Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
File:                     BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft (raw, json)
Hash identifier:          sCuLdAT2okKVyMqNnoNVCQvBI+2KdYJyLoVugLsFnoI=
Subject key identifier:   C9:3A:4D:E3:5B:A2:5A:AA:F2:B1:8D:19:31:FF:9C:27:C0:A3:29:F6
Authority key identifier: BD:11:E0:8A:DC:67:69:95:5F:3D:67:39:11:82:42:DE:BF:A4:8D:A7
Certificate issuer:       /CN=BD11E08ADC6769955F3D6739118242DEBFA48DA7
Certificate serial:       387BAA28B694C90ACF9022ACD3148454B0822C1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
Manifest number:          6A
Signing time:             Thu 26 Mar 2026 07:41:56 +0000
Manifest this update:     Thu 26 Mar 2026 07:36:56 +0000
Manifest next update:     Fri 27 Mar 2026 08:41:56 +0000
Files and hashes:         1: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: 1OnUECnkyQmog7XazHCHWrwvBR0ZMrSzL9SvhnkwK3k=)
                          2: BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl (hash: WhP635/F70YtG0jh5HQntNBul+g5lyCu39RzavS0SwE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl
                          rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:aa:28:b6:94:c9:0a:cf:90:22:ac:d3:14:84:54:b0:82:2c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD11E08ADC6769955F3D6739118242DEBFA48DA7
        Validity
            Not Before: Mar 26 07:36:56 2026 GMT
            Not After : Mar 27 08:41:56 2026 GMT
        Subject: CN=C93A4DE35BA25AAAF2B18D1931FF9C27C0A329F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:4b:2b:79:96:a7:c9:fd:c3:52:4a:00:69:
                    57:36:7e:49:bc:86:57:25:12:21:e4:88:4e:f2:44:
                    70:92:63:eb:e2:b1:6c:5c:76:bb:7f:8a:7c:f2:5e:
                    0b:97:2e:c9:7c:c5:86:e3:8f:3e:4b:6b:d5:53:00:
                    4a:79:1b:2f:e3:d0:a5:a5:45:88:32:ab:e0:4d:bc:
                    a1:24:1a:f1:a9:e6:b6:af:08:70:e8:ec:d2:d6:4d:
                    a5:35:39:ec:25:02:e6:5c:9c:db:8f:1c:d8:57:0d:
                    a0:ff:64:5e:1e:48:b4:d5:42:f9:93:28:44:11:12:
                    43:87:f1:37:ad:0f:88:a8:f6:a7:3a:9a:44:f2:98:
                    71:32:af:d7:88:02:a8:8b:74:78:14:95:8b:56:be:
                    0e:6b:83:2f:d1:94:cf:94:f6:5e:7e:25:99:0c:ff:
                    b5:5f:19:45:08:46:8a:cc:c4:54:fa:53:fb:ce:74:
                    94:2f:c1:ef:19:5d:f3:08:71:db:d0:cf:de:7a:4c:
                    40:d2:fa:d3:29:c3:11:43:c0:51:d5:79:6b:7d:8e:
                    1b:ad:f9:1d:75:a6:79:e6:f0:9c:ae:57:6c:de:9e:
                    c3:19:41:c8:cb:f7:61:ee:c5:c1:4d:cc:14:49:9d:
                    fe:cc:e6:39:65:eb:d6:ae:71:72:30:73:ad:b4:74:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3A:4D:E3:5B:A2:5A:AA:F2:B1:8D:19:31:FF:9C:27:C0:A3:29:F6
            X509v3 Authority Key Identifier:
                keyid:BD:11:E0:8A:DC:67:69:95:5F:3D:67:39:11:82:42:DE:BF:A4:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:34:03:0a:91:20:47:c4:77:a8:dc:24:af:24:d6:c4:d8:
         97:44:ff:ed:23:27:07:15:a5:41:1d:75:cb:9a:a8:8e:37:b0:
         18:1a:dd:23:c3:0e:00:cb:3b:a3:c9:09:5c:38:e6:74:d7:25:
         2e:35:5f:a0:28:0e:20:bb:70:81:bc:d6:7b:71:1b:5d:f3:45:
         db:34:5b:b7:2e:6d:07:fd:49:87:99:28:a9:b4:67:5f:2c:7f:
         15:70:b1:c0:2e:f3:45:4c:b5:61:f1:5f:40:a8:8e:b1:0c:cf:
         0d:9d:2d:05:1f:a4:fb:a1:9f:2c:0d:72:0f:ad:db:1b:c7:bd:
         ac:06:48:c6:74:65:d0:72:e0:17:d1:28:4c:1d:4c:79:bb:29:
         03:d4:bf:95:ff:17:d3:ef:9a:bf:29:19:1b:0d:f7:ed:af:2a:
         8c:5f:95:20:bb:4c:cf:64:de:9f:d0:e5:ca:0e:21:d1:6d:9b:
         9d:86:af:24:37:a8:1b:d1:98:92:f1:7b:3b:62:df:4c:4c:a3:
         ac:aa:a5:af:fb:16:da:e4:4a:ea:b3:33:07:45:b5:a3:1e:ec:
         89:9e:ae:39:0b:58:90:e0:be:c5:67:76:e7:4e:03:27:23:c2:
         d6:08:3c:2a:e6:8d:62:29:0f:7e:1f:3a:0d:22:57:18:6b:43:
         91:c4:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:47 2026 by rpki-client