Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File:                     CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier:          zACjm6tSvxNO1Fh9buTEpdWRdCly/40/zmqe75O/Wac=
Subject key identifier:   CA:6B:33:0C:A6:8E:7A:32:6B:02:B5:69:50:18:A9:B9:29:B7:C0:60
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       6836B4445F944DE42E79A9C8B7B6138BA15911F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number:          0180
Signing time:             Thu 26 Mar 2026 14:56:07 +0000
Manifest this update:     Thu 26 Mar 2026 14:51:07 +0000
Manifest next update:     Fri 27 Mar 2026 17:51:07 +0000
Files and hashes:         1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: hiXnpFDApqnOOVDI9NjgcSy9iT/WMGGHTtnGTf3DoiI=)
                          2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
                          3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:36:b4:44:5f:94:4d:e4:2e:79:a9:c8:b7:b6:13:8b:a1:59:11:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Mar 26 14:51:07 2026 GMT
            Not After : Mar 27 17:51:07 2026 GMT
        Subject: CN=CA6B330CA68E7A326B02B5695018A9B929B7C060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:ec:1d:96:30:b1:dc:f5:d0:3e:3c:6f:2b:
                    c4:3d:85:f1:a3:8f:b2:df:b0:39:e3:39:84:d9:ec:
                    39:26:3c:da:81:56:91:b8:e2:d5:b3:f6:1b:a5:5f:
                    5a:8e:35:bd:5c:6d:c8:a2:6d:3a:b9:6a:76:ee:58:
                    fb:08:54:10:2d:59:4f:ab:18:70:37:67:4c:53:a6:
                    b1:b1:ce:49:d8:90:79:59:f4:f1:8b:29:7c:27:1c:
                    69:11:a4:e2:f3:4d:9f:af:61:90:4b:31:df:0a:69:
                    f1:f6:b3:50:a9:6d:c3:0e:8e:2b:15:b2:fb:de:5f:
                    0d:0d:db:60:9a:c2:7d:1d:8b:fe:fd:a6:d1:b0:94:
                    09:c8:19:bd:a1:9d:83:3f:8c:1c:50:91:6f:3f:aa:
                    1c:f6:ac:1c:d4:2d:52:41:c3:4f:86:6b:8e:15:10:
                    02:b0:82:74:be:7c:45:2d:c1:c2:b4:a3:7d:a5:4d:
                    1b:55:76:e3:6f:c1:58:92:0b:01:4f:8f:80:68:38:
                    46:0d:75:b6:43:4e:55:e1:1d:d7:2c:17:cc:80:56:
                    4f:04:6c:ef:1d:bd:a7:54:e7:b9:5c:04:e6:0b:4a:
                    fc:77:84:1b:39:e7:72:1d:46:14:3c:a1:cd:c3:13:
                    f7:00:d6:aa:b5:a5:6a:e6:6a:17:68:3e:e3:0b:27:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:33:0C:A6:8E:7A:32:6B:02:B5:69:50:18:A9:B9:29:B7:C0:60
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:e7:02:e9:78:b6:e4:09:6f:92:77:a0:20:c6:26:f7:7a:
         43:bb:96:0c:f5:7d:b6:e0:43:d6:bd:96:48:43:b9:ab:0e:8b:
         0d:14:4f:5b:b4:a8:34:27:27:f4:68:7d:6b:99:8e:79:ea:75:
         d9:cb:4a:13:59:ca:ce:c9:b4:68:fd:b0:a8:5a:aa:85:6e:3d:
         ac:c2:82:78:56:c3:88:2a:83:29:44:b6:28:c6:d9:ed:a3:ba:
         25:5c:16:f0:d7:0b:25:82:c5:a2:30:9c:12:77:ce:e4:bd:35:
         6c:27:4a:fc:8e:dc:00:cb:04:ee:2f:6e:ac:b0:52:39:a7:0d:
         29:7e:02:c9:e1:e5:de:10:0b:2f:55:27:f4:9c:8c:b6:6c:2c:
         0d:97:0c:67:3f:28:bf:7c:c0:78:90:f0:75:3e:65:4c:f1:f7:
         c4:f8:1d:ef:a6:52:8b:50:0f:4c:b7:01:73:53:2c:3b:8d:1e:
         47:79:26:0a:fd:03:ae:8b:5a:c7:46:0d:45:79:8a:ff:b0:6c:
         d4:26:6c:63:00:f0:20:a3:ea:87:3f:0b:a1:6f:10:ad:2e:f0:
         3d:0a:44:66:e8:e3:22:9c:2d:d8:b0:13:a3:7d:ec:e4:e7:51:
         6c:de:99:98:7c:e8:73:82:60:9e:96:4c:90:f7:0a:51:65:d9:
         1b:8d:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:16:26 2026 by rpki-client