Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          pKhlZ7NmN+R8x7eQ7zfpz7lwK8ejGwzPTlQ1wsehc1c=
Subject key identifier:   29:D5:C3:F4:34:E0:EE:DA:50:5E:69:40:61:48:F9:60:74:B8:37:F8
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       1B462FC7BF5124EFF76B1D81F7EB20399C6D656E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          03E6
Signing time:             Fri 17 Apr 2026 11:53:18 +0000
Manifest this update:     Fri 17 Apr 2026 11:48:18 +0000
Manifest next update:     Sat 18 Apr 2026 14:30:18 +0000
Files and hashes:         1: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: dOTcyk/Yg1CLHjEE7CrSkjNRl+YJedBSp33BbqS6EcI=)
                          2: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: w0mMNo0SLElRghwjB+anzvAp9d1gRnbx6qu12IQDJVk=)
                          3: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: smY/SAzd2Fuaf2YaSHRlggXrs8poIzwUXt+Sy0fZuxY=)
                          4: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: TbDFL3gUdNfReddqFUYovFWPHWh7xwus0xT+10cp8M0=)
                          5: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: A2Gpn8ZW5aoEGzgwjPMqPIr4WywGHZsk8HwfwI/eW/o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:46:2f:c7:bf:51:24:ef:f7:6b:1d:81:f7:eb:20:39:9c:6d:65:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Apr 17 11:48:18 2026 GMT
            Not After : Apr 18 14:30:18 2026 GMT
        Subject: CN=29D5C3F434E0EEDA505E69406148F96074B837F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:85:63:e3:5d:9a:6f:dc:02:87:6f:80:23:
                    58:1d:78:4f:98:a1:3e:51:f9:d3:0b:24:28:35:26:
                    c5:5c:66:d2:45:89:45:a1:ac:8a:47:79:95:38:b0:
                    dd:ac:29:69:0f:7f:25:18:b7:74:95:fb:f3:87:88:
                    c6:a7:23:1b:39:28:43:d3:5b:c4:27:e4:e5:5c:6c:
                    e4:b5:ff:f0:e5:42:e6:1f:dc:b4:d6:2f:60:c4:48:
                    d1:56:96:e4:56:eb:1a:ff:a7:3f:d4:68:a2:90:cd:
                    c2:60:cc:64:bd:57:32:f1:f0:ac:f9:05:b5:f7:23:
                    3b:a9:20:b7:94:e8:dd:60:aa:d0:be:6c:cd:c9:fe:
                    2a:f1:1d:88:d3:a0:9a:db:a7:26:dd:f9:1c:fb:41:
                    11:a2:ba:a3:03:0e:2f:70:83:2c:7a:b6:b5:08:89:
                    b5:60:c5:aa:b8:1a:97:f5:75:9d:25:6a:f9:f2:fa:
                    80:c7:52:84:aa:0e:0e:f4:4a:99:22:13:01:50:35:
                    23:d7:fc:3c:fc:bd:fe:7d:1f:ee:fe:be:61:14:4e:
                    9a:cb:d1:4e:74:75:00:34:99:e0:21:e4:88:95:b5:
                    b7:2f:b5:35:fe:67:70:66:55:1e:8e:c8:71:0f:77:
                    ea:9f:63:72:ea:42:ae:9a:f6:51:88:9c:27:4b:97:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D5:C3:F4:34:E0:EE:DA:50:5E:69:40:61:48:F9:60:74:B8:37:F8
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fe:56:fa:cf:ad:6f:05:ef:d5:19:0d:a3:eb:be:ba:31:7c:
         b9:00:1c:02:dd:26:61:56:61:83:ab:23:1f:c2:9e:92:8c:55:
         76:10:5c:2d:52:13:94:59:75:c2:66:fb:c3:5b:63:3f:fb:43:
         ed:77:b7:a0:4e:9c:79:6d:59:d6:4b:38:8d:52:b2:9c:03:f7:
         6a:9e:0c:7e:8d:47:77:19:0d:63:09:ee:25:e2:78:ee:07:a7:
         fc:ed:6d:b3:92:85:fc:cf:71:d0:fe:29:2a:f6:57:bc:e6:42:
         ec:3c:10:bc:f0:3c:88:7d:38:64:5b:49:cd:17:60:a7:d9:73:
         7c:a9:f2:a4:2d:2d:55:71:d7:a5:da:e8:73:d6:96:3a:56:5a:
         c8:f2:fc:1b:28:9f:00:33:5c:a9:3f:b7:5f:bd:06:46:73:5c:
         70:eb:79:bb:04:a3:8e:40:63:ba:1b:07:73:b1:0a:d1:01:04:
         b8:61:6d:ea:a0:d7:7b:30:e1:19:6d:e1:b9:90:20:e0:a2:f4:
         30:7b:b6:2a:12:46:a2:b9:f7:ce:28:de:c8:28:b5:77:8d:1d:
         84:77:23:1c:5a:84:c4:ae:93:e5:1f:4d:5d:c1:dd:e9:70:88:
         8d:6e:8f:19:99:ef:4f:0f:14:e5:a7:56:57:96:ef:84:a4:f6:
         f2:5c:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:40 2026 by rpki-client