Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          joWDYL7lSQkWMcZFwAkYcp+6A62WM95JjlrGkmT8ssg=
Subject key identifier:   ED:04:FD:B1:AC:91:61:A1:85:C5:DB:22:C3:90:86:77:E8:EA:F2:38
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       3B7375631B17715A555D3F0394B135A6DDCD612E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          0433
Signing time:             Sat 13 Jun 2026 17:27:16 +0000
Manifest this update:     Sat 13 Jun 2026 17:22:16 +0000
Manifest next update:     Sun 14 Jun 2026 21:09:16 +0000
Files and hashes:         1: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: TbDFL3gUdNfReddqFUYovFWPHWh7xwus0xT+10cp8M0=)
                          2: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: A2Gpn8ZW5aoEGzgwjPMqPIr4WywGHZsk8HwfwI/eW/o=)
                          3: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: dOTcyk/Yg1CLHjEE7CrSkjNRl+YJedBSp33BbqS6EcI=)
                          4: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: ZDgtnRhrMrAZXhkXr/6D8pq7Rx3wQuaksPo3igyCW8M=)
                          5: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: smY/SAzd2Fuaf2YaSHRlggXrs8poIzwUXt+Sy0fZuxY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:73:75:63:1b:17:71:5a:55:5d:3f:03:94:b1:35:a6:dd:cd:61:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Jun 13 17:22:16 2026 GMT
            Not After : Jun 14 21:09:16 2026 GMT
        Subject: CN=ED04FDB1AC9161A185C5DB22C3908677E8EAF238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:33:0f:6e:05:d2:1b:b1:b9:8b:5f:e6:89:
                    e1:31:78:47:eb:bc:e1:58:77:b1:ab:54:7d:0a:62:
                    b5:48:40:e9:2b:ec:51:57:dc:80:4f:92:70:66:88:
                    f8:8c:3f:a5:65:80:b5:de:58:ec:aa:ad:92:15:c1:
                    60:87:95:2a:b5:ac:5f:b9:26:8a:71:b8:db:7e:f6:
                    8a:fa:01:36:53:5d:cd:4b:f7:eb:10:f4:4d:32:c7:
                    7d:69:09:2c:f6:da:a0:56:0f:a7:e7:38:77:22:78:
                    b5:87:bc:f4:9c:6c:db:ce:d9:94:16:e5:dd:37:d3:
                    88:d1:d2:fe:1d:5a:0e:d2:94:af:2e:80:67:9f:57:
                    8c:a8:26:ab:9f:ac:90:4f:02:fd:43:ce:d5:bc:49:
                    68:b5:77:58:c2:08:4e:14:f6:21:c5:95:8c:8a:c4:
                    a7:38:2e:5b:60:aa:f2:04:67:1c:bc:7e:58:da:8e:
                    27:56:e7:79:d9:dc:de:4a:fc:43:3c:82:a9:ea:2e:
                    f7:08:68:74:96:54:8a:17:31:1b:7e:d0:3e:37:e5:
                    40:97:e3:e6:1e:d6:25:5a:7d:bb:0c:64:19:82:e5:
                    40:c9:6a:00:fc:e7:b2:c2:2b:66:b6:34:10:ef:cc:
                    99:1b:71:49:11:b0:a7:f0:77:41:87:89:f4:42:a3:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:04:FD:B1:AC:91:61:A1:85:C5:DB:22:C3:90:86:77:E8:EA:F2:38
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0e:df:ad:80:bd:47:80:1a:a1:21:af:d9:3e:80:7a:b1:14:
         8d:d9:8e:a8:39:a4:8d:c0:43:0e:1b:93:73:5f:87:74:ab:7e:
         90:e7:2a:36:98:3e:3f:9f:98:00:ee:ec:53:ce:3f:b4:65:13:
         bc:d5:0b:3c:c9:bc:fd:63:93:57:83:00:ab:46:5b:37:a1:13:
         74:4b:66:f9:96:1a:58:f9:f1:05:b1:86:fc:63:f8:07:6e:24:
         30:12:5b:13:2b:f6:fe:df:d8:40:2a:67:49:5d:ec:24:ec:29:
         49:ba:73:b2:da:10:44:05:37:c9:b5:9a:66:42:5f:5f:f2:63:
         8a:5b:8b:a7:db:3f:90:1d:25:72:18:56:a1:9d:5d:d9:a6:ec:
         f4:c2:09:48:03:5d:fd:a4:1b:68:e3:d7:e1:4a:99:92:03:06:
         01:12:a1:ef:31:64:8f:0f:00:5f:7f:3c:3d:a4:54:a8:13:f1:
         6d:f6:a9:e9:6e:da:5a:08:19:44:01:a4:77:46:52:ab:20:0a:
         60:65:c2:85:c5:5a:0b:40:8c:7b:0e:d4:6f:94:ad:49:2e:fd:
         a1:45:0d:58:68:b9:c5:f1:20:76:cd:c3:2f:ba:2b:5f:09:fd:
         91:8f:db:e0:f6:91:c8:d5:75:0c:f1:0a:ea:44:5e:fb:7f:ce:
         0f:07:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:13 2026 by rpki-client