Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
File:                     0F9708322570D07CA4BE75EF484B6831664FE864.mft (raw, json)
Hash identifier:          AIguUps6IcO4kXoXSovDEP1yupHkSqANH3rYFn3KIAc=
Subject key identifier:   4C:EF:BD:EF:44:60:1D:74:F8:65:7A:4C:2B:EE:75:D2:86:83:22:CC
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       5C8CDB5079B8706DB06916CF18AA026D8EF0B30C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
Manifest number:          03E8
Signing time:             Fri 17 Apr 2026 09:02:46 +0000
Manifest this update:     Fri 17 Apr 2026 08:57:46 +0000
Manifest next update:     Sat 18 Apr 2026 10:47:46 +0000
Files and hashes:         1: 3137302e38302e34382e302f32342d3234203d3e20323636333734.roa (hash: N0g+TEuM83+qVx1uu9QMFdeIJuGRRXI3j0hxusJKQE4=)
                          2: 3137302e38302e35312e302f32342d3234203d3e20323636333734.roa (hash: uCysVc1lML4BWmXNx9y7wZX5lR9FYwcoZzAp2MF74/A=)
                          3: 0F9708322570D07CA4BE75EF484B6831664FE864.crl (hash: R9bLz6PGxDQirJYy/t1ih0KxaJe0X0Xcn0SG05ZF9/I=)
                          4: 3137302e38302e35302e302f32342d3234203d3e20323636333734.roa (hash: 4SHb55z5RYKv3b9zt/DL+Avw47KfCE3hmg+wVfBxb2Q=)
                          5: 3137302e38302e34382e302f32332d3233203d3e20323636333734.roa (hash: ZUwx8FJujJamKmHrEmLckHKXG3XsHvWKylvM3U8gyOY=)
                          6: 3137302e38302e34392e302f32342d3234203d3e20323636333734.roa (hash: EhX66VpZbnhVDScH0Qoez565ystRem3Vy8v1TXBg9Yk=)
                          7: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (hash: ILfaXmA8alvc6XtKl3oju+kl7De/K6TG8womMAt8/50=)
                          8: 323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (hash: vJSi+CLu+OHU9HXYLFKzd0mrGSQkqtG0UHjrkyoN9aA=)
                          9: 3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (hash: MeparfLp7Iz8B/Z72Qoqi/a4d3zvPz6n8crVlI+FX5U=)
                          10: 323830343a333664303a383030303a3a2f33332d3333203d3e20323636333734.roa (hash: iMih0NQjcACqcLmt+w0oTkgLMDObLAxqaD77FHVDdTE=)
                          11: 3137302e38302e35302e302f32332d3233203d3e20323636333734.roa (hash: /NgZQYnTS9w42llOLCP0aJZFd5VrOsWONzzDN/cH+c4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 10:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8c:db:50:79:b8:70:6d:b0:69:16:cf:18:aa:02:6d:8e:f0:b3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr 17 08:57:46 2026 GMT
            Not After : Apr 18 10:47:46 2026 GMT
        Subject: CN=4CEFBDEF44601D74F8657A4C2BEE75D2868322CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:51:a0:5a:f6:5e:56:f6:fb:d8:3d:10:dc:
                    da:c3:e6:32:8b:1d:24:c7:43:57:c9:49:f8:50:4f:
                    d6:26:09:a2:bf:91:41:6f:b8:58:3b:dc:dc:1f:30:
                    71:a8:9f:9f:52:66:34:cd:f4:39:05:f3:15:67:92:
                    3b:61:d7:9f:2e:f0:1f:47:d7:31:d9:eb:f7:62:ea:
                    3a:c7:6a:43:c5:d7:34:7c:4e:c9:59:db:0b:16:30:
                    85:00:41:09:cd:72:47:13:f8:d7:ae:0c:6d:4a:f3:
                    2f:fa:08:0c:e4:31:21:e1:4d:cf:40:1f:04:03:ac:
                    77:08:d6:8c:b3:9d:4d:a3:76:d3:cf:a6:6f:a5:de:
                    a9:91:6e:56:32:c5:bb:cc:4b:86:42:c9:3a:48:e1:
                    9c:fd:5b:bd:c4:88:e8:6e:d8:21:bd:fa:c1:9b:fa:
                    63:52:b3:ce:b9:92:0f:1d:11:f3:9f:d0:f3:f8:94:
                    00:54:d8:7b:35:e4:27:85:c3:ba:a0:44:d7:dd:1f:
                    66:c8:1a:97:27:fc:c5:d6:f1:f3:85:09:cb:6d:35:
                    02:56:08:df:df:9d:e4:a2:c5:99:71:c0:4c:c7:2b:
                    3d:3c:73:5b:53:8e:31:6c:a3:af:ea:3f:5f:a5:68:
                    fd:80:db:c2:4d:00:e9:29:bc:db:b4:d2:17:c8:03:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EF:BD:EF:44:60:1D:74:F8:65:7A:4C:2B:EE:75:D2:86:83:22:CC
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:07:c9:3e:85:31:05:a6:fa:96:8f:6d:87:0c:2a:43:b1:8e:
         8c:0a:0b:1a:46:3f:94:0b:d0:be:e7:99:0b:47:9c:a8:9d:0e:
         28:49:d1:25:51:6c:d1:0e:8e:09:8b:73:56:50:a5:5d:76:96:
         00:12:48:87:d4:c5:b6:9a:c8:ca:21:50:ce:08:75:e3:3d:a8:
         6c:aa:4c:0c:13:11:ed:37:94:04:16:76:3c:d0:5e:61:ad:95:
         88:37:33:45:89:1e:da:f0:e7:71:c6:4d:5b:e0:45:e2:ab:fc:
         5b:7e:e6:13:f6:3e:80:9d:7e:b2:20:81:f0:5f:50:94:ce:80:
         7f:1a:6d:c0:60:8d:da:54:ef:82:df:0d:bf:ed:69:ea:00:21:
         3b:96:04:84:60:d4:27:84:3c:4d:5c:b8:d6:3d:33:16:65:26:
         45:31:18:26:5f:b2:ce:8f:29:13:3a:94:d0:a8:51:df:b9:16:
         65:b7:88:51:65:ac:f9:c0:a5:38:b5:ad:3e:21:d5:e6:c8:e1:
         20:7a:de:97:c9:5e:4e:e5:52:af:aa:2d:93:b0:c5:a1:28:e7:
         af:d2:90:76:b9:54:01:e9:f5:48:99:37:e9:8c:de:d2:84:c4:
         20:e6:1c:c0:97:88:2e:f2:ed:bd:f0:54:ff:5c:81:b1:ec:a0:
         4e:2d:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:45 2026 by rpki-client