozJinKaheqJgA/PYzDEhs+DBI=)
                          6: 3137302e302e3133332e302f32342d3234203d3e20323634393832.roa (hash: 7Ynz5/bNZ8Mi1uhapFYV6uKHlWCP5WQl9F8/wCwblNc=)
                          7: 3137302e302e3133342e302f32332d3233203d3e20323634393832.roa (hash: nGTasAWxo9yKiq36TztJNYXUJpk9My/9BC1OPc3MW8U=)
                          8: 3137302e302e3133322e302f32342d3234203d3e20323634393832.roa (hash: 3QOBRMLurjp4+K2bTv/3G6NpXQCROgRy53qoN7r/CFs=)
                          9: 323830343a333066303a3238303a3a2f34312d3431203d3e20323634393832.roa (hash: /VsXttVU+mfIGF9mFQZvIBYTri645g6YK0jkRUe9pxM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl
                          rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:06:16:14:2d:e4:e0:24:57:47:0f:06:ec:51:9a:2d:0a:f4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE623ACA735E7C30285AC172A3418724D5F1A7B
        Validity
            Not Before: Mar 26 05:32:47 2026 GMT
            Not After : Mar 27 06:01:47 2026 GMT
        Subject: CN=324A4FE20F9E577CB365461FC720A31B29F99546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:2b:ea:89:bf:e8:78:c6:8d:da:61:e8:1f:
                    95:fd:90:3c:0c:5c:e2:1f:ab:d1:e9:6a:83:7e:e4:
                    d0:02:3b:d5:b5:b9:56:4b:cd:7e:4e:49:85:8f:7a:
                    d8:44:11:bb:b1:d8:9b:74:37:d9:ee:3d:d3:67:43:
                    0c:d8:ed:06:ba:84:af:86:ee:9f:23:53:e4:6b:a3:
                    83:11:79:be:67:59:43:92:1d:de:c9:5d:9d:5f:05:
                    11:e2:4f:37:b3:f9:c0:c7:53:00:79:3b:ea:20:20:
                    0b:d7:a0:17:4e:11:72:59:06:22:9c:c9:1b:ca:0d:
                    93:76:77:1d:ff:f7:88:b2:90:fb:8b:5c:44:b3:30:
                    3a:8a:a8:1b:0a:d4:0d:d7:39:d9:19:8e:d8:c3:8a:
                    3d:3b:9a:89:68:d8:72:89:d4:21:70:8a:d7:36:60:
                    03:da:e0:39:0b:ee:83:5f:a3:d1:b1:4e:27:3f:e7:
                    6e:c7:4e:13:b9:8e:2f:3f:25:cf:b1:86:f5:7c:26:
                    9a:db:08:c9:9c:2a:b3:fa:85:ed:c2:e6:fd:53:7a:
                    0d:69:bf:f8:0a:38:a1:c7:9b:8a:73:ba:1c:1a:30:
                    dc:12:c2:2e:4a:c6:0e:ab:59:62:cf:78:b2:81:d0:
                    b5:81:81:9c:8d:39:51:e6:b8:5e:02:08:e9:c9:7c:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:4F:E2:0F:9E:57:7C:B3:65:46:1F:C7:20:A3:1B:29:F9:95:46
            X509v3 Authority Key Identifier:
                keyid:3D:E6:23:AC:A7:35:E7:C3:02:85:AC:17:2A:34:18:72:4D:5F:1A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE623ACA735E7C30285AC172A3418724D5F1A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92KuSi26UpHvPkYESXDSHuK6M4naw5VpE8JeXbGYwSbL/0/3DE623ACA735E7C30285AC172A3418724D5F1A7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d6:2c:b0:7c:1f:da:fe:fa:ce:6a:11:ae:db:9a:5b:d4:1f:
         c0:5d:b2:80:bc:fc:9a:a5:01:22:98:83:9d:84:62:ea:2e:e8:
         b0:46:5c:0c:05:40:65:d2:7f:ea:6d:b6:64:ec:a3:32:7d:84:
         9f:5a:3c:ac:04:44:36:70:bd:6d:ba:91:f9:5f:bf:c5:53:8e:
         3b:61:65:2f:99:82:5c:63:a2:cb:f2:8e:37:ae:c4:77:9a:2b:
         a5:c8:52:ea:54:9e:24:b8:a2:e6:a2:6b:fd:66:1c:c4:8e:83:
         4e:f2:02:e8:47:63:63:45:2f:18:e6:18:03:1b:72:4d:e7:8f:
         6f:94:5d:a8:c4:6d:fe:c3:22:e7:04:ee:e8:f7:79:64:16:36:
         39:f4:d4:a9:33:54:39:96:c7:1b:b2:82:a2:74:f9:c2:7d:62:
         b4:a7:b5:fc:b4:86:ab:51:16:fe:72:3c:cd:bc:67:19:57:9c:
         b7:bd:41:1b:3d:2c:31:30:6a:01:ad:79:ab:e7:80:a9:ce:de:
         cd:b7:9b:be:77:27:4b:de:00:a4:dc:98:76:1b:c9:5c:ce:20:
         77:92:05:b9:39:dd:b8:78:d0:ef:f6:63:23:e2:85:7b:4b:21:
         ce:d0:4a:66:5d:b5:8e:d4:df:8e:25:c0:02:de:c9:32:18:44:
         34:84:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:55:46 2026 by rpki-client