Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
File:                     DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft (raw, json)
Hash identifier:          mHeT/34jtAjJgoL01F8WKjh61p0ZY+I2Umiiozzyb2s=
Subject key identifier:   1C:DA:B6:2E:77:F2:AE:16:E3:E3:FF:D7:B4:31:34:35:D5:84:1A:EF
Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
Certificate issuer:       /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Certificate serial:       1F538829AA67940E62C74FC63ADEF0AB2615C66D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
Manifest number:          D0
Signing time:             Mon 02 Mar 2026 10:41:57 +0000
Manifest this update:     Mon 02 Mar 2026 10:36:57 +0000
Manifest next update:     Tue 03 Mar 2026 12:23:57 +0000
Files and hashes:         1: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: ntZ1ArAYp3sb9ElbA2pbCEeKkjRFsWYf3g7xNVHvk/0=)
                          2: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: afCsZwiPB5N2fDqRaLCKFhpsL0Zx4SiwNNU+IFHfbU8=)
                          3: DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl (hash: YMVibd++1szH97zhrT3mU/Eip3GYWGgSzt/SRCLB7sw=)
                          4: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: rtgPsjEvrft8zzHlyyMigdsHOXzeRbr5m37PyhBdAbE=)
                          5: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: 78gnsip7r3qOi/EZ5Pk33H7zC5HcnHgzJbHz8JD3Mxs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:88:29:aa:67:94:0e:62:c7:4f:c6:3a:de:f0:ab:26:15:c6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
        Validity
            Not Before: Mar  2 10:36:57 2026 GMT
            Not After : Mar  3 12:23:57 2026 GMT
        Subject: CN=1CDAB62E77F2AE16E3E3FFD7B4313435D5841AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:25:81:59:8a:12:fc:76:94:37:80:aa:be:3d:
                    cc:68:71:76:41:0e:89:62:b7:50:20:35:b2:3b:68:
                    22:23:a4:ff:52:2e:d3:d9:2d:d1:db:a1:de:c0:5c:
                    70:5e:c0:75:64:ed:5c:55:b3:46:a6:77:35:9c:0c:
                    68:f4:2c:46:77:57:f3:e9:7c:3c:f1:e0:40:25:70:
                    9a:07:35:2b:20:2e:e0:22:af:3b:30:22:75:26:18:
                    53:15:f4:dd:2f:75:91:be:00:a9:39:b5:08:e1:64:
                    5c:16:24:2b:83:67:b2:c6:2e:d0:4f:3a:fc:8a:75:
                    77:9c:19:0b:94:c3:0b:9d:f6:dc:60:61:05:c2:f3:
                    e5:e3:13:2b:5c:83:74:a3:63:8b:a0:7a:ac:91:5c:
                    8c:79:39:82:c0:62:de:ef:26:94:24:c4:a2:e9:f5:
                    ff:36:98:6e:45:47:4a:07:46:25:a8:b3:18:03:93:
                    de:e3:99:f3:77:55:3c:06:01:97:5e:6c:da:6d:74:
                    36:ea:dd:06:2d:87:57:c5:f6:ee:a8:a8:3d:ca:70:
                    67:53:24:9e:96:4c:06:f1:f9:4a:15:a4:dc:90:33:
                    ff:87:07:19:80:04:23:f4:55:66:0d:89:e9:57:2c:
                    0e:05:85:75:bb:95:32:1a:c4:03:0b:44:7f:92:ed:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:B6:2E:77:F2:AE:16:E3:E3:FF:D7:B4:31:34:35:D5:84:1A:EF
            X509v3 Authority Key Identifier:
                keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:a7:35:b9:f0:a7:82:f2:9e:be:64:28:c2:b6:d9:e5:7c:
         ba:39:e2:6a:18:c7:0e:5e:d3:1b:32:09:83:20:ff:2d:c7:2f:
         9c:fd:c4:71:3d:5d:37:17:0c:a6:51:c5:fa:a4:1b:4e:2e:ee:
         0c:4c:a0:24:23:93:1e:89:63:3e:ae:2f:b8:cd:0b:2d:3c:9b:
         d0:ec:05:96:e5:69:ba:e1:f6:2f:e7:9d:cb:9f:14:9f:c9:38:
         77:39:f9:b9:3e:b8:2e:35:50:69:84:43:be:6c:c3:15:23:aa:
         a4:82:23:ad:01:30:57:1a:83:bc:c6:f1:55:2d:52:aa:81:7c:
         89:b0:73:fc:96:48:97:ee:3d:07:05:20:88:b4:3d:e3:de:9e:
         64:62:83:01:02:4d:ea:35:56:be:cf:0f:a8:98:10:31:f7:cb:
         18:bf:d8:b9:aa:27:6a:0e:60:3d:4e:68:bf:e3:d7:41:8f:6b:
         99:ba:f6:5e:1d:9d:e9:93:0b:8c:e1:18:1b:fa:16:cc:b1:6b:
         bc:e3:ee:52:f7:89:ae:d8:04:cc:40:ab:91:cf:87:33:5a:07:
         78:6a:93:d3:fe:10:cf:88:e6:97:20:b6:6b:e3:4a:e3:06:a7:
         9d:bc:68:4e:2a:82:aa:0e:fa:0a:f9:72:ff:45:e1:34:6b:04:
         78:80:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:19 2026 by rpki-client