Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          cqiHtUL9IkRoZjXfJtHpaDXqAJXMA0RQvVCJIsr4ya4=
Subject key identifier:   19:EE:07:BC:69:FB:94:46:3B:10:F3:EA:A9:01:58:46:80:4E:9D:FB
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       59558F0709615487B716B96E4644D8A405453493
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          03E0
Signing time:             Thu 16 Apr 2026 20:40:00 +0000
Manifest this update:     Thu 16 Apr 2026 20:35:00 +0000
Manifest next update:     Fri 17 Apr 2026 20:52:00 +0000
Files and hashes:         1: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: qlvvK7Eq5/lWUhPKseppGgxaush80fH+JFg/2kEwrkU=)
                          2: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=)
                          3: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=)
                          4: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=)
                          5: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: T4RVJae5w0FcEXdyjhl94mbwOS7X99AA6hc9ki58IK0=)
                          6: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=)
                          7: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: p8H/GRkW5V1qWf2jewXlHEMjzNIQZUgqEqSh46nQha8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 Apr 2026 20:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:55:8f:07:09:61:54:87:b7:16:b9:6e:46:44:d8:a4:05:45:34:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Apr 16 20:35:00 2026 GMT
            Not After : Apr 17 20:52:00 2026 GMT
        Subject: CN=19EE07BC69FB94463B10F3EAA9015846804E9DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:74:d5:22:6b:60:57:d9:da:21:aa:13:b4:
                    9e:b7:a8:8a:a3:48:ff:3d:3b:93:66:d8:b7:da:88:
                    de:55:17:75:6e:21:cc:89:ac:e2:b2:4a:57:70:bf:
                    35:fa:0a:2a:85:1c:25:08:9c:74:a5:77:35:bf:a5:
                    cd:68:e2:96:ff:84:b6:24:04:63:f1:c0:93:6c:64:
                    ed:54:7e:6d:f8:4a:e0:1d:20:4b:52:58:02:cc:79:
                    1e:0f:9e:ab:1d:d9:e6:bc:db:c1:9b:b4:db:9a:06:
                    c8:a6:22:d8:37:ba:83:8b:f7:55:2e:af:40:af:c7:
                    cf:41:ce:c2:d7:9d:41:e7:e6:fe:fd:7a:0c:45:6a:
                    33:4f:67:9e:e4:77:98:7f:b6:9c:46:93:78:57:39:
                    aa:c0:25:ff:c5:f1:d5:5e:d3:11:eb:f3:4c:e7:22:
                    d2:4a:9c:57:35:50:33:68:4a:66:2e:99:1d:52:76:
                    39:12:a1:25:f6:4c:7f:27:b4:24:ba:3d:6f:4e:89:
                    e5:f1:8e:6b:59:09:95:13:8b:4f:31:f0:d6:5c:10:
                    5f:21:a2:9c:aa:4b:b8:77:d7:15:19:c6:f3:31:7c:
                    85:1d:30:2e:ae:cd:17:89:1f:f2:b5:c9:0e:52:c7:
                    84:84:db:0f:bd:1b:7d:c8:e6:27:f2:98:87:01:61:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:07:BC:69:FB:94:46:3B:10:F3:EA:A9:01:58:46:80:4E:9D:FB
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:53:b5:90:6a:20:ba:eb:63:e9:be:6f:db:de:e4:39:cd:f9:
         8e:08:ba:2e:83:8b:1b:7b:2a:38:02:3e:07:5e:d3:0e:bd:2e:
         c3:39:a7:f2:6e:03:97:d4:49:df:30:67:71:76:2f:1e:37:b2:
         aa:21:51:b5:26:1a:55:c6:aa:f9:c1:82:4a:4e:05:09:c8:97:
         7b:1b:9d:27:c1:a4:1a:5d:95:3c:89:61:db:95:76:59:4a:ca:
         58:5b:04:f7:08:95:d8:b1:c3:df:dd:cd:60:2d:73:5c:34:99:
         88:df:86:5a:dc:a0:c6:ed:e8:cb:fd:e7:35:09:f6:fb:ab:82:
         38:05:7c:a7:a8:af:47:b1:71:50:ca:63:4d:e4:6f:9e:ce:a9:
         1e:30:04:55:38:12:72:79:2b:5e:e8:c4:0a:c8:88:1b:2b:31:
         7f:c0:a4:27:d9:86:03:71:19:7a:1c:6c:18:66:88:02:ac:a5:
         02:ca:68:4f:4a:a7:92:c3:b3:39:9a:40:d8:f1:74:0a:2c:d7:
         bb:a0:c4:cc:bd:f4:bf:3b:21:a5:95:c9:ce:72:f0:12:2c:14:
         b4:99:6f:13:ca:08:19:4f:f2:c8:cc:05:78:03:a2:b2:f3:7e:
         ee:ad:7e:4d:d2:a2:6e:41:01:ae:9f:bb:bf:42:ce:21:4f:d8:
         bb:d8:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:10 2026 by rpki-client