Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          BhuAUyOEGtiZXNhYPbsbO2zQnc/q8J3IW0xlEfqgPHU=
Subject key identifier:   25:00:A2:4B:F8:E3:90:DA:39:D2:FA:1E:71:14:B7:9F:A0:9D:AF:4D
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       3F50FD5401348915D16E7FB18D3B6E3575A30E17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          036A
Signing time:             Sat 13 Jun 2026 23:28:58 +0000
Manifest this update:     Sat 13 Jun 2026 23:23:58 +0000
Manifest next update:     Sun 14 Jun 2026 23:57:58 +0000
Files and hashes:         1: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: 095KOiCgelfFAJaEWZp4FBq2DB3dXDZ9yQVjrdfn984=)
                          2: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: gSG2IH0mhehp6KRqkDAwBhoDX02TBWqyKucR8jhGqhM=)
                          3: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: NGfLBrJWM6vspLFy2we1F6wpAlgR+ccnUFgj9Ss+8Ns=)
                          4: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: baYSgeyu1Fh792QHXa/jVzjbIEks13VYEFPNKOFhRUw=)
                          5: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: 14FHE6zmhSnBphK8r9h/sTCvAXLmSQ2AOYVJqOdtMCU=)
                          6: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: s7QXeX2vq8O5spZaWQpOWd0FB4fwiDOt/mIE//O0u84=)
                          7: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: WIZeG9VXENqyRBdnsn2Zw89aWs+DTTdhSsrCc+RAnv4=)
                          8: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: ZxtUGA5deC/zbWluiWJ77qtyRWRAt7GQgEShJ9N2Y9Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:50:fd:54:01:34:89:15:d1:6e:7f:b1:8d:3b:6e:35:75:a3:0e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jun 13 23:23:58 2026 GMT
            Not After : Jun 14 23:57:58 2026 GMT
        Subject: CN=2500A24BF8E390DA39D2FA1E7114B79FA09DAF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:7f:73:d1:f3:26:80:fb:2d:8a:04:78:22:
                    fc:a3:f7:3c:36:df:37:f6:7e:db:07:08:75:bd:ce:
                    58:57:a0:a0:d0:49:a4:62:16:3c:7e:81:44:e4:b6:
                    ac:bc:d4:b0:93:48:3e:43:71:47:bd:24:cb:5d:c0:
                    a6:76:c0:6d:11:26:73:3d:c1:27:85:46:d3:01:50:
                    46:d1:f8:36:4f:31:10:09:a0:6c:cc:33:77:cf:de:
                    aa:fa:af:61:cb:ef:f0:05:83:ea:17:20:60:61:9e:
                    84:b2:85:05:49:62:df:90:28:39:23:2e:12:68:74:
                    19:ca:55:7c:94:09:d2:2d:59:6a:48:c0:c6:2f:13:
                    32:86:c1:3c:d7:9e:1b:32:47:28:3b:9b:d5:11:e1:
                    ed:d5:b3:d7:f6:00:32:cd:2e:8c:6f:5f:3b:ed:60:
                    52:73:cc:e9:65:aa:48:ad:d1:10:78:a6:ce:67:e1:
                    41:42:19:2c:07:e3:ed:d2:cf:78:a5:0f:d1:38:1b:
                    16:13:13:f1:d6:67:65:66:82:5c:6e:b7:f1:66:95:
                    b4:c5:2d:ce:c8:5a:54:77:2f:7d:e1:0f:73:be:7a:
                    2f:f2:04:a9:98:b5:cd:ac:1f:ab:d7:c2:d7:1b:77:
                    4d:eb:fc:8d:37:63:3c:08:ea:9e:ef:7b:af:59:b7:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:00:A2:4B:F8:E3:90:DA:39:D2:FA:1E:71:14:B7:9F:A0:9D:AF:4D
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:76:77:e5:a4:46:04:a2:29:ef:39:eb:ed:19:8a:7c:cf:
         e0:80:ab:13:2e:fe:11:22:43:87:14:70:97:80:28:d8:36:4c:
         82:ca:c3:65:84:dc:09:2b:d9:ca:aa:0a:f8:cf:41:a5:44:f3:
         ea:9a:bd:c8:fd:6d:f9:99:ca:e2:a3:0b:d9:bf:5d:aa:ec:97:
         1c:da:26:6a:5d:0a:95:96:69:31:39:da:3c:97:af:47:f1:71:
         d9:e9:fe:64:a9:96:48:d3:aa:49:4e:56:48:dc:fb:0a:cc:02:
         c7:31:0b:c8:49:4c:44:3b:f8:bd:23:05:07:4f:eb:2a:50:3d:
         d5:23:ac:03:e9:ee:d5:da:e9:c8:e9:46:76:b2:20:12:e9:90:
         78:c8:a5:05:66:07:70:3a:08:cd:84:12:78:5c:73:58:c1:01:
         a6:93:a7:a3:6c:b1:34:08:08:be:af:66:11:63:c6:2a:e8:c4:
         27:20:04:57:77:ea:a1:2a:97:1e:28:85:cf:b0:bc:a9:02:a6:
         da:4b:a1:04:34:23:b2:f6:7c:fe:51:83:20:47:99:50:88:f5:
         20:8d:42:8b:7b:a3:31:6b:cc:3b:e0:ba:43:cd:7d:d9:c9:0c:
         3c:3d:cc:6f:c8:ad:a2:eb:f1:bf:57:30:7c:cd:7c:43:63:b4:
         8b:a7:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:19:59 2026 by rpki-client