Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
File:                     8B61F412D9491EE5358447F35A3653BE4A23D667.mft (raw, json)
Hash identifier:          EhABHVn1uX5AI0M4soOW+nghEsczeut3v+rzXlt6ixQ=
Subject key identifier:   83:42:EF:1C:9E:44:BD:A2:46:A4:93:16:D7:A4:48:E9:40:EC:6B:2C
Authority key identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67
Certificate issuer:       /CN=8B61F412D9491EE5358447F35A3653BE4A23D667
Certificate serial:       7EFC62783D408D42B39328C70CBC4A1A00F0F83B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
Manifest number:          02
Signing time:             Wed 25 Mar 2026 16:17:23 +0000
Manifest this update:     Wed 25 Mar 2026 16:12:23 +0000
Manifest next update:     Thu 26 Mar 2026 19:23:23 +0000
Files and hashes:         1: 323830343a343863303a323030303a3a2f33372d3337203d3e20323637313432.roa (hash: 42Jpt2Y1TQ0FO7kImAzhzwj8ADoKzAieR8xsIvQChRo=)
                          2: 3137372e3132382e38382e302f32342d3234203d3e20323637313432.roa (hash: +Dw2vdyilneAyycRgUiw1RGLCbELsFa0D1D+XJmdbJg=)
                          3: 323830343a343863303a3a2f33322d3332203d3e20323637313432.roa (hash: PDc/wGCkUhyPVPByVO0CUFgWwn+FjMVI+nAQmftd++M=)
                          4: 3137372e3132382e39302e302f32342d3234203d3e20323637313432.roa (hash: gAVJoCU9HYjERIhlvpEhCmC4aQdkAVc7tyhxF/H8w+8=)
                          5: 323830343a343863303a313030303a3a2f33362d3336203d3e20323637313432.roa (hash: rafztA9ogwNXf2fY9dkIVH7dR+J+9rLF7h4ZrxPPr4E=)
                          6: 34352e3232392e3234302e302f32322d3232203d3e20323637313432.roa (hash: HCLdkfI4Z4OyDXcZBPc0+4nsarlUClntHgqh4SZCztQ=)
                          7: 3137372e3132382e38382e302f32322d3232203d3e20323637313432.roa (hash: fpfEBraRzK4BaJtKoNiB0O0VJtIqQeNTRaonxXFwrxk=)
                          8: 323830343a343863303a313830303a3a2f33372d3337203d3e20323637313432.roa (hash: dJAQCh84kQjLo7/1oT3F9qPBc6WHUEVL15NInaU+SKk=)
                          9: 3137372e3132382e38392e302f32342d3234203d3e20323637313432.roa (hash: zgm/FpVkN2XxOh6cKVVAnB/f6b5o96NFG9lrM82TKME=)
                          10: 3137372e3132382e39312e302f32342d3234203d3e20323637313432.roa (hash: 8fslhcMUo7pLUOt2orCJdRmpZgWkUO2gAEb1lulQYZs=)
                          11: 323830343a343863303a313030303a3a2f33372d3337203d3e20323637313432.roa (hash: 79niAxK6PgCZjiEJA2MZNtUFuKdvQJ+RLeAw9KM7jo0=)
                          12: 8B61F412D9491EE5358447F35A3653BE4A23D667.crl (hash: neiC5Pt6+Gmgc4HGhyHssCSy1t4quFNYjgImbXowTdI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl
                          rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fc:62:78:3d:40:8d:42:b3:93:28:c7:0c:bc:4a:1a:00:f0:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B61F412D9491EE5358447F35A3653BE4A23D667
        Validity
            Not Before: Mar 25 16:12:23 2026 GMT
            Not After : Mar 26 19:23:23 2026 GMT
        Subject: CN=8342EF1C9E44BDA246A49316D7A448E940EC6B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:3e:13:18:52:26:13:d7:0e:b4:7a:56:f7:
                    fd:25:59:5b:0c:fa:4f:d7:c5:d2:39:d4:8b:92:3b:
                    0d:42:d2:37:16:1c:e6:00:3c:a3:36:27:6b:34:02:
                    3c:63:8d:a9:b3:ff:cd:c6:2b:b9:a8:20:3d:6b:fc:
                    e5:cd:31:48:ce:b7:0b:98:04:38:1c:02:5f:96:47:
                    37:d6:bd:77:67:c9:22:f3:a2:c8:96:24:01:9d:7b:
                    9d:5c:d7:98:85:d0:2b:cf:45:32:53:fe:a4:1f:24:
                    b1:0c:ee:d8:37:68:41:aa:2b:c9:b3:87:2e:da:e2:
                    a6:e4:5c:14:ba:6d:33:57:f5:29:05:b2:05:bc:4a:
                    43:e2:17:21:b9:ad:57:f5:0d:67:20:89:c7:a3:cf:
                    72:ea:27:d6:a2:a5:dc:93:8a:c3:2c:82:f0:a0:8a:
                    91:f9:26:dc:05:37:02:85:fc:09:e2:0f:34:34:e8:
                    c8:42:fc:ca:88:ae:fc:e6:df:ed:88:9b:58:dc:e8:
                    af:ea:ef:38:6b:58:68:e8:95:b5:e9:23:5c:d2:39:
                    58:04:da:ff:ab:75:33:c8:40:9e:2e:81:11:7c:5a:
                    d0:22:eb:9d:2d:56:36:4a:f2:d6:19:5c:40:85:51:
                    c6:db:89:4d:f2:75:8f:85:e0:67:6b:f6:1f:3b:53:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:42:EF:1C:9E:44:BD:A2:46:A4:93:16:D7:A4:48:E9:40:EC:6B:2C
            X509v3 Authority Key Identifier:
                keyid:8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:05:cf:87:ee:fd:5c:a9:69:a9:81:e8:1a:03:65:83:6a:a3:
         94:e3:f9:d5:6b:bb:2c:68:97:ec:63:af:7f:f9:a2:71:d8:b4:
         b5:61:d6:f6:a3:f0:3f:37:de:9d:45:37:49:a2:bc:f9:98:20:
         b2:40:fd:e3:63:6c:0d:17:ef:65:c0:59:5a:2a:e3:1e:6c:ac:
         8e:92:d1:5e:eb:c4:5d:68:b7:6a:08:3c:28:85:94:19:6e:ea:
         e4:9b:0e:75:0d:88:3f:c4:ee:d4:c6:00:33:d0:e3:d1:ac:28:
         57:b2:f2:d8:d0:cb:76:fb:7d:91:10:82:25:93:2e:14:92:f0:
         32:61:c0:b9:70:82:41:3f:f8:bb:f5:04:3d:de:95:24:bd:41:
         d0:98:5f:5b:4d:92:16:bc:41:b8:2c:46:69:3c:d6:91:99:08:
         e1:80:c9:8b:2b:a7:d1:e4:14:03:91:88:d5:e4:bb:f2:a6:ce:
         8e:a4:20:76:63:eb:59:bb:5e:66:40:4e:a7:85:5c:90:69:96:
         2a:d3:9f:1c:5c:98:0e:19:02:57:4d:f3:52:1d:e7:ef:16:b7:
         95:17:6a:dc:fb:92:ce:f9:49:d4:56:0c:e9:9c:35:47:39:13:
         59:98:38:e2:0d:7e:ec:10:eb:fb:a9:ec:b2:d3:db:6b:c9:fb:
         77:f8:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:08 2026 by rpki-client