Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          tX+r9ezOBgAq+qrylv9300ripmZ63cUsE7ewv9X+16g=
Subject key identifier:   DC:42:E3:E1:E0:ED:86:3A:FC:61:7B:41:19:8D:BA:58:B7:42:19:91
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       46560824860D557EB9452622F2C220AE4BB7BFBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          03BD
Signing time:             Thu 26 Mar 2026 00:16:40 +0000
Manifest this update:     Thu 26 Mar 2026 00:11:40 +0000
Manifest next update:     Fri 27 Mar 2026 02:58:40 +0000
Files and hashes:         1: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: xAF/9vEKF2e/T8IofVq99wh/I2lOBrEY20yGnAaSgF0=)
                          2: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=)
                          3: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 9NaA8Dq04c7j0pLtLEkFvCIZPUGfEE8aa950uY+eEJs=)
                          4: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wLIsioKqEUKS9TMeNf/n9LEYrLxpZbmg2+NMq5W8NRo=)
                          5: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: 2nczleJFPRyvFicJVGQltpFOvvykoBSvwigtbcxyl9Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:56:08:24:86:0d:55:7e:b9:45:26:22:f2:c2:20:ae:4b:b7:bf:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Mar 26 00:11:40 2026 GMT
            Not After : Mar 27 02:58:40 2026 GMT
        Subject: CN=DC42E3E1E0ED863AFC617B41198DBA58B7421991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:7f:c2:c3:d8:83:fa:61:11:21:87:26:ca:
                    1a:24:96:fc:47:94:48:b9:14:0e:5a:8c:58:46:28:
                    a3:62:eb:12:34:d2:d5:1b:63:2d:d1:de:16:ed:3a:
                    44:c8:37:6a:b5:44:9e:9a:01:24:7a:38:d4:9a:de:
                    05:d6:f4:0b:6f:93:ef:55:be:2e:86:9a:ce:3b:51:
                    06:87:7b:8d:0a:d9:33:fb:c7:0e:2e:5c:7a:e4:f2:
                    29:15:8d:10:d3:b7:b5:30:c7:ff:64:dc:a8:e0:44:
                    fc:b7:65:13:3d:a1:9e:48:c5:99:19:2b:b2:12:51:
                    30:2e:df:72:1a:04:88:76:b5:d9:17:ff:53:63:aa:
                    35:51:62:c9:12:2b:3f:c0:fe:a1:3f:a2:58:7b:a4:
                    0f:38:e4:e6:b5:fc:fa:ee:8c:ac:a3:25:91:56:8f:
                    d2:8a:b5:0c:29:6e:f0:c9:cb:79:fc:fa:73:c8:01:
                    97:ca:6f:5b:e8:e5:14:69:ed:d3:0b:6d:ed:cf:53:
                    e3:b3:40:e1:96:3c:b8:f7:8c:c4:cc:64:a6:63:62:
                    d2:3f:57:9a:b5:b7:c3:44:aa:b5:a2:f2:4e:5b:1c:
                    bb:ae:6c:7c:16:64:7a:8a:1d:00:b5:52:0c:6a:72:
                    5b:fc:89:37:8b:3b:e6:41:18:49:dc:60:db:27:33:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:E3:E1:E0:ED:86:3A:FC:61:7B:41:19:8D:BA:58:B7:42:19:91
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a2:fa:1e:a1:71:df:06:e2:48:9a:1c:3f:41:e1:ae:47:1b:
         51:fc:12:e3:7f:86:1e:a2:58:d6:0b:e7:31:d2:06:75:e2:46:
         f4:e9:08:3b:ce:01:27:63:81:97:63:04:3a:31:99:8c:67:18:
         9f:7f:f6:bf:32:e5:ee:31:ab:64:51:fd:2c:ee:ef:9b:58:1a:
         04:87:9c:80:d3:5f:99:6c:f6:f1:6e:13:63:36:68:9b:d5:44:
         9e:b5:e9:47:9f:ab:95:e7:95:18:3c:24:bc:2e:23:95:35:b3:
         ee:c1:44:c6:8f:1f:16:d2:e7:6d:ac:06:03:e4:7f:cc:e7:fc:
         a6:e2:07:d9:26:06:d5:de:aa:87:98:82:f9:be:3e:24:f6:bf:
         8f:5a:0d:98:f8:b0:a8:1a:65:e5:d6:b4:6d:0b:aa:45:3c:6a:
         45:ba:37:48:46:d3:e9:50:cc:63:5e:fa:2e:28:57:a7:46:95:
         f4:b0:86:b9:cb:54:a0:af:3c:81:56:80:e3:96:c3:b9:27:33:
         97:ca:f3:e8:45:95:28:26:5d:0f:15:ae:ed:73:86:8c:f8:d0:
         d0:bf:c8:bb:94:ac:5a:e4:5d:42:16:b0:d0:3e:16:29:82:88:
         46:81:0c:14:85:b3:80:cf:48:a4:ed:9c:c2:89:79:bb:45:d4:
         22:83:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:12 2026 by rpki-client