Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
File:                     DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json)
Hash identifier:          7hLNmZpZbgwG9IiaWLcfnAPtfUYIVv/m8IzXZG0kgmQ=
Subject key identifier:   DD:D9:EA:D2:DB:79:FE:A5:13:1D:E7:00:43:8D:CD:A2:3B:BF:E5:71
Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3
Certificate issuer:       /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
Certificate serial:       584644EC6225E9E5B9303304EC3ADBE6ED7957B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
Manifest number:          039F
Signing time:             Mon 02 Mar 2026 09:27:03 +0000
Manifest this update:     Mon 02 Mar 2026 09:22:03 +0000
Manifest next update:     Tue 03 Mar 2026 09:56:03 +0000
Files and hashes:         1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: c7GGQKi6ec2DB29yrMDCE13X+Wm8vYKolg76A+4gtHA=)
                          2: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: PYfMglksFxC5v+xgeAyjBUbMpusTFmLcGTEjqubwJ10=)
                          3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: P0NH3rnn8o4jwzwjk+SixmLvea8Ha66XoUWGllFpUhU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl
                          rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:46:44:ec:62:25:e9:e5:b9:30:33:04:ec:3a:db:e6:ed:79:57:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3
        Validity
            Not Before: Mar  2 09:22:03 2026 GMT
            Not After : Mar  3 09:56:03 2026 GMT
        Subject: CN=DDD9EAD2DB79FEA5131DE700438DCDA23BBFE571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:fb:f7:55:48:94:e0:01:ea:0f:c6:03:1d:
                    1e:65:74:5a:1b:97:4c:b8:df:75:5e:83:d8:d9:df:
                    2d:2c:72:f7:5a:00:ed:a1:21:dd:e8:10:9d:4a:9e:
                    9d:55:c4:f7:44:ed:21:3f:19:1d:9c:99:4e:c9:f6:
                    c3:d1:27:56:17:c9:62:0c:a8:84:d1:ce:0a:e5:f4:
                    e0:b8:a2:2a:1b:84:45:cc:93:65:02:d1:fc:35:9e:
                    0f:0a:d6:a4:a7:cb:be:4e:37:29:a0:4e:05:d6:99:
                    8c:31:cf:eb:b1:a7:81:4e:7b:57:45:b1:c6:c2:0b:
                    5d:d1:7a:36:bf:89:db:e2:86:0c:9d:82:36:e5:9f:
                    89:83:ea:f3:87:5b:67:cf:37:52:8c:f6:e1:7d:3b:
                    15:61:12:63:69:2e:5c:41:a4:a4:f1:7e:22:0d:c4:
                    97:dc:05:36:45:66:47:3d:d5:21:2f:d4:2f:7b:02:
                    bf:6b:eb:91:5d:b2:3c:c8:b1:08:47:29:0a:a0:6e:
                    90:b1:e5:4b:d9:cc:da:08:15:90:ea:04:cd:a7:08:
                    a7:5d:43:e9:a5:7d:6f:14:38:03:6e:d7:b3:3c:dd:
                    18:b6:aa:14:10:9d:7e:42:8b:bf:4d:a7:65:d9:4a:
                    8d:bf:24:7b:18:8e:50:a8:ac:f2:6c:0c:04:d6:ba:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:EA:D2:DB:79:FE:A5:13:1D:E7:00:43:8D:CD:A2:3B:BF:E5:71
            X509v3 Authority Key Identifier:
                keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:5f:15:8c:74:4d:81:f6:3d:0f:84:10:2e:58:d0:11:0a:
         0e:bb:d0:c9:25:8f:16:f3:da:b2:94:ed:fb:3b:c2:b1:cb:4e:
         d7:0d:28:97:f7:50:a5:69:1a:3d:43:1f:17:a0:b2:73:1a:c5:
         fe:59:77:4e:d7:07:c0:3b:1d:cc:ce:ce:8d:16:0b:69:82:45:
         a4:15:a4:da:f9:4e:ec:ea:07:06:b5:ae:71:93:b9:40:93:4e:
         a3:f2:7c:67:a9:ea:b7:43:e1:86:64:32:46:6c:4d:cc:f8:b3:
         22:fe:b1:c2:12:db:39:dd:be:2d:91:90:fe:41:d9:12:80:c3:
         9c:74:87:c0:b5:3a:d0:aa:e1:c1:5f:bd:cb:31:64:5e:6f:d8:
         7a:3e:ba:55:e8:f4:36:f7:40:6b:4e:80:2d:56:35:ae:dc:9b:
         ab:cb:a9:7e:20:6e:22:44:ce:b3:ad:fd:71:60:18:d3:52:9f:
         e4:7a:d0:85:f8:70:db:d9:68:c8:fa:12:7a:d3:92:2b:f2:be:
         84:5e:ff:39:ca:4c:6a:95:d3:5c:65:7e:33:b2:ae:2f:55:94:
         8d:a4:c5:28:27:1d:6c:8f:e1:bd:72:50:bf:50:c3:c1:7d:d2:
         d9:a7:00:20:8c:83:5a:bb:49:33:ae:b9:2a:7f:3d:dc:bb:f2:
         03:5a:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:37 2026 by rpki-client