Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
File:                     03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft (raw, json)
Hash identifier:          265E4KrASazylHuRgWVVXD/BU4GmFJRSlu+Zr18inpQ=
Subject key identifier:   F9:90:5D:A0:F9:64:09:CF:C3:33:F1:26:BD:37:CC:A0:F3:B5:B0:60
Authority key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43
Certificate issuer:       /CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243
Certificate serial:       3394B8169C8908E250664A9AB171AC022B2BABEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
Manifest number:          0C
Signing time:             Wed 25 Mar 2026 20:28:17 +0000
Manifest this update:     Wed 25 Mar 2026 20:23:17 +0000
Manifest next update:     Thu 26 Mar 2026 21:11:17 +0000
Files and hashes:         1: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl (hash: OI+j56ugNBLiM7tf9xsu2uQsQuP/92WfAv7kxXDXpgg=)
                          2: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: 9009pfqHHSDfQmA16n3BSiSnUou3SNM0grpR12t1Qj4=)
                          3: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: DAOPSVl3VjIiB/gugA2mB5ffypy61TmAdTW/kGDMNKg=)
                          4: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: T0Uz/Sk34aQgcSOQm+RkjvRwBySKQ/8Q27JSs8zyBXQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl
                          rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 21:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:94:b8:16:9c:89:08:e2:50:66:4a:9a:b1:71:ac:02:2b:2b:ab:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243
        Validity
            Not Before: Mar 25 20:23:17 2026 GMT
            Not After : Mar 26 21:11:17 2026 GMT
        Subject: CN=F9905DA0F96409CFC333F126BD37CCA0F3B5B060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:b3:b4:37:4d:15:62:f2:99:72:0d:50:ea:
                    02:b5:09:7b:53:c7:dc:ed:99:95:6d:9e:14:96:e8:
                    a8:9a:29:50:32:a3:52:5d:05:27:a4:11:41:d6:76:
                    7d:c7:99:c3:74:db:00:f9:4a:d3:d0:f6:71:42:54:
                    02:57:cc:f9:ba:43:38:e9:21:d3:2f:a8:c5:05:7d:
                    1f:2a:e5:5c:06:07:32:e7:90:22:e0:a9:c7:68:f5:
                    e3:80:08:7f:f5:bc:71:2e:9b:93:87:3d:8d:96:8c:
                    00:bc:87:70:ee:8e:dc:1b:41:93:eb:fd:61:f2:42:
                    fc:9b:9d:39:2a:59:a4:28:fc:4c:0b:e2:93:fe:ce:
                    a4:f9:e9:71:5e:ac:22:b8:79:b8:ac:fc:57:b4:b9:
                    2b:6e:4a:c9:1f:3e:5d:22:b8:e4:ad:46:6b:7e:0a:
                    74:6e:89:02:93:d1:9b:66:3f:41:b8:b6:19:07:82:
                    02:30:55:87:18:d7:57:06:8b:8c:94:04:3c:ac:89:
                    34:21:70:82:d3:1f:d2:26:97:a5:2a:21:b8:e1:96:
                    1a:3d:33:fb:68:a8:e7:39:aa:46:f6:e7:e6:f5:46:
                    08:06:4c:36:a5:85:d9:b9:f6:31:99:9e:36:c9:70:
                    6b:b7:86:16:83:5d:84:35:87:f0:a0:b7:3c:d1:7e:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:5D:A0:F9:64:09:CF:C3:33:F1:26:BD:37:CC:A0:F3:B5:B0:60
            X509v3 Authority Key Identifier:
                keyid:03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:24:a1:41:80:f4:79:12:f1:b7:2a:2f:ff:fa:06:14:ed:
         85:18:d4:74:65:47:e7:98:97:0d:18:1b:1e:39:01:94:04:c7:
         8b:fd:d6:29:e9:6a:aa:be:b6:fa:48:a8:67:45:46:4f:b0:27:
         bf:a0:f9:bc:7d:8f:6c:9c:9f:01:24:a6:bb:f1:81:5f:88:9f:
         57:98:a5:2c:a9:7f:6e:f9:91:8e:1f:58:07:10:5d:64:f3:51:
         57:f4:58:98:7e:3c:66:a6:07:aa:8d:ca:c8:70:0c:bc:12:df:
         4a:80:4a:d8:52:d3:02:22:15:e7:d8:41:26:3e:5b:14:d6:8e:
         ea:e1:af:f4:05:04:2b:16:0d:6b:be:41:ae:c3:a6:dd:93:c1:
         3a:ca:9c:41:4e:e5:ad:44:d5:55:cf:50:45:16:c3:db:83:5a:
         7d:ff:0f:a7:b2:08:84:bd:af:56:ff:88:8d:77:b4:80:1f:77:
         54:8f:91:da:40:40:f5:f3:6a:f0:18:3c:36:2c:67:65:71:19:
         e8:00:4d:c6:20:63:a0:46:64:5e:df:e6:2f:b9:d2:a8:3c:8c:
         33:d7:0b:ed:27:93:70:40:a7:c4:df:9e:6a:6b:b7:59:a9:ae:
         fd:15:9b:d8:32:da:fd:ff:41:b0:47:94:85:c6:e3:53:79:5c:
         7b:e5:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:15 2026 by rpki-client