Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
File:                     9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft (raw, json)
Hash identifier:          dC6SAp0jY1DnbvYMMEI+5b8drhiCEQcUIrwB1cw9FXc=
Subject key identifier:   FA:47:DF:00:9B:33:4E:FE:45:76:55:7C:08:74:D0:EF:63:16:B5:41
Authority key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73
Certificate issuer:       /CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
Certificate serial:       52DBC424E2F43DBCDFB0C84011094A53D4C9B057
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
Manifest number:          D0
Signing time:             Thu 26 Mar 2026 21:30:50 +0000
Manifest this update:     Thu 26 Mar 2026 21:25:50 +0000
Manifest next update:     Fri 27 Mar 2026 23:09:50 +0000
Files and hashes:         1: 34352e36352e3136342e302f32322d3234203d3e20323731373030.roa (hash: LsuK03eps+w6hFgpFrAgiKzCk8UDPNvgSOZUlqYOudE=)
                          2: 3137372e36372e3136342e302f32322d3234203d3e20323731373030.roa (hash: oexgiQPhddOnWluygKIco9xlyEwc773/RB6TMvdzb4w=)
                          3: 3230312e35342e3138362e302f32332d3234203d3e20323731373030.roa (hash: CWnOJnms2an3LGXWpsVf62d7CZ2RD16Ib3+iPlKSlxw=)
                          4: 323830343a376661343a3a2f33322d3438203d3e20323731373030.roa (hash: mrqvFpMNeUpVq/db97/597IVuQwXXl5mx+ghSJ5rwt4=)
                          5: 3230312e35342e3138342e302f32342d3234203d3e20323731373030.roa (hash: O1UavuPGAuAYuDjw1h+lAIhwSvJUOPBYQgL6Sebj1DA=)
                          6: 3138392e38342e35362e302f32322d3234203d3e20323731373030.roa (hash: WsRvWAKCQNOIsm0C1lsBVbOZENPusbXf1xIpoJHlHhA=)
                          7: 9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl (hash: YFzohJeCF5aWkO82xDtd0USpjkGkkmJZa8XOp9DZZcw=)
                          8: 3137372e36372e3136302e302f32322d3234203d3e20323731373030.roa (hash: 9mbPEl8ngjS4i7AwF3lnRPCMzl/E61g+OFBfFbFm8f0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:db:c4:24:e2:f4:3d:bc:df:b0:c8:40:11:09:4a:53:d4:c9:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
        Validity
            Not Before: Mar 26 21:25:50 2026 GMT
            Not After : Mar 27 23:09:50 2026 GMT
        Subject: CN=FA47DF009B334EFE4576557C0874D0EF6316B541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:bb:c3:74:c2:e6:94:85:74:d6:39:51:e3:
                    fb:5c:7d:e4:b9:68:af:87:62:bd:48:18:1f:3a:97:
                    8a:fe:d5:29:7a:78:7f:3a:4b:49:4a:1a:8a:36:f3:
                    83:14:cc:10:54:e7:7e:2c:fc:f7:d3:af:28:81:a8:
                    29:f3:c2:92:bb:94:4e:fc:82:41:e7:b3:fb:ac:03:
                    d2:3a:41:70:cd:9b:5a:25:b6:d0:1e:33:74:98:cd:
                    d1:3f:67:4f:f8:45:03:76:66:e1:8e:29:86:0d:8b:
                    0b:ed:c3:8e:b1:da:77:c1:78:59:16:df:ea:31:7c:
                    76:e2:55:c5:d3:7c:c9:e4:14:a8:e4:a6:84:d1:53:
                    5d:19:f5:07:22:74:75:f1:d8:dc:00:f1:97:6e:49:
                    74:27:7f:00:99:33:40:db:3e:1e:9a:ad:f6:3f:c8:
                    fa:f9:82:d3:d5:58:65:4a:e4:2b:05:fa:f9:90:ce:
                    45:32:f2:bc:15:f4:77:d1:1c:2b:6b:7a:7c:22:c4:
                    99:43:db:49:af:32:02:e8:61:0c:51:dc:ab:76:df:
                    52:5e:cd:7a:04:5e:6f:80:76:11:a0:13:22:02:ae:
                    39:e1:a2:45:d8:b9:8a:0a:d9:ff:4b:95:4e:be:39:
                    0b:84:d5:a6:9b:0b:8e:f8:7c:58:fb:2f:35:50:b4:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:47:DF:00:9B:33:4E:FE:45:76:55:7C:08:74:D0:EF:63:16:B5:41
            X509v3 Authority Key Identifier:
                keyid:9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1f:19:6f:e9:f9:c4:18:8d:ef:c7:45:e0:64:73:fc:29:90:
         2f:98:be:e2:db:6c:1b:23:2b:76:38:d1:63:29:ee:33:07:9d:
         4a:00:c4:59:38:97:53:6f:9a:52:84:11:79:2c:9c:8b:97:73:
         6b:0b:de:29:81:d1:7d:1f:4b:9a:c8:9c:df:d0:f4:bb:ea:50:
         ff:e6:1f:0a:e2:e8:73:f2:f1:d8:f6:05:37:54:be:cc:21:df:
         11:78:1b:a9:f4:ba:2d:bf:ec:84:4d:c8:50:26:6e:45:3e:72:
         3b:4c:33:c8:8a:35:0c:1a:6e:cf:d3:a0:8e:0a:43:62:38:6f:
         97:02:5d:06:3a:a6:39:db:ce:17:c1:9d:08:f7:75:8e:25:dc:
         d5:af:e6:bc:b0:ac:d0:34:e3:6a:22:79:16:63:7a:58:29:b4:
         7b:52:7e:e4:7e:42:8b:f6:25:10:d0:4e:bc:92:d2:5a:66:41:
         43:18:97:67:1b:95:1b:4b:e8:38:35:db:f9:90:94:84:fe:34:
         e5:fb:ae:88:a8:69:0e:b2:e0:68:fd:de:23:17:3c:a4:88:d5:
         5b:dd:5c:69:a1:bf:7a:c1:73:b1:bf:ac:ce:99:ea:c3:1b:c9:
         7a:d3:79:ab:4f:79:5a:fa:88:7b:6f:a7:bd:b7:17:5b:c9:08:
         84:9a:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:17:24 2026 by rpki-client