Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
File:                     2A63119ED3171CA655D3DBACD89FA128C88760E9.mft (raw, json)
Hash identifier:          BsySQ19wP5J62Azzx8aRFZAu1YZuC2c1JivdvTNh6Kc=
Subject key identifier:   7D:C8:C2:22:96:5F:33:4A:B8:A1:BC:07:55:BD:5D:B6:3B:28:62:88
Authority key identifier: 2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9
Certificate issuer:       /CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
Certificate serial:       18BBD1E8A8043DD443B2460547F4F2E8C5C9646D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
Manifest number:          0109
Signing time:             Thu 26 Mar 2026 12:48:11 +0000
Manifest this update:     Thu 26 Mar 2026 12:43:11 +0000
Manifest next update:     Fri 27 Mar 2026 14:12:11 +0000
Files and hashes:         1: 2A63119ED3171CA655D3DBACD89FA128C88760E9.crl (hash: DSDE1EykgCd6qkn7oGVhP9vzS69h2zKxBZDlNKjykLo=)
                          2: 3137372e3133302e302e302f32302d3234203d3e203238323630.roa (hash: p0UevZOdii/KW2bPf0yYOW8ejVYVJ+FjzqZKGs3sPnQ=)
                          3: 3138372e39352e33322e302f32302d3234203d3e203238323630.roa (hash: aEeRPTU9MMsoNjZ4MHFDDVhGJjPL8/DLn6hTIH4DDsY=)
                          4: 3138362e3139332e3234302e302f32302d3234203d3e203238323630.roa (hash: unhHaQYULGC0/VmFLz/6JkbKqhI98mIcdDfJX1AtUWk=)
                          5: 323830343a323865343a3a2f33322d3438203d3e203238323630.roa (hash: 7Dbfu1zcWThV/UZGw3CvPOgqCYGWhm6GuOkAn9KgKb0=)
                          6: 3138372e31362e3234302e302f32302d3234203d3e203238323630.roa (hash: 1SVXbFVjN8JtF2jCTVge2zltTBA7xJwnoGSDhWyCuto=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:d1:e8:a8:04:3d:d4:43:b2:46:05:47:f4:f2:e8:c5:c9:64:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A63119ED3171CA655D3DBACD89FA128C88760E9
        Validity
            Not Before: Mar 26 12:43:11 2026 GMT
            Not After : Mar 27 14:12:11 2026 GMT
        Subject: CN=7DC8C222965F334AB8A1BC0755BD5DB63B286288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:9b:a1:de:70:b5:c1:9f:bb:59:5b:27:2d:
                    4d:77:ae:7f:18:c1:94:d2:1e:13:2e:d8:51:8f:de:
                    79:77:4a:42:3d:63:83:a4:02:41:17:b6:54:a9:ed:
                    29:61:3e:d5:34:57:c1:91:89:40:2a:29:49:6d:c9:
                    36:cf:06:38:73:f1:0f:54:28:63:18:46:09:df:7d:
                    83:6b:49:08:2c:45:eb:3d:6c:fa:a9:b7:47:25:1a:
                    1e:be:83:16:5d:f1:b8:ad:5d:15:e1:a5:ba:7b:c5:
                    49:d8:0d:af:67:99:ab:9e:35:fc:4f:38:0d:ae:3b:
                    60:1a:3f:e4:df:b2:cc:26:ce:76:ef:45:21:69:7b:
                    c8:2f:4a:30:16:83:92:7e:45:1b:22:63:66:7e:6e:
                    28:9c:ed:e5:8b:f5:ac:38:0b:a9:5f:ef:9b:d0:9b:
                    9e:e1:67:59:42:61:aa:52:22:ed:a6:ce:dd:02:de:
                    64:9f:18:cb:34:43:ec:c5:44:de:9e:38:bb:b6:89:
                    e8:8c:70:b0:44:f3:c7:e4:31:b8:42:60:3c:58:c0:
                    ea:b5:24:c8:ec:b1:49:d2:b2:3a:0f:9e:c2:39:5e:
                    0f:f2:55:12:7f:4b:03:5c:3e:d5:09:27:be:ac:db:
                    b5:43:6c:fa:d9:69:a5:76:ad:c5:df:dc:9d:ca:33:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:C2:22:96:5F:33:4A:B8:A1:BC:07:55:BD:5D:B6:3B:28:62:88
            X509v3 Authority Key Identifier:
                keyid:2A:63:11:9E:D3:17:1C:A6:55:D3:DB:AC:D8:9F:A1:28:C8:87:60:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A63119ED3171CA655D3DBACD89FA128C88760E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/2A63119ED3171CA655D3DBACD89FA128C88760E9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:b1:38:8f:ef:cb:e6:ce:31:10:24:ff:20:68:25:ec:4c:
         54:9b:c7:d7:e0:1a:71:57:1c:49:92:e3:15:b3:dc:9a:7b:c0:
         24:c7:b9:1c:64:93:4d:6b:39:5f:4b:9b:95:1b:78:3e:4c:cd:
         2e:8d:03:e8:6f:ae:1e:9d:4b:50:c3:07:7b:d3:6a:e5:47:d3:
         3e:da:92:ce:74:5d:c3:11:bd:a6:0c:94:60:45:4c:c0:5e:1a:
         2a:dd:99:9d:04:f9:65:c8:f4:66:25:b4:b9:a9:60:f5:0a:eb:
         dd:c6:5a:d5:4e:79:a0:d0:9b:32:c8:12:9a:94:28:1c:1b:33:
         bc:84:84:2d:4b:c0:f0:33:18:6e:77:7e:1b:62:b7:c8:57:a6:
         82:1d:51:b6:fa:33:ee:2e:8a:e6:10:e7:51:2c:b5:39:41:f0:
         aa:aa:c2:27:73:22:87:9a:48:eb:a0:bd:d1:af:8b:1f:4d:1f:
         3d:7a:4c:d9:c8:b1:63:96:a5:90:25:18:13:fd:b7:5e:d7:44:
         c1:6d:4b:f6:b3:1d:96:76:e7:c3:9e:99:c1:98:f0:9b:b5:a6:
         52:bc:e7:93:e0:a6:58:8a:a8:9a:9c:a5:ad:f8:79:43:73:c8:
         2b:48:6d:ce:c3:94:d8:9d:61:8f:ca:1f:34:27:9b:53:bb:bb:
         88:38:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:24:21 2026 by rpki-client