Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
File:                     2601DE669734AEE0385101964D2ED4C0B8A927D4.mft (raw, json)
Hash identifier:          suhrX0+PcPCEK24qsl1m2rytmqIKMW8k9TLn8c69GRE=
Subject key identifier:   38:29:F5:A5:6C:62:8A:E0:45:3B:47:90:A4:7D:EA:8A:C0:AC:4B:01
Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
Certificate issuer:       /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
Certificate serial:       3817C5A324E17909EB544DEFFC93971A0487B6E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
Manifest number:          023D
Signing time:             Fri 17 Apr 2026 16:06:41 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 18:46:41 +0000
Files and hashes:         1: 323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (hash: 0Oc02LNd+R0JkJii0bEwu/9+RZv81w+EOXeBIxJBAfo=)
                          2: 2601DE669734AEE0385101964D2ED4C0B8A927D4.crl (hash: O7qIpL31B95hs+3WhPMLDmyABc0Vfw1e9bn4gRy+xfE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl
                          rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:17:c5:a3:24:e1:79:09:eb:54:4d:ef:fc:93:97:1a:04:87:b6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
        Validity
            Not Before: Apr 17 16:01:41 2026 GMT
            Not After : Apr 18 18:46:41 2026 GMT
        Subject: CN=3829F5A56C628AE0453B4790A47DEA8AC0AC4B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:ae:f5:22:82:a3:4b:e6:98:66:59:56:63:
                    e1:98:e1:ba:91:af:94:a1:a8:f7:f2:ea:4a:7a:a6:
                    48:54:31:d5:b2:0f:35:4b:3f:1f:d5:ad:be:0c:56:
                    e7:11:f8:1b:79:b4:fe:6a:ba:d4:d9:b5:b1:c6:dd:
                    87:3c:22:5f:b7:3d:65:5b:fa:bf:d3:9b:7a:56:b5:
                    4e:05:32:6e:c0:6f:f6:b7:a0:9e:9e:36:e0:e3:b0:
                    80:30:e5:40:4d:ea:5c:7c:28:4a:5c:22:4c:ba:e0:
                    9d:62:85:e8:24:00:a6:16:28:83:70:d9:cb:16:3f:
                    b4:4f:02:7a:7a:d4:9e:88:e6:dc:1c:24:b7:42:85:
                    f3:e2:b9:b5:3c:8b:c2:90:93:34:19:f0:be:2b:89:
                    9c:16:ff:bf:b4:3b:87:d3:0e:e5:03:e1:17:a3:6d:
                    9f:00:bd:b5:15:ae:0e:dd:a9:d1:e5:83:66:5b:9e:
                    b9:10:2b:63:ea:76:16:4f:4d:f9:21:75:fb:1f:fc:
                    27:e6:cf:75:b8:09:90:b0:51:bc:09:1f:7e:df:06:
                    fc:3f:46:04:96:d1:1b:02:af:39:07:0b:0f:ca:53:
                    90:3b:52:13:36:0a:35:d3:30:67:0b:e9:40:62:35:
                    84:4d:0e:0d:35:79:31:fb:01:e8:92:15:0e:27:7a:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:F5:A5:6C:62:8A:E0:45:3B:47:90:A4:7D:EA:8A:C0:AC:4B:01
            X509v3 Authority Key Identifier:
                keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:f8:2e:6c:35:fe:7d:8e:91:3d:93:45:62:09:d4:bc:7c:
         e8:f4:9b:82:ee:55:eb:dd:b6:ab:55:05:40:d7:49:e1:50:44:
         4c:b6:7a:68:8a:ec:c0:91:f2:02:3b:f5:79:ff:09:2f:38:b8:
         95:19:20:7e:f4:06:1e:76:36:55:df:aa:30:b1:2b:44:2d:b1:
         ff:ef:67:61:c3:f3:73:21:db:d7:f9:1b:f8:8b:d3:3d:b5:dc:
         ef:9a:6b:31:ee:32:52:78:22:72:30:9f:85:8e:d0:cf:dd:8f:
         dd:37:6d:b3:19:31:60:61:44:7b:2c:5c:c0:d2:e2:dc:7d:18:
         3a:4c:f9:3d:0d:f0:dc:33:81:4b:dc:01:aa:ca:12:35:f9:e6:
         7c:95:48:3c:4e:dd:ef:68:93:d2:68:5a:3b:92:a3:4d:66:c0:
         9f:08:c3:8e:34:6a:ea:64:0d:01:01:d7:66:cd:8e:70:9c:5b:
         3e:bf:8e:4e:55:b4:82:d9:79:ea:c6:19:55:fd:4a:e3:df:3f:
         75:27:02:c9:44:de:cf:92:ab:65:77:20:0e:25:f5:e0:7a:b9:
         7f:fa:27:2b:c8:28:cf:c9:3a:40:b1:ca:19:1a:92:7b:59:5c:
         fd:3c:d7:64:9e:0c:5b:bc:5e:36:a0:f8:96:69:1c:47:7d:87:
         b8:27:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:17:39 2026 by rpki-client