Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GYRjoUkXbRGqHe57bjZCB3JkoDyxy1jiwukWQQ3NSQME/0/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.mft
File:                     37D697A5C0CD46DEF04099E8080A0E79C190F2B8.mft (raw, json)
Hash identifier:          nz5cpGN2oYkn6KtwpmfWUIA5J1c9zVp+mN5nxKNKTr4=
Subject key identifier:   8F:AE:44:BC:9B:2D:C4:D4:FC:64:77:FF:2A:44:38:15:B2:D9:74:5E
Authority key identifier: 37:D6:97:A5:C0:CD:46:DE:F0:40:99:E8:08:0A:0E:79:C1:90:F2:B8
Certificate issuer:       /CN=37D697A5C0CD46DEF04099E8080A0E79C190F2B8
Certificate serial:       265D28F9396C0422A635C6CF70340569193130DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYRjoUkXbRGqHe57bjZCB3JkoDyxy1jiwukWQQ3NSQME/0/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.mft
Manifest number:          9C
Signing time:             Thu 26 Mar 2026 12:25:07 +0000
Manifest this update:     Thu 26 Mar 2026 12:20:07 +0000
Manifest next update:     Fri 27 Mar 2026 12:39:07 +0000
Files and hashes:         1: 323830343a393665633a3a2f33322d313238203d3e20323734333639.roa (hash: k3UVRpTBGWxKEfdCRnuxzW8zjCcVOHDAqNq1VhhbVeM=)
                          2: 37D697A5C0CD46DEF04099E8080A0E79C190F2B8.crl (hash: 0yXp9jklR2EJ83JGXEMgkBaMPZtpKNyuzL8yyYKi5h4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GYRjoUkXbRGqHe57bjZCB3JkoDyxy1jiwukWQQ3NSQME/0/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.crl
                          rsync://rpki-repo.registro.br/repo/GYRjoUkXbRGqHe57bjZCB3JkoDyxy1jiwukWQQ3NSQME/0/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5d:28:f9:39:6c:04:22:a6:35:c6:cf:70:34:05:69:19:31:30:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D697A5C0CD46DEF04099E8080A0E79C190F2B8
        Validity
            Not Before: Mar 26 12:20:07 2026 GMT
            Not After : Mar 27 12:39:07 2026 GMT
        Subject: CN=8FAE44BC9B2DC4D4FC6477FF2A443815B2D9745E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:13:17:88:45:aa:11:73:ed:f9:58:34:27:
                    79:bb:11:e8:4e:08:88:9d:42:f7:89:3a:21:17:47:
                    86:f2:c0:15:06:33:f9:b0:cc:3a:f0:3f:28:09:12:
                    5b:6c:83:86:c8:60:b6:20:41:33:da:a7:b8:58:81:
                    33:5e:04:4d:55:cd:5a:4e:47:93:91:55:93:e0:fd:
                    75:21:4c:fc:2b:d6:aa:05:aa:07:32:d6:f0:21:71:
                    f4:3b:c8:01:29:a1:5f:62:e5:f0:c1:ca:42:e7:1f:
                    bc:37:4a:2f:24:e1:0b:fa:73:b6:bd:ae:4e:b2:8c:
                    b7:c7:63:db:fa:d5:3d:e2:7c:3f:67:d0:e7:ab:2d:
                    e9:56:0c:13:32:17:8a:0e:ec:86:dd:98:97:df:77:
                    99:90:8a:db:b8:f8:8e:09:ae:55:b2:50:4f:ed:30:
                    50:19:bd:cf:bf:71:99:ab:25:de:5d:fd:0f:be:5b:
                    3a:ed:70:a4:4d:21:e3:de:1d:4a:15:07:48:f6:64:
                    7e:07:20:aa:cc:5b:df:79:f5:62:b9:a9:ce:cd:40:
                    79:c4:b3:a0:04:8e:2c:ef:4d:53:88:00:bc:c8:65:
                    30:01:54:8f:ca:4e:40:0e:2e:3c:b8:6b:ef:e1:22:
                    23:be:37:1e:76:23:40:c7:21:c1:42:1a:1d:a5:90:
                    1d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AE:44:BC:9B:2D:C4:D4:FC:64:77:FF:2A:44:38:15:B2:D9:74:5E
            X509v3 Authority Key Identifier:
                keyid:37:D6:97:A5:C0:CD:46:DE:F0:40:99:E8:08:0A:0E:79:C1:90:F2:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYRjoUkXbRGqHe57bjZCB3JkoDyxy1jiwukWQQ3NSQME/0/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYRjoUkXbRGqHe57bjZCB3JkoDyxy1jiwukWQQ3NSQME/0/37D697A5C0CD46DEF04099E8080A0E79C190F2B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:c9:00:1c:fa:61:6e:f8:66:92:07:cf:62:0f:9c:a8:9d:
         fe:83:7a:32:73:3c:cb:18:48:e4:8f:73:c2:75:57:8a:0b:ec:
         9f:8e:66:28:cc:48:e4:46:d7:56:d9:ef:37:7d:a6:6c:c1:0e:
         da:9e:0b:36:82:ec:f0:e8:67:40:10:47:89:f3:d0:55:84:00:
         fc:ca:5e:1b:53:c6:76:43:51:24:5e:2d:df:06:05:68:19:49:
         af:49:e4:d2:ae:54:9a:b8:79:f7:3c:2c:19:cf:58:c7:c8:9f:
         6d:d1:5e:ae:bf:07:c2:ca:cd:29:65:bd:c0:73:1a:ac:ac:7f:
         0f:83:61:56:dd:42:02:c0:60:68:33:46:41:3b:ea:e1:8e:96:
         b9:79:27:00:54:4f:ed:e0:46:46:12:48:6e:ba:d7:d4:6b:67:
         a6:51:1d:70:9f:f2:7f:cb:1b:79:1c:0b:0f:f2:4b:76:4f:e2:
         df:2a:46:c9:38:41:eb:8f:ea:de:f0:ea:86:e6:da:79:f2:05:
         b9:3a:a5:e7:99:47:0a:96:79:76:10:8f:e3:66:c5:e4:7b:b9:
         0c:84:b4:4e:84:fe:b0:93:88:de:8b:15:4c:17:b6:48:ad:a5:
         3b:ba:ad:ad:2c:1c:b6:bc:8f:fc:a2:ad:82:91:e0:c8:38:78:
         2a:e5:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:08:16 2026 by rpki-client