Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
File:                     43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft (raw, json)
Hash identifier:          EF8x/p3NOIOeW7ZQ2W8Nw5DO0Q47KjCZpci1z9QYPM0=
Subject key identifier:   17:2C:34:B6:60:C4:8B:42:6F:17:83:87:88:8E:84:7C:8C:07:D3:F5
Authority key identifier: 43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29
Certificate issuer:       /CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
Certificate serial:       0A0C78FA2A0BFAE3033A8C487797EAE101F8BC33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
Manifest number:          8D
Signing time:             Thu 26 Mar 2026 13:45:50 +0000
Manifest this update:     Thu 26 Mar 2026 13:40:50 +0000
Manifest next update:     Fri 27 Mar 2026 16:58:50 +0000
Files and hashes:         1: 34352e3138392e38342e302f32342d3234203d3e20323639363039.roa (hash: GUoBBSdoX2KRAD3Blar1vVC0TnMpWwki30M5GHfjaGQ=)
                          2: 34352e3138392e38362e302f32342d3234203d3e20323639363039.roa (hash: aqYPVwHaN0Ek6Xv4pt4SPeM9bMkKJnGm0jcx8fb+qM4=)
                          3: 323830343a363732633a3830303a3a2f33372d3337203d3e20323639363039.roa (hash: l0AEWgI+/AtvJgdCWEjgsVr2xY2EGRkLC3ggybd3M6Y=)
                          4: 323830343a363732633a363030303a3a2f33382d3338203d3e20323639363039.roa (hash: nk1hn/ErW6YHSmp+IjDeqZ5m6QB6NyTBmZIUe14/0M8=)
                          5: 34352e3138392e38372e302f32342d3234203d3e20323639363039.roa (hash: h8CVzhbbnAgJofLZ04PqSEhuWd/avSFMdOe4x8e0LGs=)
                          6: 34352e3138392e38342e302f32332d3233203d3e20323639363039.roa (hash: UuV3WmyZZRHMziVxKBlYq0V9Driu4vY2f2tJEydDpdU=)
                          7: 34352e3138392e38352e302f32342d3234203d3e20323639363039.roa (hash: +5RGMqylqh7QBD38OAeEFpAAzkRsyde500oaiqvDNo4=)
                          8: 323830343a363732633a373830303a3a2f33382d3338203d3e20323639363039.roa (hash: sWtWQ+U5me9zXDN2epEjJIiXwHoZvdXUIUsgAo8qh00=)
                          9: 323830343a363732633a3a2f33322d3332203d3e20323639363039.roa (hash: 0Pu+vrteon7naiWdDcWl4eChNKiwFp/Mr3WEpAk4CbA=)
                          10: 323830343a363732633a373030303a3a2f33392d3339203d3e20323639363039.roa (hash: 5CbZrUAFB68NVgN3+m6grZpFg3selSlPacKUYXHqsPQ=)
                          11: 323830343a363732633a373430303a3a2f33392d3339203d3e20323639363039.roa (hash: QYNg3Da7+xeGPLccIFp4boWtzDDjNdEc38IB/axgOGY=)
                          12: 43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl (hash: S3SvYbyGxhmDRIoIX1PuZGbuXnftKCcCbp3AiHOUAAw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl
                          rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0c:78:fa:2a:0b:fa:e3:03:3a:8c:48:77:97:ea:e1:01:f8:bc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29
        Validity
            Not Before: Mar 26 13:40:50 2026 GMT
            Not After : Mar 27 16:58:50 2026 GMT
        Subject: CN=172C34B660C48B426F178387888E847C8C07D3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:12:fe:b9:18:3a:ae:05:a6:09:08:0c:a2:
                    b6:b3:2e:bc:92:53:5b:44:c8:18:6c:c2:73:6f:2e:
                    f5:2f:96:f5:a0:9c:5e:7f:04:88:38:e1:0b:fd:7a:
                    14:47:a8:73:29:18:fd:0e:ea:38:96:74:63:5b:49:
                    92:98:a1:3a:91:66:06:0d:fc:be:fb:c2:86:d0:d1:
                    ca:72:fe:83:6d:5f:ad:22:fd:18:f9:09:2e:9b:f5:
                    90:93:cb:a1:09:4b:f0:1e:ca:bd:82:95:c8:a8:43:
                    61:a1:ad:f1:e8:f4:a8:50:25:dc:fb:6c:78:20:ec:
                    20:e3:9d:84:68:8e:ec:48:c9:54:1d:18:76:ae:ab:
                    e0:70:3f:b3:83:16:e3:48:e4:a7:32:f0:f9:ea:66:
                    48:e7:3d:21:94:83:c2:6e:9d:65:db:ad:1b:30:95:
                    28:00:32:04:3c:5e:83:b8:aa:ea:30:b4:35:d1:b3:
                    6b:87:13:12:3f:3e:25:b4:a9:ba:dd:d7:3a:94:43:
                    d6:eb:fb:df:34:1b:d8:8e:da:53:94:17:be:fb:9a:
                    c5:f7:b8:32:1c:3d:e3:29:d7:7f:aa:0a:f0:85:f4:
                    55:13:05:f3:bf:2d:44:31:19:82:6e:be:c1:ba:45:
                    64:69:a0:ea:8a:4a:e2:22:b4:ff:e5:cf:ab:93:34:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:34:B6:60:C4:8B:42:6F:17:83:87:88:8E:84:7C:8C:07:D3:F5
            X509v3 Authority Key Identifier:
                keyid:43:EA:8C:DC:41:05:B8:7E:D9:C2:FC:8C:A4:1C:A1:D3:5C:18:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN8ziBnf6nzURBdHKViVQzZMQVpUeewXAuxSSCPZibHH/0/43EA8CDC4105B87ED9C2FC8CA41CA1D35C187B29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ec:d4:cd:97:21:5a:da:4c:75:36:f5:c5:39:34:e3:45:d2:
         3a:a9:d6:d6:94:ed:f4:91:d8:50:4a:6f:b8:44:65:bd:74:7d:
         53:df:02:af:8f:b1:33:b5:e4:ac:bb:47:ea:9d:a3:6e:d8:b9:
         1c:09:60:31:36:53:61:41:ce:54:14:24:9e:af:40:01:0f:9c:
         ab:98:c1:41:41:27:b0:ce:8b:dc:55:a5:a1:4c:37:8a:41:8a:
         60:04:96:99:8c:69:fe:61:79:e0:76:db:76:cf:af:e4:ef:c8:
         38:d0:8e:b2:1e:26:98:78:68:31:5a:d9:b6:f8:2f:04:b1:6d:
         41:a3:52:76:3e:98:08:a3:1c:7c:03:8d:f8:10:59:6f:9b:e6:
         11:05:5e:c9:6a:20:bb:6b:bb:9e:1b:6a:62:bf:82:d6:ad:0c:
         cc:dd:e1:df:8c:fa:0e:64:64:50:6f:b0:3c:7f:33:9c:87:f7:
         9a:2b:89:d6:1c:91:cb:ef:43:b9:14:ba:63:72:e5:3c:3d:6e:
         30:55:da:2f:29:51:4f:1c:84:89:d6:e7:85:85:a6:6a:f6:5d:
         66:d4:f1:20:26:61:f7:09:89:ce:08:7a:7b:85:c7:03:20:b3:
         01:57:0c:6a:99:e2:85:35:ec:25:8f:9a:9f:a6:0a:81:d1:8f:
         7e:5e:92:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:31 2026 by rpki-client