Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
File:                     9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json)
Hash identifier:          G907icEedlXqdNH0jJ9udKZDHyqvhAr02C55uJfjgQ4=
Subject key identifier:   13:DF:DE:3A:84:12:80:C1:80:1A:2D:0E:94:54:6D:FF:08:A3:E4:C9
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       8A93B01CB9A79C5DB3271F38AED0A86218B966
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
Manifest number:          039E
Signing time:             Mon 02 Mar 2026 11:16:31 +0000
Manifest this update:     Mon 02 Mar 2026 11:11:31 +0000
Manifest next update:     Tue 03 Mar 2026 13:52:31 +0000
Files and hashes:         1: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: pIf1r0PU3hPVhAM77hExGbyirK3tKC7Mxa4FtN68Qzs=)
                          2: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: Pz27QZt55pd0SdTDIoCrpFJtLUgybftbNlHNydEOI1s=)
                          3: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: 9YEEiWcHWzoyxt4jbdxioxGIv2UrBnPqX79kFaanVTg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8a:93:b0:1c:b9:a7:9c:5d:b3:27:1f:38:ae:d0:a8:62:18:b9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Mar  2 11:11:31 2026 GMT
            Not After : Mar  3 13:52:31 2026 GMT
        Subject: CN=13DFDE3A841280C1801A2D0E94546DFF08A3E4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:05:6e:6d:25:91:a4:55:d7:e8:22:c8:f5:
                    69:d6:f6:e0:dd:d9:ec:f0:9e:95:d3:73:ad:91:01:
                    a1:37:95:18:4c:bf:fb:60:8f:04:2a:e4:d0:43:82:
                    87:b9:a8:e0:23:10:83:7a:1b:16:c1:4e:a7:3e:54:
                    4c:28:42:e7:91:09:5f:65:d8:d0:a1:77:dc:15:97:
                    df:5e:2e:eb:94:40:1e:05:73:06:9c:d0:96:45:b7:
                    06:99:73:bb:aa:f2:d9:2c:05:12:44:92:f7:da:7d:
                    9f:ff:a0:5f:a3:74:b2:cc:e6:98:29:d5:4b:24:91:
                    89:2f:8f:1e:2e:96:23:d4:24:c0:25:e3:5c:78:6b:
                    ec:f4:41:e9:12:3b:c7:10:44:52:0e:79:b6:24:de:
                    05:dc:65:b4:8e:32:e4:15:43:6c:05:e5:10:83:45:
                    0a:45:ea:a2:ed:63:42:0b:29:5f:d5:fb:83:7b:c7:
                    5b:3f:cd:af:80:b0:59:0b:e9:d9:d5:71:69:88:c5:
                    6e:78:3a:ee:65:32:a3:d3:ba:f9:fc:1e:bb:28:f9:
                    04:3d:38:3f:07:1b:b1:81:e3:4b:f4:51:eb:c6:d9:
                    0a:4e:63:78:2b:ae:2f:4d:77:77:36:72:9e:af:8e:
                    58:68:a6:e6:01:c9:3e:f4:2b:96:56:e7:db:d1:f7:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DF:DE:3A:84:12:80:C1:80:1A:2D:0E:94:54:6D:FF:08:A3:E4:C9
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:42:98:ea:c2:56:ea:b3:ec:74:3a:88:e4:f4:75:8b:a8:
         d0:58:80:c9:5e:f0:d8:9e:f3:b6:69:f3:db:17:50:9a:27:02:
         93:1b:b6:b8:7d:f2:ec:1a:68:26:ff:1d:09:18:bf:37:a8:87:
         b7:93:95:e8:d7:68:b1:cd:aa:22:45:c3:61:a0:f9:58:82:66:
         7e:5f:21:1b:d0:28:49:41:4e:e9:02:c3:75:98:42:6d:d4:96:
         35:27:43:ad:67:3a:58:7d:6e:04:14:a7:0b:d2:7c:90:b6:e6:
         cb:1c:47:b8:e6:ef:39:9d:e3:40:ee:47:44:04:df:2b:51:85:
         b0:54:f0:df:13:40:19:cd:c1:fb:13:ad:0c:0d:e7:5a:c4:73:
         28:cb:10:e6:6e:05:bf:d2:97:8f:2c:11:6d:f0:e7:0d:90:cf:
         38:49:51:6c:27:26:e5:50:01:81:df:ff:98:59:db:81:a4:c3:
         1d:85:e1:2e:81:72:04:b2:73:ae:d5:d8:91:46:2a:d9:a2:b9:
         7a:78:60:d0:f1:85:78:38:37:ef:3b:38:32:65:2a:e6:37:08:
         d0:39:d9:80:66:b6:59:31:bb:bc:b4:11:28:4f:fc:45:8b:ca:
         99:6b:a7:62:15:d3:c1:8e:c2:78:3e:a5:ea:f4:f5:26:00:38:
         6c:4f:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:14:57 2026 by rpki-client