Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
File:                     D23AEA3BF9686D794967BECAC226FA9648876870.mft (raw, json)
Hash identifier:          sQUzV+bNxiJ4enPqfE6PBYO7oRWbeLp29M9RYn9xQmE=
Subject key identifier:   EC:2E:D6:90:79:EB:C1:81:16:68:6D:F0:87:DE:67:E5:F8:8A:15:8D
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       01416F4F95474E26277FEF3457B8D6D1BDDBEB97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
Manifest number:          03DB
Signing time:             Fri 17 Apr 2026 21:21:53 +0000
Manifest this update:     Fri 17 Apr 2026 21:16:53 +0000
Manifest next update:     Sun 19 Apr 2026 00:07:53 +0000
Files and hashes:         1: 3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (hash: 630qGb/qKM6aR4RZLI2lF3ZsF3e21AnlAYsYtLlaKR8=)
                          2: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (hash: 286nResr34vPpJz3GdCysSRAVtHSiIQe8HB8mmq8SZE=)
                          3: D23AEA3BF9686D794967BECAC226FA9648876870.crl (hash: QNz6886DP9B3v020R1UGWmEVYOMHKHtKn5HXk59yClk=)
                          4: 323830343a366266383a3a2f33322d3332203d3e20323730343337.roa (hash: vDmb8bGeihNcUeqnpEi/8QBQiXA7Ht5nkCPhwba9voY=)
                          5: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (hash: 4oqoiChL4nmLfFO3gaGYY3Po4I/eSRfxhZTBVVILkJU=)
                          6: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (hash: 3Ysgbv3sXYO2uNETFIj1DPQBoHc1NXRQXooeOg3ObSA=)
                          7: 3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (hash: GsmznOt1M7ODrzmC1fDMjRR35anrkNpxu6ozpaiTGNQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:6f:4f:95:47:4e:26:27:7f:ef:34:57:b8:d6:d1:bd:db:eb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Apr 17 21:16:53 2026 GMT
            Not After : Apr 19 00:07:53 2026 GMT
        Subject: CN=EC2ED69079EBC18116686DF087DE67E5F88A158D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:a1:91:57:34:91:3e:8e:fa:79:6d:98:68:
                    82:c9:8b:57:ff:2a:aa:c0:e3:f1:87:93:41:35:dd:
                    ff:28:c4:88:c4:b7:67:21:6e:5e:d7:fb:c8:f4:f2:
                    e4:52:32:68:6b:f4:80:7b:26:8a:6e:78:e3:bf:51:
                    38:84:46:0d:b0:46:bc:cd:6b:1e:b8:93:06:9b:8e:
                    b7:53:57:bd:3f:da:df:99:02:a9:01:62:90:f2:b8:
                    30:d0:87:85:c1:46:33:f9:27:80:12:77:5b:7e:ec:
                    12:11:00:97:87:8a:58:d1:63:9e:a9:1e:a8:08:b6:
                    92:01:5f:92:e7:fe:fd:fa:78:b7:6e:2a:a8:8a:e2:
                    2b:44:e3:67:b1:4a:aa:c4:56:9b:0f:32:eb:7f:ff:
                    c9:7f:74:4d:a3:08:d1:fb:16:a5:dd:69:71:c5:bc:
                    41:be:30:59:64:7a:2e:8f:33:d0:1e:f8:0d:87:50:
                    f2:5f:78:89:1f:45:be:e6:b6:ec:7b:0b:1d:b1:2b:
                    88:c0:d1:51:b0:55:e6:21:e0:c4:56:cf:c8:30:94:
                    2e:22:82:a0:43:75:38:27:ac:9b:6a:7c:7d:a3:02:
                    fc:b8:f3:06:f7:53:bf:b0:bf:f1:2b:18:03:5e:4a:
                    b1:75:dc:53:a6:07:cf:fe:72:06:84:77:48:8f:0a:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2E:D6:90:79:EB:C1:81:16:68:6D:F0:87:DE:67:E5:F8:8A:15:8D
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:bd:38:8e:82:d2:63:0b:89:ca:15:c9:8a:f1:c8:d0:cd:47:
         25:1a:18:fa:10:a4:ac:00:85:b4:42:ac:72:47:49:0d:5d:1c:
         c1:c1:83:f8:eb:e7:26:75:4d:bc:ac:bd:c9:ba:1e:30:10:85:
         c9:c3:e0:d1:9b:09:10:3c:f5:e9:27:45:40:11:f8:30:91:af:
         75:93:98:ea:4d:25:69:fb:54:8b:9c:94:ac:1f:ad:22:d3:25:
         bd:ae:51:8a:54:8b:12:73:34:4c:ec:ad:1f:24:47:7d:69:a4:
         5e:0a:e6:bb:4d:3d:bc:99:1d:e5:2a:68:f5:06:7d:ba:48:a8:
         87:60:96:5d:40:5c:ac:39:a1:6b:54:42:0c:35:bf:8c:32:d0:
         1a:10:ce:c4:c1:bb:d9:16:a4:83:ac:cb:01:39:17:58:4f:5b:
         49:f0:d6:8a:69:c8:01:2f:5a:72:61:e2:49:9b:8a:d3:d1:65:
         53:df:dc:b3:2d:62:55:20:d0:2d:42:62:22:4b:8a:3a:a0:ff:
         86:a0:7d:af:dc:03:40:6a:b1:34:76:68:13:57:7a:d1:2a:54:
         68:34:e0:04:47:d4:61:fe:72:aa:37:ad:08:07:0b:f7:51:f4:
         d4:65:ef:46:d1:1d:7b:c9:89:b5:a9:76:b7:14:03:4e:c1:4a:
         47:66:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:29:00 2026 by rpki-client