Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
File:                     2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json)
Hash identifier:          qRyo8bw8zZcdb7QHzwInxc3Q+gD3iFQdE2NNBKne53E=
Subject key identifier:   49:F7:B6:08:DA:6A:19:2F:8E:F0:0C:FE:61:5A:7A:18:37:13:A5:F1
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       32627F38656C3B901E463DA6814CDB054EF919E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
Manifest number:          03BD
Signing time:             Thu 26 Mar 2026 01:12:05 +0000
Manifest this update:     Thu 26 Mar 2026 01:07:05 +0000
Manifest next update:     Fri 27 Mar 2026 04:29:05 +0000
Files and hashes:         1: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: MC+ifAOyusP+MK/Dxtzto9TFXNr3vKRG+iV2GWExfxc=)
                          2: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: FluKTTdbQTNGH5T5JLGPKT1RZr1AJ1O4GPQ/5xzK5Ps=)
                          3: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: /nrfbegvFRFE0//r/iWAOY310loLfLMiFZ2Gk9hm1RE=)
                          4: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: AGfypEsCCJ0ZQbll9z8r8n2J/peHclCTyKbC3EM/6ao=)
                          5: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: 10ESZg/nXpiQ5YcpFaVRMShI8gWX/NEY7fxsKOskTZw=)
                          6: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: YMqTdw5VFtJIgoeYUerjCmjKKfRNvNrBpH6I5AxEEQI=)
                          7: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: NXtQO00UY1+bRiPxy9gwMgtX0KfH6HuIRZtjFLe3+Ks=)
                          8: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: 7JnfRuMlTKrTLeyIcC/LEQyzbBPYiJ+lEs1+lwu8IbM=)
                          9: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: rHEd6i2PHMmd8wCTufmMvAzId8GFWdn0dcq1FpO+BTU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:62:7f:38:65:6c:3b:90:1e:46:3d:a6:81:4c:db:05:4e:f9:19:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Mar 26 01:07:05 2026 GMT
            Not After : Mar 27 04:29:05 2026 GMT
        Subject: CN=49F7B608DA6A192F8EF00CFE615A7A183713A5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:fb:27:fd:b2:da:65:a8:71:83:f0:f6:ff:
                    7a:ea:5c:fe:45:3a:12:3d:98:0d:40:1c:6b:61:89:
                    35:c4:ef:76:cb:ad:e8:ef:06:d1:f4:49:2e:77:cf:
                    34:a0:e6:d1:50:cb:fd:c7:c3:63:79:da:fc:8b:ff:
                    65:1f:87:e2:78:ed:35:12:3b:19:19:99:00:da:43:
                    2e:d0:5b:00:a2:de:cf:54:70:65:7a:f9:f7:09:2c:
                    9a:e8:16:a9:d8:c6:d2:97:7a:bd:52:e3:b8:74:85:
                    90:18:12:e9:ef:71:db:01:05:0c:d0:c1:19:60:21:
                    5a:c3:8d:c7:5f:64:91:f4:df:68:e8:88:d1:11:0b:
                    5f:c8:a9:c9:6e:1c:ff:73:80:a7:f4:02:0d:c9:6f:
                    e2:68:99:7a:78:64:b8:b7:3b:eb:5c:1c:42:42:52:
                    a0:d0:dd:36:d9:ef:41:39:90:bd:5e:b1:ac:73:7c:
                    0d:23:07:c6:31:6c:46:7d:1c:68:13:91:55:8b:bd:
                    2a:9d:79:d7:be:dc:5c:2f:9b:a0:33:35:ca:c4:da:
                    fd:1d:7f:08:0a:6c:21:76:de:53:ed:2a:57:b1:6e:
                    76:58:30:72:77:7f:90:ad:49:89:f5:a9:0e:fa:cf:
                    5d:57:7f:9a:e3:c1:31:01:72:64:79:27:8c:37:fa:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F7:B6:08:DA:6A:19:2F:8E:F0:0C:FE:61:5A:7A:18:37:13:A5:F1
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d5:ac:7f:01:45:4c:0f:f4:7e:2d:4c:5d:12:dd:4b:ac:9c:
         61:48:8f:a6:d5:2b:00:6e:91:28:aa:05:00:b2:0a:20:d6:95:
         6a:12:7a:2f:3d:de:4d:ad:b4:b4:f0:c3:2d:4e:d8:4d:83:e2:
         bd:44:56:ca:f3:ea:57:e1:81:f1:f2:52:87:2b:47:2f:ff:20:
         1c:60:34:48:4c:86:41:54:60:17:69:ba:63:0a:56:cc:a4:17:
         d5:0b:c2:c2:8d:47:dc:1b:6c:6f:cb:c0:54:40:05:31:04:80:
         37:b2:5f:59:b5:4c:a3:c6:74:52:b9:99:57:f2:42:0b:45:0e:
         c7:4c:38:ef:f6:cc:d8:be:a3:6d:96:f8:0c:04:a8:c3:f1:c7:
         a4:42:2a:4d:44:af:1b:65:ad:4a:ae:48:ca:98:8f:7c:75:71:
         a2:65:5b:95:50:ee:c2:35:3e:33:87:0f:e2:ce:9c:9f:bc:73:
         5f:d1:04:78:5f:7a:cc:79:6a:29:e2:08:c9:64:cb:65:34:d2:
         ab:41:62:dc:af:02:fc:59:8b:7e:e9:b5:70:7c:78:17:8a:a3:
         fc:77:11:6c:38:dc:56:12:cd:45:3d:1f:96:5f:84:18:b3:72:
         36:01:8e:03:28:b6:d8:21:01:fc:6e:5e:08:89:df:87:ac:cd:
         40:b4:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:07 2026 by rpki-client