Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
File:                     2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json)
Hash identifier:          W5hONv7G4z1pvY3iaEimN1Lquq0H9T5aG2xEt8DHgEc=
Subject key identifier:   2A:AC:76:F7:97:DD:48:87:0E:8A:46:CD:D9:E4:FD:C9:D4:E0:2D:EE
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       1251E9F6F9637015C09B158760FC586882B8B4DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
Manifest number:          0372
Signing time:             Thu 26 Mar 2026 02:24:36 +0000
Manifest this update:     Thu 26 Mar 2026 02:19:36 +0000
Manifest next update:     Fri 27 Mar 2026 03:05:36 +0000
Files and hashes:         1: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: KleVsHAqtvWr8k2742HawWCdXqH/hhdJzyliz+AilX4=)
                          2: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: z6AxAeBvuZkF2Hv3TgcmR5cniDfzlrMjmqRXv6n3fBs=)
                          3: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: Vp+ej4dQx+65lyUdgAHuPgBaf+ucorRNSBDiDndfVME=)
                          4: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: 1IV3WY/QEAW1n1IWjg0tOjW5dO+ggc66oTNHEIV7TWI=)
                          5: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: 3Ffp5JJCiBJxBl96vfAKZjO3HJm6sYK5tARVTWZSBow=)
                          6: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: kx+mYX7OCIdCLDwBkGpUEcFmz556q86r0kCKDqaZzL4=)
                          7: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: cexwvQVo5HooQieHGBIwzXZEIQLA1g0ov7qJ1ITQWNQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:51:e9:f6:f9:63:70:15:c0:9b:15:87:60:fc:58:68:82:b8:b4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Mar 26 02:19:36 2026 GMT
            Not After : Mar 27 03:05:36 2026 GMT
        Subject: CN=2AAC76F797DD48870E8A46CDD9E4FDC9D4E02DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:72:11:6e:46:6f:1d:74:c1:85:13:b5:ca:
                    60:aa:35:d7:ed:c8:c6:cd:09:6f:f2:c0:85:3f:9f:
                    75:14:32:d3:74:d7:c1:dd:e3:ee:82:2c:28:f4:3e:
                    2c:e5:25:bc:7a:a9:40:c2:ca:a3:43:63:06:69:4b:
                    92:6d:b3:a0:f8:fd:b6:c6:80:42:b4:ed:17:56:02:
                    62:04:1e:f5:8d:71:15:c6:9a:b1:ce:03:6c:c5:ab:
                    68:49:f1:26:ad:03:1c:d0:b8:59:d2:aa:04:0a:7d:
                    77:e3:02:04:4b:41:72:32:b1:80:1b:67:18:d9:5d:
                    3f:0e:0d:00:a0:4c:94:30:a5:17:92:f5:a8:4d:33:
                    3e:3d:f9:f8:53:74:8e:31:3a:f1:44:3d:62:be:32:
                    04:af:01:78:82:42:4d:a3:94:09:6f:04:58:70:95:
                    cb:5c:b0:27:22:72:26:80:fa:37:ed:ad:80:43:3c:
                    b8:4f:9e:47:4f:f4:17:75:04:68:cb:35:6b:62:15:
                    44:8d:d7:0b:64:1a:a0:1f:ac:21:d7:50:91:08:d4:
                    92:90:05:f6:ee:5c:52:fb:c4:ef:af:69:b3:7e:62:
                    89:07:1d:96:05:84:97:84:69:04:96:df:ec:18:44:
                    c3:45:92:8b:cb:a5:ab:1f:f6:97:32:b7:cc:2e:b0:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:76:F7:97:DD:48:87:0E:8A:46:CD:D9:E4:FD:C9:D4:E0:2D:EE
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:f6:38:cd:09:06:5c:87:0b:8f:ca:9e:d1:bb:54:b6:35:
         f0:e0:66:c8:fb:bd:a9:fb:ac:9a:72:cf:40:57:f3:f9:83:4e:
         97:25:66:ba:b4:6d:ca:1a:dc:85:1f:71:7d:e7:e7:6e:07:b7:
         89:15:94:58:50:db:ae:fe:a6:c7:f2:43:a3:4f:b6:f2:19:a8:
         f5:8c:e9:78:b1:48:c8:f8:da:fe:9a:16:2b:f5:b4:66:87:4a:
         a7:21:ea:b8:bf:d0:62:5e:95:48:9b:36:84:21:74:f5:3a:df:
         a6:3c:b2:1e:98:89:96:4d:28:d8:65:d5:41:b7:9e:3b:1c:45:
         81:4c:98:36:44:30:a8:a2:35:73:16:20:6a:b5:dd:4e:e0:bd:
         ab:f0:99:aa:6b:bf:a7:b5:36:e4:38:ca:65:6b:2e:7c:36:22:
         28:b6:01:28:8a:68:53:a3:ce:2a:64:aa:cd:d6:0b:5d:32:cf:
         25:cf:ea:36:11:43:f3:9f:3b:60:f6:d6:20:bc:9f:04:69:b0:
         ce:97:03:c6:3d:ef:d0:3d:b5:50:b2:be:45:8e:94:73:99:f4:
         e2:05:21:33:13:8e:ff:38:e5:31:a0:a2:ba:4d:25:37:c2:70:
         15:75:d2:8c:e5:18:6b:50:93:15:91:23:ea:42:42:d4:7a:1b:
         62:76:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:19 2026 by rpki-client