Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
File:                     98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft (raw, json)
Hash identifier:          on7BAoJYJxJ2s0OqEfsk+JqEUTCslKx/TdO9cPEYI/g=
Subject key identifier:   34:A5:7E:3A:3D:0E:6A:1A:C3:C0:B4:B5:66:7E:C7:5D:0B:27:54:BA
Authority key identifier: 98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4
Certificate issuer:       /CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
Certificate serial:       3997C4B47DAD0C6337E901051FB826E18050A70C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
Manifest number:          CE
Signing time:             Wed 25 Mar 2026 13:09:31 +0000
Manifest this update:     Wed 25 Mar 2026 13:04:31 +0000
Manifest next update:     Thu 26 Mar 2026 14:47:31 +0000
Files and hashes:         1: 323830343a363164303a3a2f33322d3332203d3e20323639323538.roa (hash: 8qQCri6qGWiadi01ad1az8JvzGBhTeBmb4mZ2PXSGhg=)
                          2: 323830343a363164303a633030303a3a2f33342d3334203d3e20323639323538.roa (hash: wboQOQtus5JP6+FRXe83WKDh6w4gDk0DddQ5JjTwEzo=)
                          3: 34352e3233392e3134322e302f32342d3234203d3e20323639323538.roa (hash: +5xH3VGg66qqGObLwnPEzrQUecX3E1bMeJgvtdYpmr8=)
                          4: 34352e3138332e33302e302f32342d3234203d3e20323639323538.roa (hash: kOaATmV4UGkMqKAFQTH9ivDhBHJK62oX0Skeja080QI=)
                          5: 34352e3138332e32392e302f32342d3234203d3e20323639323538.roa (hash: Y0XledqOqFp/ctesKaL3t6MvuxjwK3lGL9hYw0Ru3Q8=)
                          6: 34352e3233392e3134312e302f32342d3234203d3e20323639323538.roa (hash: jwaYBnk+rmg0vJdnGS2gDNxdxJ8vtY+++EyU1RclGe0=)
                          7: 34352e3138332e32382e302f32342d3234203d3e20323639323538.roa (hash: 8C6UC+wDxB0qUbdh7OEHmVIpHSeVjsxbPBNENSNgUMw=)
                          8: 34352e3138332e32382e302f32332d3233203d3e20323639323538.roa (hash: emzlw40pqMCQ3qu4bLcxZgBrl2wiQdeZGEEpw7OUA5Q=)
                          9: 323830343a363164303a3a2f33342d3334203d3e20323639323538.roa (hash: RVEvds/l3t4Qw2XLQrOUJG8lrohW3+3lCwgMpnAdEes=)
                          10: 34352e3138332e32382e302f32322d3232203d3e20323639323538.roa (hash: M20FQXHHaMgpqM/Q3VHvz3LtrYaLgb/ZiyeDa/mjwHo=)
                          11: 34352e3138332e33302e302f32332d3233203d3e20323639323538.roa (hash: hxuYxktPIARSMHs+PJr+WN4geas+siHVpE3UpfvAmG8=)
                          12: 98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl (hash: ltC6aRPsB6VzXnpysOlXqHwV+hWxWSNKovF+KGA6E7M=)
                          13: 34352e3233392e3134302e302f32342d3234203d3e20323639323538.roa (hash: CiONmP+PeykJVpUWpQj6lOU9OL+vJEC6bQ8s0Ehc1Qk=)
                          14: 323830343a363164303a3a2f33332d3333203d3e20323639323538.roa (hash: aJLy3hllw1KJVs0y6yP5hifneQHNLtJmO7vT/z3H7gA=)
                          15: 323830343a363164303a383030303a3a2f33342d3334203d3e20323639323538.roa (hash: TKR4P4rJCVRt+asB8CS1k2yKtBzTUG9fcS/jhyY6OBU=)
                          16: 323830343a363164303a383030303a3a2f33332d3333203d3e20323639323538.roa (hash: 5OXkW+bNvuUKmQqsypMHe0VxCbS2ITsO6ku6SoM1okg=)
                          17: 34352e3138332e33312e302f32342d3234203d3e20323639323538.roa (hash: 8pwWCkIf0+YTbL23bFkMPc5bQQEFDYkVH5thHHekMHI=)
                          18: 34352e3233392e3134302e302f32332d3233203d3e20323639323538.roa (hash: kIqH0jANQzgfauNCuwhpFXyTtAA7dlkgBuqOodYGoK8=)
                          19: 34352e3233392e3134302e302f32322d3232203d3e20323639323538.roa (hash: CyOK4L2la3d8LyNnB1s4KqcCPVuRGCPnRkdxhgmuS40=)
