Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File:                     BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier:          g0QRQOJ1tBRUSChXrXBbD/IOzM+OMezczMJ7AFaM/xs=
Subject key identifier:   C5:8B:B4:4F:B9:49:B7:8B:C9:F0:4B:55:E7:3E:4C:F2:F6:F0:6F:74
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       347D004EA4965D945D9F978C74D268ECF2F36E2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number:          03C9
Signing time:             Wed 25 Mar 2026 10:37:07 +0000
Manifest this update:     Wed 25 Mar 2026 10:32:07 +0000
Manifest next update:     Thu 26 Mar 2026 10:42:07 +0000
Files and hashes:         1: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: E9plHt7RLLvmbvHaG4OTDwGPfwEIE4mC0sfU15Aoajs=)
                          2: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: Jvk4BhtkTqCaEGOfHpRXl47mcoGZIB2qsIvobQVyGEY=)
                          3: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: BRDX2bcHpAwtqDa7mj74P+hWC5po7P4vzhu+qudBurg=)
                          4: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: QYuarhhb51IIJNcMd8PqyCgbNMJp1l2Brpl4eGszn1Q=)
                          5: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: zX14pAuIBCjmDXkZaWXM01B+v1fRg8EFaglBVaGdItk=)
                          6: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: LU8Mv1K4W9NjY1Ph3Xc32UCFbzgnlyOyJCLoDeuE47s=)
                          7: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: Rvo51TuPLd1M8Qn3gxgvH5b8+pcMostBoJ2Bw5X49aQ=)
                          8: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: Aa284McDfTPmjic3mysbGGpbN5J63jS24v2FD6iYht0=)
                          9: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: EXKoERunxHBjD0wM17VenuhxYo/CI6MX+lv8XDiQ0Z0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7d:00:4e:a4:96:5d:94:5d:9f:97:8c:74:d2:68:ec:f2:f3:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Mar 25 10:32:07 2026 GMT
            Not After : Mar 26 10:42:07 2026 GMT
        Subject: CN=C58BB44FB949B78BC9F04B55E73E4CF2F6F06F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bb:d3:e2:df:94:11:b1:47:76:0e:41:38:43:
                    ed:86:09:5f:b3:c0:ef:a8:33:1e:08:6a:7b:c2:0f:
                    1b:4d:98:1d:99:00:3f:28:e6:62:38:8d:48:5f:27:
                    53:09:2c:ab:97:fc:6f:02:8a:cd:41:2b:99:02:ef:
                    f5:51:2f:c4:6f:01:22:0e:6d:3e:3e:9f:a1:d5:4d:
                    a6:c5:e3:2b:e0:44:1a:65:2a:b9:44:94:6b:f7:e1:
                    a3:72:4a:1b:ee:5e:57:5f:f9:ac:d7:0e:bd:1e:ef:
                    53:33:24:6c:7f:16:d2:ba:cc:42:bf:9d:3d:21:c8:
                    b7:d8:cb:69:61:3f:a4:14:8d:87:dd:ab:74:d0:cb:
                    e2:33:3b:92:f3:dc:20:ff:5a:57:71:90:24:19:60:
                    d2:d4:ad:71:7e:7c:fc:39:c4:6d:55:1d:f2:5b:4b:
                    48:ab:7a:51:4d:a7:61:0d:fd:a0:fc:b3:e2:bb:a4:
