Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
File:                     4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft (raw, json)
Hash identifier:          2q3NUzTLI+3YjJk1ZzmAUoh3kDaHCb0cPoTf3gc/Tes=
Subject key identifier:   EB:93:95:D3:3B:49:B0:79:7C:5E:F3:D8:16:B3:3A:0F:35:44:16:AF
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       310C6438AD99608D0C5369B44A5A00A6371CA1F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
Manifest number:          040B
Signing time:             Wed 25 Mar 2026 17:00:00 +0000
Manifest this update:     Wed 25 Mar 2026 16:55:00 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:00 +0000
Files and hashes:         1: 323830343a373131343a3a2f33322d3438203d3e20323730373635.roa (hash: 9gqVlfH9erQ3dmW3SDpzEO0X4Din/Fap5U9KQ2YyLpY=)
                          2: 4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl (hash: jgKVN++5x5/zVnd0cobYY9rZhAlUe9CPsbcOgIENBzw=)
                          3: 3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa (hash: FcATi+2HFOHpsc8a9VuadNEaVmHF5Fz9wuFuf7KACVs=)
                          4: 323830343a373131343a3136343a3a2f3438203d3e20323730373635.roa (hash: 8Inmdk97o2TyzS9xq8pxgdx9TOMpysubHGKHJMI2ZUc=)
                          5: 323830343a373131343a3136353a3a2f3438203d3e20323730373635.roa (hash: 2Hbn2JHn57TTg7msnprm1f1fKA5Y/jdXy+yUycrwNzk=)
                          6: 323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (hash: bHpzkUuJnTidZyBccoPDKLkjQS285RdrwYtVRQYSwNg=)
                          7: 3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa (hash: OqgNQ0oLaFuGNsFnjBuFECEhrBOxv33J/jVDjKu9k0g=)
                          8: 323830343a373131343a3136363a3a2f3438203d3e20323730373635.roa (hash: t7SdfYlPH+0AjERZQMXtC6u/0YUkUGge6LMYXvcRFmI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0c:64:38:ad:99:60:8d:0c:53:69:b4:4a:5a:00:a6:37:1c:a1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Mar 25 16:55:00 2026 GMT
            Not After : Apr  1 17:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:64:7d:a4:bb:11:fa:a7:e8:3f:14:7b:d7:
                    ee:63:50:54:db:1d:ab:65:a7:38:40:8e:df:59:cc:
                    d8:67:ef:c0:d7:7f:37:3f:36:c9:69:a4:19:3f:6a:
                    a3:63:95:6d:e5:a0:28:44:31:dc:d7:cd:8f:7c:25:
                    43:e1:15:22:30:0c:54:49:4a:4a:d8:ea:b4:08:9b:
                    6a:5c:fb:9d:d1:89:6a:e0:81:1c:df:bb:00:87:8f:
                    75:e6:5d:57:aa:35:48:0b:e6:4f:7f:4b:58:13:49:
                    94:37:5a:58:53:fc:71:5c:93:4d:f1:07:3c:aa:c4:
                    f9:48:ff:2f:e8:44:b9:3b:e8:30:0a:b3:48:0b:e7:
                    b5:ba:ef:67:ea:48:f5:db:cb:be:a1:4b:15:0e:2f:
                    7c:8a:fe:d5:c1:90:19:41:91:0f:87:81:37:d2:11:
                    30:31:5e:06:4d:3f:a8:b0:5c:c9:48:64:9b:45:23:
                    b8:7e:36:db:ca:9e:e8:a1:4c:d8:33:1c:77:6c:9b:
                    97:85:d2:09:e2:61:8b:23:f5:b9:02:b6:4d:40:3b:
                    01:b8:1c:26:a1:76:f4:f1:37:25:d3:f2:f8:5d:c4:
                    aa:67:56:1d:7a:ed:b4:bc:4d:ab:c2:9c:49:fd:76:
                    0d:0d:ff:1f:99:a9:77:58:85:96:31:cc:b4:23:e7:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:93:95:D3:3B:49:B0:79:7C:5E:F3:D8:16:B3:3A:0F:35:44:16:AF
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:fa:9e:e5:e8:12:d0:cb:eb:8d:3f:5f:84:24:85:29:30:
         b6:cc:0c:d6:b9:14:c4:85:e6:35:5f:d1:a8:9f:4f:7f:ee:a4:
         52:17:2f:9d:69:da:ca:0b:1f:2b:e0:06:c3:a1:ee:82:17:4f:
         17:2f:2c:22:49:9b:d1:a4:7f:37:2b:86:41:5c:63:58:b3:50:
         fa:da:85:ed:fa:c9:ac:b1:2e:4b:f6:8f:0c:37:c7:62:58:9c:
         45:48:35:31:4a:61:59:0c:e6:45:ac:1f:b2:12:0d:f0:62:2f:
         61:c2:5a:03:e1:93:1e:af:56:43:fc:65:df:42:a2:49:85:4b:
         ea:b9:44:53:dd:1c:4f:d6:f2:2c:0d:fa:8b:7d:4a:8a:a6:48:
         c4:e4:5a:51:68:e9:ef:86:2b:8d:23:58:86:7b:ef:34:66:2c:
         1e:45:db:01:92:76:fb:72:17:34:7b:94:bd:ea:83:1a:34:9e:
         ee:4c:dc:63:46:55:29:f7:27:c9:9c:a5:76:a9:dd:d9:5e:08:
         3d:6c:47:cf:06:18:97:c8:2a:ff:ed:f7:61:08:5d:ea:11:d8:
         f5:27:ec:8b:c0:07:a5:27:eb:e1:69:c0:f9:15:e3:30:5a:ec:
         03:68:dd:13:64:93:6b:ac:5d:6e:c6:a6:ae:5e:47:c2:61:01:
         14:fd:37:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:38:39 2026 by rpki-client