                          20: 34352e3233392e3134332e302f32342d3234203d3e20323639323538.roa (hash: NQsSa+zC8ge44twG5XmqbQZpXCSt2h9ZZTOmQhrEx+E=)
                          21: 34352e3233392e3134322e302f32332d3233203d3e20323639323538.roa (hash: 0X7uKD17yg/YjAIHckUN4WlSmM7P1dCkNrDLUkffsEE=)
                          22: 323830343a363164303a343030303a3a2f33342d3334203d3e20323639323538.roa (hash: aHUHDje35ythhdbKPhkq+Z/nAoQRbEDZzNRIZfUIdpU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl
                          rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 14:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:97:c4:b4:7d:ad:0c:63:37:e9:01:05:1f:b8:26:e1:80:50:a7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4
        Validity
            Not Before: Mar 25 13:04:31 2026 GMT
            Not After : Mar 26 14:47:31 2026 GMT
        Subject: CN=34A57E3A3D0E6A1AC3C0B4B5667EC75D0B2754BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6d:fe:01:d4:7f:05:88:87:64:bd:1f:a4:88:
                    59:2a:5c:d6:44:55:8f:97:08:a2:40:85:78:3d:02:
                    a5:2b:32:84:2c:21:65:6a:0c:21:01:b8:67:88:fa:
                    77:12:13:1a:94:b9:0a:97:a3:ad:d8:80:de:0d:d5:
                    ac:ab:bd:15:f4:9d:56:47:9e:13:f9:06:27:7e:f3:
                    7f:3f:81:fd:5e:9d:ec:e6:c6:1c:93:dd:b2:7b:ab:
                    00:a7:db:fb:e9:26:89:2d:47:d5:34:59:90:a3:3f:
                    2d:ab:af:ea:4e:4f:f6:36:bf:ac:48:51:18:8c:9a:
                    c7:56:67:8c:cd:a1:b6:20:67:73:40:59:19:b3:df:
                    f2:df:6e:94:a8:61:da:61:bb:4c:ce:cb:40:b9:1a:
                    6a:1b:e6:6b:e6:44:6c:3c:bb:13:49:2b:f3:19:c9:
                    e9:25:a6:49:9d:37:f8:96:b3:68:a0:d5:b3:d0:73:
                    f0:18:7a:22:6a:1f:b9:25:47:55:73:99:a0:e2:b8:
                    8b:a9:ee:99:ae:e5:ee:94:f4:68:4d:fd:96:3b:13:
                    93:ff:6b:5d:c2:84:0c:bf:db:6e:29:a8:95:57:68:
                    1b:4c:27:31:3b:46:0b:64:f4:46:33:25:6c:72:6f:
                    91:5c:4f:e5:3d:aa:98:f6:7f:42:37:0e:46:7c:28:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A5:7E:3A:3D:0E:6A:1A:C3:C0:B4:B5:66:7E:C7:5D:0B:27:54:BA
            X509v3 Authority Key Identifier:
                keyid:98:DD:BB:A4:35:DD:6A:9E:48:D2:FE:EA:93:54:A7:78:DE:F1:76:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/98DDBBA435DD6A9E48D2FEEA9354A778DEF176C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:d5:81:fa:29:9c:f2:21:4e:21:64:8a:1d:d8:6d:a6:77:
         e2:78:a7:4c:7f:e0:7e:87:77:f7:43:6a:fb:ad:ee:74:68:2f:
         03:ab:f6:ca:5a:a6:b1:60:26:35:3c:25:f8:b1:90:79:7f:b5:
         35:33:0a:2a:72:24:27:79:e4:bf:57:1a:cf:04:e9:0a:c9:f0:
         30:7b:1d:94:7a:5e:2c:56:cd:71:fc:7b:a1:70:fa:66:85:53:
         fa:76:65:06:d9:68:16:e4:98:58:ba:38:dc:d3:b6:dd:89:d4:
         92:9f:48:b8:fe:e9:d5:0f:60:1e:22:ed:de:f0:6e:f8:a9:ec:
         44:d1:06:39:e2:4a:88:d4:5f:c3:1f:19:12:62:00:0a:dc:c4:
         88:d7:cc:87:14:81:8f:1b:81:9c:cc:79:82:ed:fd:88:44:ce:
         47:b2:0b:1f:a2:03:89:b2:bd:90:96:bd:2f:e2:dd:42:64:db:
         b2:e1:93:e8:d4:78:76:15:31:52:59:05:c6:20:b3:ce:a0:f8:
         a4:be:30:18:fd:60:b3:53:c4:bb:4d:47:9c:a2:66:60:70:66:
         ad:0c:ff:a7:01:2d:6f:37:1a:fb:3b:0a:d2:9a:c3:f9:06:ad:
         84:1b:39:ad:d4:ba:95:b9:ef:d3:10:18:02:54:3d:0a:e5:91:
         13:df:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:35 2026 by rpki-client