Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json)
Hash identifier:          Wj183cBiFgJFMsy5BUwleA5Ix9SqtsxMb0weiP/u91E=
Subject key identifier:   10:08:23:66:A0:B9:48:21:F3:B0:E6:3E:B6:BF:48:ED:C5:0B:ED:D1
Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Certificate issuer:       /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
Certificate serial:       247B0CC821342F2A2BF7EFFE67644A9EE178980A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
Manifest number:          0254
Signing time:             Fri 17 Apr 2026 07:02:13 +0000
Manifest this update:     Fri 17 Apr 2026 06:57:13 +0000
Manifest next update:     Sat 18 Apr 2026 09:56:13 +0000
Files and hashes:         1: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: rsQUBglm5Im158o3osH6P4YpYc3T4yT1FCH0ZXLAoVI=)
                          2: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: QawziW7BRZxS3bCc4G2utog3YctmoyEiN7kAknKKgAo=)
                          3: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: i7qWGxCvReMf6vdtfyBKGIZrBhkQCOSHjGlClwR9kWM=)
                          4: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: UNBJL3+Jfrpnhgzu9LluGhpOeESNxwfl/1Sl45hvKUg=)
                          5: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: a/Hl9jHqewKCWWFvOBL4/y2rZPqfhUTgPXbJTB52Btk=)
                          6: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: TIub4xdGyGyEU+fYFbV2gNaut3WFiEWQLp2fNJxxZ9g=)
                          7: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: +OHGVxfll6PDrWTDf2Gp4G0P4gS8LCtnxz8WOOSrRnA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl
                          rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7b:0c:c8:21:34:2f:2a:2b:f7:ef:fe:67:64:4a:9e:e1:78:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Validity
            Not Before: Apr 17 06:57:13 2026 GMT
            Not After : Apr 18 09:56:13 2026 GMT
        Subject: CN=10082366A0B94821F3B0E63EB6BF48EDC50BEDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:e5:70:40:5a:f7:31:e4:a9:5e:66:ec:43:
                    e6:30:7c:4e:c5:0c:dc:92:f2:70:3a:84:b8:2a:8b:
                    63:76:d3:df:78:06:f4:c6:1f:88:af:d5:00:e7:81:
                    db:09:1c:8e:f5:85:40:ed:b2:18:17:ba:e4:09:bb:
                    a5:b5:97:9b:19:41:00:50:8f:cb:72:13:03:9b:11:
                    38:19:a5:40:b9:2b:b7:d4:63:a7:9a:aa:84:ae:ed:
                    f0:12:81:9b:cb:f8:0c:a3:8d:91:c3:fe:e0:e6:36:
                    e0:dc:5f:48:65:4a:de:02:fb:ad:71:5d:ac:e2:fe:
                    10:1c:e0:46:59:be:41:e4:f2:7c:d5:36:e7:52:a6:
                    10:d4:e8:24:b4:ff:2e:29:40:ab:ee:20:23:ff:23:
                    14:96:c6:5f:b5:77:66:49:f9:b3:76:4b:57:3e:e6:
                    48:4e:e9:84:1e:a2:32:66:8c:b9:b9:87:3b:92:67:
                    aa:ce:d2:b2:d3:0d:cd:96:05:37:40:99:31:be:3e:
                    33:37:4e:dd:5a:73:9a:b1:1f:fa:37:a0:92:a5:a0:
                    ed:ae:b8:90:69:de:22:9f:9d:6b:68:92:1f:ef:75:
                    5a:be:53:af:c3:0e:ad:be:68:ed:4f:86:91:0f:73:
                    fa:2a:36:ac:49:6d:9f:ff:dc:5c:74:3d:0c:4f:0a:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:23:66:A0:B9:48:21:F3:B0:E6:3E:B6:BF:48:ED:C5:0B:ED:D1
            X509v3 Authority Key Identifier:
                keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:ce:0d:03:64:93:d2:70:4a:c3:69:67:70:b7:79:be:c9:
         52:83:2d:40:9f:f3:4f:1b:d7:b9:d2:c1:ea:de:c9:12:9b:3d:
         39:65:bd:8b:99:20:d1:73:62:ba:c5:ba:e4:63:b8:7b:7c:b3:
         d2:47:58:74:27:7d:0a:8b:50:66:25:d2:63:9f:2a:35:05:d3:
         20:b1:94:36:0c:75:2d:f9:a7:b5:c9:c7:c4:6a:93:01:34:2e:
         55:92:21:df:f0:1f:1e:64:b0:d8:c0:d5:b6:cb:11:be:13:e9:
         75:71:6e:7a:d1:78:33:21:d0:82:6f:5e:4a:90:56:05:d8:2b:
         50:2e:69:8e:5b:12:75:9a:74:75:6d:d9:1d:2c:bf:6a:25:1d:
         66:bb:ff:4b:86:40:2c:ae:f5:6f:27:5f:e2:61:90:1f:5d:ee:
         91:b0:aa:54:ff:3f:04:23:a1:84:53:97:d7:d3:ca:48:24:9d:
         2c:96:c7:d9:8d:f2:e3:a9:8e:c7:ad:a0:19:a2:d2:90:33:a0:
         1c:0c:a7:34:41:e7:22:61:f3:5a:1b:b5:a0:21:86:4e:c5:f9:
         e4:e0:7f:d4:df:1f:66:1f:51:da:24:7d:81:f3:b3:80:9c:8e:
         cb:b7:c6:5e:e4:43:b6:13:f5:8f:bf:26:68:a4:b7:37:39:c6:
         fe:a0:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:18:12 2026 by rpki-client