Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft
File:                     DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json)
Hash identifier:          oAyRdc+PLD70T/ND8gmO8kVV83c3ozARRnD8HVUgIRw=
Subject key identifier:   DA:E7:AE:0B:16:CD:D7:75:E5:17:A1:53:7F:7A:B2:E7:9E:E7:3B:E1
Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29
Certificate issuer:       /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
Certificate serial:       240AF3A004DB1595C06896FA957291CDE3FD32DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft
Manifest number:          03C8
Signing time:             Thu 26 Mar 2026 10:32:47 +0000
Manifest this update:     Thu 26 Mar 2026 10:27:47 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:47 +0000
Files and hashes:         1: 3139302e38392e31322e302f32322d3235203d3e20323632393636.roa (hash: apUqmLhKjt/ZMVXGU/WW7IoRFCFaCRzIgFMNB1JhAL0=)
                          2: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: e/l+0B66V7rV2Ridnkjy6895dtU49wyPCGotg6WEz8w=)
                          3: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: HYJqhmf004YMqQxa3ujEcKq2uiIbYYmv8qszt1B4mD4=)
                          4: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: sDeBZRhSqkCYDLKC5rJx5q6smcMqPE7uSMQ9nethdvg=)
                          5: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: IPHs/bGL7bMYcVqeOB9XUgJPnEjVe+91/9eEaAq7gtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl
                          rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0a:f3:a0:04:db:15:95:c0:68:96:fa:95:72:91:cd:e3:fd:32:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
        Validity
            Not Before: Mar 26 10:27:47 2026 GMT
            Not After : Mar 27 14:01:47 2026 GMT
        Subject: CN=DAE7AE0B16CDD775E517A1537F7AB2E79EE73BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:b4:ad:97:f2:b7:0b:af:32:c3:57:2e:ef:
                    7b:66:d4:f2:63:1f:3e:58:5d:b2:0d:0d:8a:23:7c:
                    67:a1:12:b7:72:2b:a5:99:3c:08:fd:c2:a4:9a:69:
                    b6:5e:23:aa:73:9c:71:8a:0b:e1:6a:73:0d:d9:8b:
                    32:d7:b6:38:30:90:a7:31:6a:5f:7f:75:b8:58:c9:
                    5e:ad:09:37:e6:ef:a2:77:21:e8:e5:21:0d:6d:ae:
                    82:0c:63:45:b7:50:60:62:1f:46:a9:22:89:17:03:
                    2c:71:4a:94:6f:55:ec:55:11:30:c6:b9:aa:e2:f1:
                    73:29:aa:a0:dc:85:6c:86:2e:02:ef:9b:2b:d2:9a:
                    78:74:8e:69:5e:d3:e7:2d:cf:a2:f9:a0:04:b7:71:
                    1c:e8:f1:a4:60:d2:c2:ab:91:54:81:03:39:87:6e:
                    d8:ed:f9:fa:2c:23:fc:15:af:fc:31:c9:13:9b:82:
                    dc:34:ff:f1:b5:d7:c6:ea:78:60:36:3b:73:4a:2d:
                    96:16:29:5a:49:41:c3:f1:54:de:5b:82:41:94:65:
                    08:59:5b:71:37:23:8b:14:87:a7:9d:28:ee:dd:47:
                    b4:9a:50:c0:3c:a3:08:da:5d:6f:77:bb:fc:df:9c:
                    c0:bf:6b:85:3d:c2:db:e6:53:2e:60:a7:ae:b6:9f:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:AE:0B:16:CD:D7:75:E5:17:A1:53:7F:7A:B2:E7:9E:E7:3B:E1
            X509v3 Authority Key Identifier:
                keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:6b:02:32:3b:8f:bb:f5:e2:f2:25:b3:53:2e:aa:e1:14:
         c8:93:c4:8f:18:f1:9a:69:85:21:41:d2:44:4e:d2:fa:ba:ce:
         bb:0f:21:c7:b2:e4:7e:09:4b:e7:29:54:24:94:a2:e3:71:25:
         92:c1:ab:05:f8:3b:34:41:6f:ff:da:81:40:f8:1b:2d:da:91:
         e3:b1:63:ef:73:a3:e0:15:d8:5a:44:0a:70:8d:26:60:35:20:
         41:ec:36:ed:dc:cb:c8:e9:9b:2b:7c:7b:97:aa:5c:97:a8:4f:
         1f:55:5f:9a:b2:15:73:df:7e:79:d1:37:7d:b0:b2:1c:76:c6:
         66:3e:52:82:47:7c:ce:44:2f:22:87:8a:00:0f:7e:25:8d:1d:
         a0:0d:53:95:ae:47:eb:b6:53:dc:ae:0e:21:97:f7:14:9b:92:
         d9:8d:b8:cc:c1:f7:60:84:42:5a:e9:73:69:d8:f1:3e:0a:0c:
         e2:14:e6:44:06:10:d9:3e:73:72:5a:4b:21:18:62:72:c5:5c:
         90:29:19:2c:96:6b:0f:90:d3:24:ce:82:85:91:10:86:d4:84:
         99:b2:b4:dc:c9:45:14:ff:8b:28:51:21:d4:bc:4a:e7:fb:28:
         27:09:14:d4:3e:a3:f0:f0:57:74:c7:19:f8:9c:ff:16:9a:b7:
         21:4d:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:32 2026 by rpki-client