Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
File:                     38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json)
Hash identifier:          LpdM/xRy9h+sZRaVJKqDhpUpmiOSbxejVvS686wSFD0=
Subject key identifier:   29:DF:F9:47:D9:24:21:56:EE:A7:E0:1A:31:33:FC:94:4B:4A:98:D5
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       5E11BE92A5FC8ADC0BA6CEEA2A06BAAEB6B15512
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
Manifest number:          03A4
Signing time:             Mon 02 Mar 2026 10:13:38 +0000
Manifest this update:     Mon 02 Mar 2026 10:08:38 +0000
Manifest next update:     Tue 03 Mar 2026 11:36:38 +0000
Files and hashes:         1: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: 42nXBEnZEUilwtBfS/r1+hGnfsDjL45hBxYrzMhtcU0=)
                          2: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 2IsxxXEamqB2maTRmILSDsKb58bzuLOS5GUocJaoi/A=)
                          3: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: OCsEcACfuvtGrDuTTiwuUJYuYSKLgkK1iRwH2rQNkxI=)
                          4: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: NFULb+Ozf0iG+L/W/CfsLNj7mhTa1xp+/r+3JiJCy+Y=)
                          5: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=)
                          6: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: U/ovWadhGltgw0D0M1sX0nDnEp7KUWwkhB9kAvT0gHA=)
                          7: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: jQ6/5frxDqkVkkcEfiI4JX9SVRQPGQReqALs4lhfh9o=)
                          8: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: OBHqqNIz3akR1irPnJT6tdTN25bwOM4IlaaFdhrY5NI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:11:be:92:a5:fc:8a:dc:0b:a6:ce:ea:2a:06:ba:ae:b6:b1:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Mar  2 10:08:38 2026 GMT
            Not After : Mar  3 11:36:38 2026 GMT
        Subject: CN=29DFF947D9242156EEA7E01A3133FC944B4A98D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:af:d6:c5:70:e5:06:30:3c:b6:42:69:5c:
                    fa:4d:dc:73:13:32:31:4b:21:8c:ef:1c:de:eb:51:
                    c2:fa:22:3f:45:ac:87:80:36:50:a9:26:29:28:3f:
                    f6:68:f1:99:3d:28:f1:77:66:a3:be:5b:ac:4f:65:
                    04:a6:11:0c:0c:08:c2:2f:49:c4:6f:da:a4:7c:20:
                    3d:a5:cb:a7:0b:fb:c2:81:ee:49:09:05:e0:14:33:
                    22:80:7f:92:8c:c5:3f:90:2c:ba:38:5a:94:fa:32:
                    3e:7e:ee:08:3f:5c:0f:ac:21:69:68:4f:89:c4:bc:
                    c4:a3:62:0c:4f:c1:73:53:65:25:a0:d9:d7:0d:c6:
                    20:da:c3:41:0e:ab:58:b5:83:f7:44:62:47:73:d9:
                    82:24:23:9c:b6:40:a1:ba:12:6c:9d:39:ea:58:c2:
                    98:a4:dc:f1:19:7e:a9:81:f3:39:e6:df:26:5e:1b:
                    cd:99:1a:7f:3e:b8:f3:4d:e6:4d:e0:5a:ca:42:d9:
                    f7:46:bc:56:cf:8d:d7:d1:de:e6:b8:67:c9:c4:cd:
                    fa:5b:f5:26:94:e2:b8:bf:09:13:01:06:cb:ce:26:
                    d0:14:91:34:f5:1d:f6:e9:f3:67:19:c3:4b:fe:49:
                    7d:a2:f6:4f:e2:a6:25:d2:78:e4:d9:19:fb:e1:d6:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:F9:47:D9:24:21:56:EE:A7:E0:1A:31:33:FC:94:4B:4A:98:D5
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:90:66:52:12:c6:69:b0:a2:22:b2:ae:80:20:94:3a:8b:b8:
         3e:d8:8d:bc:f6:d0:d8:c5:f5:37:e7:9e:5c:5c:df:39:66:b5:
         bf:bd:ce:cc:0d:6b:1d:70:25:9d:f7:fd:ce:60:52:fe:90:8a:
         b4:94:55:65:57:99:cd:26:76:ba:13:2d:c2:98:54:97:50:78:
         15:1d:98:fd:6a:d9:0d:d6:df:d4:b9:1c:c8:fa:7f:38:0b:b5:
         02:c7:ad:75:60:86:f8:65:a0:74:3d:8a:ee:5b:c3:2a:86:54:
         10:88:de:62:15:16:f1:88:b6:db:3c:91:02:33:54:e0:69:fd:
         40:29:91:7b:ce:00:6a:3f:57:03:40:f1:b5:2a:84:96:29:80:
         77:de:14:19:b1:39:10:c1:26:d9:64:cb:d2:31:67:34:3a:63:
         72:b8:b5:50:b7:95:fb:5f:fa:0b:18:b3:36:d4:78:f9:8e:fe:
         6e:17:54:e1:9a:b9:a5:fb:e2:4e:43:f8:73:98:a9:5d:1e:a9:
         18:16:f1:a8:0d:48:08:28:f3:a2:52:e2:ac:6a:c9:11:1c:68:
         c0:b4:7b:e8:13:74:cc:5e:06:93:79:da:2c:b6:fc:46:cc:6d:
         73:e1:3d:e7:1c:d7:71:35:e2:21:df:69:b0:b9:08:f3:c4:25:
         fd:66:56:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:34 2026 by rpki-client