Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          Dy3i3SbWzRFLe6nj2Nkck4vwTVyJ53bzJUC/mqHrl4g=
Subject key identifier:   A1:F0:E1:92:07:9A:A9:A3:14:49:71:84:1B:90:30:F7:30:C5:BA:8D
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       11C5634C5FA93E41A0E5C2171535A6D4894069E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          0402
Signing time:             Wed 13 May 2026 08:01:22 +0000
Manifest this update:     Wed 13 May 2026 07:56:22 +0000
Manifest next update:     Thu 14 May 2026 08:38:22 +0000
Files and hashes:         1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=)
                          2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: WrRfuhfQ4yB4q8oG5O+ciyIp4G6fpFehDyCk+XTduoc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c5:63:4c:5f:a9:3e:41:a0:e5:c2:17:15:35:a6:d4:89:40:69:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: May 13 07:56:22 2026 GMT
            Not After : May 14 08:38:22 2026 GMT
        Subject: CN=A1F0E192079AA9A3144971841B9030F730C5BA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:49:dd:cf:84:95:b0:87:aa:1e:c2:e5:b3:
                    b1:f4:fc:15:99:0a:b8:89:9a:8c:d0:cb:1f:28:70:
                    bd:f3:ee:10:c1:58:2d:20:70:e6:33:8b:04:e3:76:
                    e3:22:2d:83:c4:8f:87:86:12:e0:6b:fb:6d:ee:07:
                    04:72:25:de:2b:e7:c3:18:c1:2e:cb:e6:91:30:fe:
                    fb:99:f0:3e:5e:11:69:b8:18:9d:1b:40:47:28:41:
                    71:87:cc:98:e4:14:de:60:20:17:b6:90:68:27:7a:
                    ae:d7:0e:4f:c8:f2:6e:a7:68:5a:1f:cc:b6:fa:51:
                    82:d9:20:46:cf:fb:61:eb:25:6c:50:c8:97:b5:6d:
                    09:d5:15:f7:5e:b6:81:c6:12:fa:63:36:c9:8f:ba:
                    b0:15:88:b7:e7:ad:53:28:d9:5f:70:a8:dc:fd:6f:
                    04:e6:a1:7e:74:9a:0d:96:98:16:cc:9f:02:78:65:
                    60:5c:50:aa:60:e4:b9:cb:4e:8d:b3:08:ea:6f:69:
                    58:f7:4c:4f:02:3a:5b:0b:8c:10:e5:97:32:ae:4b:
                    f5:47:84:42:76:f6:87:29:53:3a:60:6c:70:a7:ae:
                    e3:61:d0:66:b4:55:f9:3b:a8:52:44:f5:31:34:da:
                    b3:94:13:29:75:19:72:9f:d4:00:08:8e:25:55:cd:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F0:E1:92:07:9A:A9:A3:14:49:71:84:1B:90:30:F7:30:C5:BA:8D
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:c3:dc:dd:02:8c:02:12:f2:e4:85:ca:0a:9b:8a:26:b3:
         7c:ec:40:a3:1f:52:3d:eb:19:f8:c7:d8:da:93:17:90:06:e5:
         70:a9:ed:f2:06:fb:fe:a2:c3:6a:a3:59:d3:cc:52:d1:15:9a:
         64:70:42:32:17:88:61:4b:bb:26:bc:0d:85:0c:24:01:a6:bb:
         bd:9e:52:ea:74:ba:c5:7c:56:df:6b:cd:c6:d9:6e:11:6f:ee:
         f5:88:67:94:63:e1:fa:1e:82:b7:ce:69:06:bf:66:21:ed:cb:
         a6:93:8b:6f:c7:90:64:42:81:b6:b9:59:b7:f2:8b:05:b7:f8:
         cc:3f:a0:ce:b7:1c:0e:87:78:8d:20:73:68:38:e7:5a:02:ea:
         92:6d:9b:ed:fe:db:9d:5f:b5:8a:d4:d8:3f:22:4c:d5:9d:88:
         0b:9e:b1:13:fe:b2:aa:36:60:9f:3f:bb:b2:77:90:7d:6d:41:
         21:9f:d9:cc:50:5a:fd:c3:26:d1:6b:0a:e7:75:93:1c:cd:78:
         c1:83:3e:2e:27:8d:cc:da:98:6b:4d:90:55:23:d5:84:60:17:
         ab:e3:ef:16:fc:f8:58:3d:61:2c:9a:dc:89:2e:61:13:3c:3a:
         2e:59:ec:1f:5d:aa:9b:8f:29:1f:e5:71:3e:f1:ef:b8:41:47:
         0e:20:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:34:33 2026 by rpki-client