Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
File:                     DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json)
Hash identifier:          M5d0vEtLcRDHyIqI2wA9ttAXINTGCIqdDTXNA/OT5qI=
Subject key identifier:   38:A0:8F:EF:04:B1:C9:17:55:18:E5:99:5F:59:EE:E7:EE:7F:E1:F0
Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92
Certificate issuer:       /CN=DD880B71129737798123EE9EDC1423C3E8280892
Certificate serial:       33CDD7DE668F1A0ECC1F1651A72A876E4E3CB1B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
Manifest number:          040A
Signing time:             Thu 26 Mar 2026 10:00:00 +0000
Manifest this update:     Thu 26 Mar 2026 09:55:00 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:00 +0000
Files and hashes:         1: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: TQfgLG5X3QnUo/1VPcWF7P3VD4rUYriwZ7gKOhkv/z0=)
                          2: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: rkeEKkgWRdozMgmvuM6gmnvsODu5gF2aK1wr0oCwuas=)
                          3: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: iCx3xg5krG4iM1lxR5uLVHmBRX1kEx0SfB2Sj+RKTHA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl
                          rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cd:d7:de:66:8f:1a:0e:cc:1f:16:51:a7:2a:87:6e:4e:3c:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892
        Validity
            Not Before: Mar 26 09:55:00 2026 GMT
            Not After : Apr  2 10:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:2f:2e:8b:77:37:5e:2a:8b:9f:32:44:73:
                    52:92:5d:4f:a9:e8:c8:79:86:d2:36:2c:5b:00:b8:
                    ac:3a:42:99:ee:dd:ab:09:c8:28:e1:6c:a7:3e:92:
                    0f:7e:92:eb:7e:20:7b:06:28:ea:1e:63:3e:1c:3f:
                    d4:55:60:d4:a0:cf:26:bc:06:07:83:c0:47:28:52:
                    2a:5d:d2:5d:68:69:c0:74:67:69:27:69:a3:fb:12:
                    5a:9f:21:15:39:3c:93:38:4f:5b:51:a3:5c:77:f1:
                    3a:e9:69:0f:86:26:de:3d:32:78:52:2b:6f:dd:16:
                    fd:1b:6b:7d:33:d4:27:a5:97:fc:84:c1:70:44:90:
                    61:eb:1b:83:9d:9e:54:80:e5:db:d2:83:fd:f5:0f:
                    3b:b5:c4:dd:37:a5:dd:1f:e2:a5:89:b5:c9:47:fe:
                    7d:35:0d:e2:fa:ca:70:92:a2:8e:1b:f1:6c:23:77:
                    24:e5:ab:7b:a8:34:08:ea:4c:ff:ca:59:35:14:e9:
                    ef:18:06:f5:5e:fc:b1:bb:cf:99:6a:b2:4e:f9:19:
                    c6:a7:05:d6:ff:80:f7:de:c0:3b:fe:21:2e:29:a1:
                    af:78:7e:d2:a4:48:2f:79:f8:e5:1b:3d:5e:46:88:
                    5f:86:3d:f4:25:bd:f2:68:fb:5c:b9:ae:ad:c2:48:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A0:8F:EF:04:B1:C9:17:55:18:E5:99:5F:59:EE:E7:EE:7F:E1:F0
            X509v3 Authority Key Identifier:
                keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:64:8e:46:b6:90:a4:26:e3:fe:ac:38:51:74:f4:06:7c:
         73:3e:27:4e:ed:0c:53:42:83:f4:6d:16:27:98:4a:16:eb:76:
         1f:76:dd:a8:a7:2c:e6:34:a2:fe:53:d9:5a:b3:06:48:d2:df:
         97:b4:4a:59:92:b2:18:25:9f:de:38:64:b2:9b:1e:38:f4:53:
