Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
File:                     84398976322691988CABA640BBB2854AECDF6B87.mft (raw, json)
Hash identifier:          5WKMybEO8pVUJAeXnoDR9ZPTQKKPcREo8e9dXgE736Q=
Subject key identifier:   0A:60:09:37:E2:3E:E9:1D:54:C4:8E:5D:75:17:67:A5:C0:26:24:F9
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       2D7A88440109648F4D13BCAF18E4C2F7B09E78D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
Manifest number:          03CA
Signing time:             Thu 26 Mar 2026 13:36:01 +0000
Manifest this update:     Thu 26 Mar 2026 13:31:01 +0000
Manifest next update:     Fri 27 Mar 2026 14:27:01 +0000
Files and hashes:         1: 34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa (hash: ut8i0jZpnlCMPCB3CJfpQb73ZvU4CADMgCaGjWV1rME=)
                          2: 34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (hash: 7zUiEVtaD8KQJ/F6pDQVWpW/FDKnkwVeoJp+AkQ6e6k=)
                          3: 84398976322691988CABA640BBB2854AECDF6B87.crl (hash: l45l37WZpfLf1KSbif/YZD95TwbaAVMptxQCur7VBsY=)
                          4: 34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa (hash: GlLGPZ6hufSBquPkt/mRs0jxgDabJwabomTu0QzL8pY=)
                          5: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: xm6QS2tykS0HNopH4b1bku6DcYmJ8RbOFMzSXulztVI=)
                          6: 34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (hash: 8Ie1Q9KbCiZ9I8Q6+5cFYoSMow4J4E4PUTbUT9Ag/+0=)
                          7: 34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa (hash: PqXMdIlxskw70ZI51b+M1vaG9j21mjHarNRG/EWSBCg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:88:44:01:09:64:8f:4d:13:bc:af:18:e4:c2:f7:b0:9e:78:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Mar 26 13:31:01 2026 GMT
            Not After : Mar 27 14:27:01 2026 GMT
        Subject: CN=0A600937E23EE91D54C48E5D751767A5C02624F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:ca:36:d6:a6:ad:ba:b2:a1:99:45:61:f0:
                    04:f3:cd:2e:47:ee:b9:79:07:ed:99:f8:04:a3:a0:
                    af:b8:17:ca:16:ac:a0:77:a2:fd:ad:fe:ac:83:70:
                    eb:a9:04:58:37:2c:ca:38:32:4e:28:a8:7c:b4:6d:
                    db:61:5c:b5:aa:98:a2:a3:fe:95:83:26:4f:27:e2:
                    94:66:49:f2:29:98:37:24:d1:be:19:0e:0c:2f:ab:
                    c4:dc:0d:b9:7e:86:46:ae:cc:f2:b4:ea:34:19:05:
                    29:ca:19:eb:5d:70:09:29:b9:d8:7a:7e:b2:3f:c8:
                    9d:43:0a:9e:51:ff:44:03:39:57:84:72:4b:56:63:
                    5e:e2:61:97:4c:e2:1d:2f:b8:80:c5:6e:81:82:d1:
                    83:05:f8:eb:5b:04:f0:a5:34:34:13:21:75:66:15:
                    5b:43:b6:bd:ee:d5:33:65:33:41:5a:2b:92:c5:dd:
                    5b:2f:b8:47:cd:3a:22:b6:73:47:0a:73:ad:0c:e1:
                    37:e9:76:69:19:50:eb:60:19:b7:9b:22:78:48:5d:
                    0d:54:5f:83:7f:a4:92:bd:a7:53:a1:5e:08:7c:34:
                    26:53:5a:e1:12:a1:ca:cd:86:2d:fd:26:ec:f2:fd:
                    63:50:3d:bf:9c:f2:e3:bd:b6:c0:61:28:72:fd:94:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:60:09:37:E2:3E:E9:1D:54:C4:8E:5D:75:17:67:A5:C0:26:24:F9
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:c3:21:d4:a9:67:ec:33:14:59:4d:e8:f9:4a:16:80:b7:
         50:b7:b8:66:2f:68:50:cc:f4:7c:d2:e7:92:22:0f:0f:8f:16:
         c0:97:04:36:30:80:91:a4:3d:b5:2b:ac:6f:33:62:0e:1e:23:
         55:08:1a:cd:13:2a:1d:bd:2d:6f:05:b0:a5:59:d4:a1:13:12:
         2e:20:59:9e:b0:a7:fc:24:80:33:16:28:a5:c1:3d:ac:17:2e:
         6f:a1:a9:58:8b:fb:26:17:30:d1:30:de:79:46:b5:59:49:99:
         ff:f8:fc:7d:ea:55:b5:2d:f9:de:9c:72:69:85:bb:25:f1:31:
         4c:3c:a9:20:d0:b7:a6:ce:f1:c5:fe:91:70:14:31:3a:6d:57:
         1e:b0:34:ac:92:1a:81:a5:16:5a:29:eb:af:1c:be:93:88:c8:
         9d:9a:c1:c1:06:4a:e8:91:2c:0f:99:c7:ba:fe:79:1a:11:b5:
         2b:f1:10:b3:88:63:d1:9e:f4:80:72:b5:a2:9a:90:04:c4:9d:
         dd:a0:01:69:5b:60:69:43:43:0c:a8:d6:aa:c8:96:1b:b0:d5:
         ff:b8:b1:c0:e3:2b:75:aa:9f:ea:39:98:c2:a8:66:14:7a:4e:
         2c:ec:5a:be:73:d1:ca:f6:69:7e:0d:91:c5:b5:0c:39:5a:74:
         05:0a:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:20 2026 by rpki-client