                    c0:5a:9d:7f:55:7a:31:c2:4b:3d:24:95:97:9d:d2:
                    d8:3e:69:0e:92:00:5c:5a:30:6a:b0:e5:e5:90:ed:
                    ff:fc:ad:52:71:3f:3b:df:94:4f:f8:fd:1c:af:18:
                    c3:ce:5d:39:f8:f0:85:8c:6c:d9:e5:c4:9a:18:86:
                    49:b5:21:b2:fe:d1:8b:bf:c2:a8:8f:fa:dc:7a:cf:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:B4:4F:B9:49:B7:8B:C9:F0:4B:55:E7:3E:4C:F2:F6:F0:6F:74
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:01:2c:35:17:7a:f7:de:e9:e7:4a:e4:e2:21:42:1e:5d:
         db:c0:40:6f:14:0a:a4:56:76:93:b3:4c:28:ae:15:27:b0:d1:
         78:e1:e9:7b:27:9c:fe:22:17:a8:46:47:8b:66:72:4e:b2:73:
         b0:d9:f3:b7:35:84:26:c7:a7:02:2d:55:ec:48:61:3b:49:63:
         01:5a:f3:61:ab:6b:7f:5d:c2:a2:66:e7:03:dc:b3:14:4b:2b:
         99:0a:61:cf:e7:a0:83:c8:3c:95:38:0f:73:28:d5:de:b0:3b:
         27:9a:59:64:f7:0e:c4:73:7a:0c:6a:68:ae:ed:85:2e:cb:fe:
         4c:97:c9:ac:85:ea:f8:10:33:6b:b0:e0:13:af:b9:f5:15:02:
         21:2d:ab:1e:b6:80:69:5a:09:20:d8:c3:42:a7:97:b2:f0:41:
         15:71:9f:5e:b8:47:54:28:fa:92:ee:29:8f:d1:2b:1e:cd:e6:
         32:b4:16:2b:ee:a3:10:b9:49:77:b9:17:1e:4c:69:18:d9:cf:
         ba:0d:85:73:1f:51:0a:83:6d:f8:94:f7:00:c7:56:4a:ad:ee:
         8c:b3:03:7c:54:9c:22:83:37:79:51:f6:a3:eb:fa:0e:18:3c:
         03:ab:58:4c:6d:75:47:fa:b2:f8:ab:c1:de:c2:03:6f:5b:4e:
         15:a5:c4:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNH0ATqSWXZRdn5eMdNJo7PLzbi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBOTFCODcyOTkyNEI0RTgxNTVCODE5NTI2ODhCRUMw
MDRERDBCNzAeFw0yNjAzMjUxMDMyMDdaFw0yNjAzMjYxMDQyMDdaMDMxMTAvBgNV
BAMTKEM1OEJCNDRGQjk0OUI3OEJDOUYwNEI1NUU3M0U0Q0YyRjZGMDZGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtu9Pi35QRsUd2DkE4Q+2GCV+z
wO+oMx4IanvCDxtNmB2ZAD8o5mI4jUhfJ1MJLKuX/G8Cis1BK5kC7/VRL8RvASIO
bT4+n6HVTabF4yvgRBplKrlElGv34aNyShvuXldf+azXDr0e71MzJGx/FtK6zEK/
nT0hyLfYy2lhP6QUjYfdq3TQy+IzO5Lz3CD/WldxkCQZYNLUrXF+fPw5xG1VHfJb
S0irelFNp2EN/aD8s+K7pMBanX9VejHCSz0klZed0tg+aQ6SAFxaMGqw5eWQ7f/8
rVJxPzvflE/4/RyvGMPOXTn48IWMbNnlxJoYhkm1IbL+0Yu/wqiP+tx6zz7/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxYu0T7lJt4vJ8EtV5z5M8vbwb3QwHwYDVR0j
BBgwFoAUuqkbhymSS06BVbgZUmiL7ABN0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VY
RjkvMS9CQUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTkxQjg3Mjk5MjRCNEU4
MTU1QjgxOTUyNjg4QkVDMDA0REQwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VYRjkvMS9C
QUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAosBLDUXevfe6edK5OIhQh5d28BAbxQKpFZ2k7NMKK4VJ7DReOHpeyec/iIX
qEZHi2ZyTrJzsNnztzWEJsenAi1V7EhhO0ljAVrzYatrf13CombnA9yzFEsrmQph
z+egg8g8lTgPcyjV3rA7J5pZZPcOxHN6DGporu2FLsv+TJfJrIXq+BAza7DgE6+5
9RUCIS2rHraAaVoJINjDQqeXsvBBFXGfXrhHVCj6ku4pj9ErHs3mMrQWK+6jELlJ
d7kXHkxpGNnPug2Fcx9RCoNt+JT3AMdWSq3ujLMDfFScIoM3eVH2o+v6Dhg8A6tY
TG11R/qy+KvB3sIDb1tOFaXEwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:30 2026 by rpki-client