         0c:5c:58:d6:c4:24:ec:86:18:e0:c2:59:fc:f7:f5:20:67:26:
         e4:59:9c:e8:61:11:8b:4c:c1:2a:51:ff:34:0c:64:c7:bb:b8:
         5c:6e:e3:b7:f8:32:65:9f:17:82:34:0e:39:74:58:47:a7:cb:
         c1:04:6d:4c:ff:f2:7d:98:13:75:3f:54:d7:11:8a:bc:a9:65:
         60:1c:68:6a:d8:8b:92:be:7a:65:55:65:cd:57:84:0c:fb:f8:
         87:02:58:11:49:e7:fe:b6:d2:e4:80:15:0c:c3:af:6a:3d:12:
         eb:0e:a6:43:c9:b5:d6:55:9a:bb:81:7a:eb:87:cb:d3:cb:c8:
         13:e3:f9:21:4e:d4:72:99:f6:4e:7e:2a:ff:4a:9b:6c:62:d4:
         4c:33:5c:e4:00:cc:26:d9:e8:60:d2:c1:18:f6:bc:3e:2b:2f:
         37:57:60:ea:a2:43:84:d2:d9:00:7a:a7:4a:57:2f:8f:da:39:
         2d:ea:73:e0
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUM83X3maPGg7MHxZRpyqHbk48sbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ4ODBCNzExMjk3Mzc3OTgxMjNFRTlFREMxNDIzQzNF
ODI4MDg5MjAeFw0yNjAzMjYwOTU1MDBaFw0yNjA0MDIxMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI0NzJGMkU4Qjc3Mzc1RTJB
OEI5RjMyNDQ3MzUyOTI1RDRGQTlFOEM4Nzk4NkQyMzYyQzVCMDBCOEFDM0E0Mjk5
RUVEREFCMDlDODI4RTE2Q0E3M0U5MjBGN0U5MkVCN0UyMDdCMDYyOEVBMUU2MzNF
MUMzRkQ0NTU2MEQ0QTBDRjI2QkMwNjA3ODNDMDQ3Mjg1MjJBNUREMjVENjg2OUMw
NzQ2NzY5Mjc2OUEzRkIxMjVBOUYyMTE1MzkzQzkzMzg0RjVCNTFBMzVDNzdGMTNB
RTk2OTBGODYyNkRFM0QzMjc4NTIyQjZGREQxNkZEMUI2QjdEMzNENDI3QTU5N0ZD
ODRDMTcwNDQ5MDYxRUIxQjgzOUQ5RTU0ODBFNURCRDI4M0ZERjUwRjNCQjVDNERE
MzdBNUREMUZFMkE1ODlCNUM5NDdGRTdEMzUwREUyRkFDQTcwOTJBMjhFMUJGMTZD
MjM3NzI0RTVBQjdCQTgzNDA4RUE0Q0ZGQ0E1OTM1MTRFOUVGMTgwNkY1NUVGQ0Ix
QkJDRjk5NkFCMjRFRjkxOUM2QTcwNUQ2RkY4MEY3REVDMDNCRkUyMTJFMjlBMUFG
Nzg3RUQyQTQ0ODJGNzlGOEU1MUIzRDVFNDY4ODVGODYzREY0MjVCREYyNjhGQjVD
QjlBRUFEQzI0ODg4NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu0cvLot3N14qi58yRHNSkl1PqejIeYbSNixbALisOkKZ7t2rCcgo
4WynPpIPfpLrfiB7BijqHmM+HD/UVWDUoM8mvAYHg8BHKFIqXdJdaGnAdGdpJ2mj
+xJanyEVOTyTOE9bUaNcd/E66WkPhibePTJ4Uitv3Rb9G2t9M9QnpZf8hMFwRJBh
6xuDnZ5UgOXb0oP99Q87tcTdN6XdH+KlibXJR/59NQ3i+spwkqKOG/FsI3ck5at7
qDQI6kz/ylk1FOnvGAb1Xvyxu8+ZarJO+RnGpwXW/4D33sA7/iEuKaGveH7SpEgv
efjlGz1eRohfhj30Jb3yaPtcua6twkiIUwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDigj+8EsckXVRjlmV9Z7ufuf+HwMB8GA1UdIwQYMBaAFN2IC3ESlzd5gSPuntwU
I8PoKAiSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtO
S3RMMWJwZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3
OTgxMjNFRTlFREMxNDIzQzNFODI4MDg5Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ERDg4MEI3MTEyOTczNzc5ODEyM0VFOUVEQzE0MjNDM0U4Mjgw
ODkyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtOS3RMMWJw
ZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3OTgxMjNF
RTlFREMxNDIzQzNFODI4MDg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFupZI5GtpCkJuP+rDhRdPQG
fHM+J07tDFNCg/RtFieYShbrdh923ainLOY0ov5T2VqzBkjS35e0SlmSshgln944
ZLKbHjj0UwxcWNbEJOyGGODCWfz39SBnJuRZnOhhEYtMwSpR/zQMZMe7uFxu47f4
MmWfF4I0Djl0WEeny8EEbUz/8n2YE3U/VNcRirypZWAcaGrYi5K+emVVZc1XhAz7
+IcCWBFJ5/620uSAFQzDr2o9EusOpkPJtdZVmruBeuuHy9PLyBPj+SFO1HKZ9k5+
Kv9Km2xi1EwzXOQAzCbZ6GDSwRj2vD4rLzdXYOqiQ4TS2QB6p0pXL4/aOS3qc+A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:49 2026 by rpki-client