Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
File:                     72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft (raw, json)
Hash identifier:          Qrys1GsdcHhJsX+qSpxFqlvJhtsfEC5iFANS0GZpupM=
Subject key identifier:   D1:52:B8:D3:54:3F:98:F0:C3:04:BD:AD:26:38:45:54:75:EB:E3:00
Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A
Certificate issuer:       /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
Certificate serial:       3E39700DE3E0BEC61D64244091E8A818B42BA189
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
Manifest number:          0228
Signing time:             Mon 02 Mar 2026 03:14:08 +0000
Manifest this update:     Mon 02 Mar 2026 03:09:08 +0000
Manifest next update:     Tue 03 Mar 2026 03:40:08 +0000
Files and hashes:         1: 323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (hash: H7CJpmPO9KYi+Vq6jKCbyTcdFDbnUWEpudbgUvYtP1Q=)
                          2: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl (hash: xqLMxfOU+MBINJiqm5iyaoZcbXQ5idUlu84RGAQr7to=)
                          3: 34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (hash: /PhRabyzTpLl9Iw9YQ2c6JL/HrTR4sj8vatQDMBiKxA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl
                          rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:39:70:0d:e3:e0:be:c6:1d:64:24:40:91:e8:a8:18:b4:2b:a1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A
        Validity
            Not Before: Mar  2 03:09:08 2026 GMT
            Not After : Mar  3 03:40:08 2026 GMT
        Subject: CN=D152B8D3543F98F0C304BDAD2638455475EBE300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:f4:50:84:91:e7:69:a5:93:91:90:4f:02:
                    f4:0f:f2:55:6d:d0:44:98:0f:97:0b:22:74:76:26:
                    56:74:cc:eb:40:03:5b:52:9b:3e:4b:7a:02:c7:a3:
                    75:03:90:0a:fb:00:e7:38:80:2a:57:13:62:05:eb:
                    76:a6:94:4f:33:7b:7f:74:d5:ef:e7:2f:64:0f:7e:
                    61:9d:5d:97:fa:19:54:3d:11:06:3a:b0:22:96:af:
                    32:c3:5a:2d:46:c3:a0:69:fd:d6:bf:0e:4c:f1:ae:
                    45:f2:01:a7:b8:31:f2:cb:3d:9b:c9:a8:73:5a:78:
                    9f:31:5d:73:03:52:ac:d1:78:00:b4:47:15:c2:bc:
                    f4:a9:3a:0a:70:6d:d3:c7:60:21:47:6b:c3:24:4e:
                    4a:e9:89:ba:e4:7e:8d:18:70:36:f3:cf:e5:a0:d7:
                    05:d8:53:c2:48:a4:3b:fb:a8:ce:52:1f:9a:85:0d:
                    0f:8d:db:e4:32:3e:1d:9b:67:32:d7:64:79:d0:26:
                    f2:0c:6a:f3:6a:49:1e:8e:30:a3:9c:0a:2e:3f:f8:
                    d0:11:6a:57:73:fc:fb:dd:79:12:15:2a:e2:22:8e:
                    e6:df:76:28:bc:fa:cc:a1:69:a9:ab:e9:d7:9b:cb:
                    b5:f7:76:d3:32:16:eb:1c:9d:e7:5e:d5:f4:ce:b2:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:B8:D3:54:3F:98:F0:C3:04:BD:AD:26:38:45:54:75:EB:E3:00
            X509v3 Authority Key Identifier:
                keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:41:c3:6a:26:5f:40:b2:d9:33:85:d3:5a:f4:c0:01:4e:dc:
         e1:44:c4:ed:46:73:78:86:2f:e4:87:e4:9a:7b:a8:70:3d:b8:
         d3:12:bc:bc:bb:89:bb:83:26:73:49:d4:6c:c4:44:6e:85:11:
         10:49:d4:73:98:e2:ff:01:35:66:10:35:10:4f:fa:bc:3a:da:
         12:f9:06:b9:9e:f7:46:fd:7e:13:09:50:95:86:5f:70:e7:da:
         57:0a:0b:69:c8:76:f7:18:41:6d:c3:8a:8b:fc:0e:2c:8a:e4:
         ca:59:8c:dc:e0:52:25:b2:cc:4b:e8:2b:e4:eb:9a:5a:b1:53:
         fe:f7:04:a7:66:dd:22:9b:ab:e4:33:48:73:40:f7:fd:f8:e2:
         62:8c:f6:c6:e2:1e:e1:6f:98:dc:be:11:18:e6:fd:c7:16:f8:
         6d:59:b3:14:c5:11:ca:7b:16:31:d1:0e:6d:fd:fb:9d:f0:13:
         f8:1e:fe:11:27:98:fb:07:4c:32:83:22:52:3b:e4:59:a5:1e:
         d9:ad:ef:9f:8d:69:98:4d:8a:7a:66:08:51:d6:5c:d3:ac:d3:
         7e:60:e9:e7:bf:0e:4c:77:02:ac:a4:97:68:ce:ed:3b:48:e7:
         e3:1e:32:f7:65:dc:8a:55:74:63:b2:6c:a7:a0:85:d3:c3:77:
         28:f6:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:43:59 2026 by rpki-client