Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
File:                     C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft (raw, json)
Hash identifier:          RIBfPWZKT5ocN8kYwtfyAiCufeY2Pzff+0ZywO4KxSc=
Subject key identifier:   3F:B6:29:2A:5D:1F:D6:BB:4B:E5:38:26:6E:A9:A4:66:23:56:42:49
Authority key identifier: C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18
Certificate issuer:       /CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18
Certificate serial:       5343998FCA16EC63750B260795D53082D6D9613D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
Manifest number:          0132
Signing time:             Sat 13 Jun 2026 16:42:27 +0000
Manifest this update:     Sat 13 Jun 2026 16:37:27 +0000
Manifest next update:     Sun 14 Jun 2026 18:59:27 +0000
Files and hashes:         1: C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl (hash: HuikxZtXrDQLg9s1S0K3YgwgZ1YRICxBdgXSZyYNjHI=)
                          2: 323830343a386161633a3a2f33322d3438203d3e20323733363835.roa (hash: r9BKYATaL7zpuCLfHYLC8h82pNv7+c+XuB+/9Zzo3Wo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl
                          rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:43:99:8f:ca:16:ec:63:75:0b:26:07:95:d5:30:82:d6:d9:61:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18
        Validity
            Not Before: Jun 13 16:37:27 2026 GMT
            Not After : Jun 14 18:59:27 2026 GMT
        Subject: CN=3FB6292A5D1FD6BB4BE538266EA9A46623564249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:8b:e2:77:b2:e6:78:e3:56:74:b8:18:55:
                    9f:f1:9f:4a:ee:b0:b4:fb:fc:36:ca:d7:3f:61:5b:
                    c6:cb:d2:b8:d6:08:9b:19:49:90:16:68:a2:52:f1:
                    fd:b7:cf:92:58:88:84:2a:47:26:59:d4:88:bd:b4:
                    1b:24:d3:e9:3e:cc:7a:8c:c6:5d:d1:3f:b5:1c:0b:
                    90:96:20:82:49:e6:e8:61:5d:f4:97:c7:3e:8f:6e:
                    a2:67:f2:f8:88:e3:9c:7b:b9:51:80:3c:52:0c:93:
                    d1:a2:2f:a7:ac:6f:9d:13:be:9d:41:d1:09:46:bb:
                    31:8c:63:49:4c:99:19:f7:a1:3f:9e:50:77:8b:ac:
                    03:3e:89:0e:fe:c7:54:25:6d:7c:26:08:6d:fb:e2:
                    e8:28:41:73:b3:55:09:9a:2c:c0:9d:82:19:91:aa:
                    be:7b:1c:72:5e:05:b3:94:3b:c7:4e:21:1d:04:36:
                    e3:09:1a:2b:6e:47:f4:81:8d:4b:38:98:4a:52:d1:
                    1d:ce:e5:31:ae:3f:ea:d4:5b:5d:26:7e:eb:6e:9e:
                    fa:9b:a8:5a:a1:a2:c4:68:42:4e:2b:36:95:65:b5:
                    a3:ef:c1:bf:ca:65:3d:9a:32:f3:1e:15:b7:9d:b0:
                    3b:0b:24:94:60:ae:a9:00:34:f5:95:31:fb:dc:ff:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B6:29:2A:5D:1F:D6:BB:4B:E5:38:26:6E:A9:A4:66:23:56:42:49
            X509v3 Authority Key Identifier:
                keyid:C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:14:02:ff:04:4a:46:90:48:57:54:6c:50:63:a8:22:09:09:
         7c:b5:cd:8e:15:86:a4:f2:2a:ed:15:83:f7:23:9f:55:ae:89:
         42:98:fc:1b:90:3a:4e:63:05:d9:50:6e:ea:47:2d:78:c8:a7:
         5c:cf:bd:4b:27:10:5e:0c:7f:3d:58:5e:2e:63:94:6b:6c:88:
         f9:74:26:e7:36:f5:9e:2a:0a:0b:35:98:54:53:80:7c:66:d8:
         4b:9b:c6:31:d3:ef:9c:a1:4b:54:88:6b:5f:3c:ca:8c:60:32:
         11:b7:f5:2b:2b:39:56:1c:c1:00:93:52:92:7e:da:09:06:39:
         3e:a4:d3:83:8b:f2:d6:f3:0d:2d:fb:ae:17:07:2d:74:d2:de:
         70:40:d4:14:76:9b:53:53:65:88:c9:10:90:5f:a5:b0:35:a5:
         d0:1b:f3:e9:84:21:6f:8a:0e:c6:98:d2:b1:dd:db:fd:d3:15:
         87:8b:47:66:3e:1c:56:eb:af:16:0c:a2:6f:3b:e9:06:2e:00:
         7e:1a:e5:2d:2d:52:4f:0f:39:19:27:14:8d:7b:79:49:b2:19:
         a4:37:6d:a5:71:c2:75:41:54:b5:f8:0c:e7:a5:a3:3e:97:c7:
         fb:42:c9:f6:84:2a:ca:10:03:75:92:53:8c:15:97:ae:2f:e6:
         74:3c:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:12:16 2026 by rpki-client