Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
File:                     CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft (raw, json)
Hash identifier:          OTfizUIBKZD3NEGBrzI6N7Mw8SRfPoXZ6V50sPstkYc=
Subject key identifier:   9C:AA:6A:7E:8A:5E:35:08:79:E1:A5:11:A1:76:1B:EE:51:30:F2:1C
Authority key identifier: CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18
Certificate issuer:       /CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
Certificate serial:       287D961A485B92557B4188C46CB2D3DEF81F937D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
Manifest number:          CD
Signing time:             Sat 13 Jun 2026 02:08:14 +0000
Manifest this update:     Sat 13 Jun 2026 02:03:14 +0000
Manifest next update:     Sun 14 Jun 2026 05:28:14 +0000
Files and hashes:         1: 3137302e3234372e3233362e302f32332d3233203d3e203631373932.roa (hash: h8zTmBMcHd6Q/eGxRZiyGDjTEek9FbOkKHoyTgL0LbI=)
                          2: 3137302e3234372e3233382e302f32332d3233203d3e203631373932.roa (hash: 2porUDIWXQzRPGw1lpbiLM8NJFRmoPWfAam3JjOiqQI=)
                          3: 3230312e35352e3139382e302f32332d3233203d3e203631373932.roa (hash: bNFVAIma85Zo38JJw/JHddmotrkMT822P8k2TWhj/80=)
                          4: 323830343a313936343a383030303a3a2f33332d3333203d3e203631373932.roa (hash: jQn6bNShNRccKfizsl/8A30O75ibJQDVEx9YPr3zU38=)
                          5: 3137302e3234372e3233362e302f32322d3232203d3e203631373932.roa (hash: iySyHxjIr7ORJGuCFbUIcn5qiL0P95Z+JKZ8mPhMmS8=)
                          6: 323830343a313936343a3a2f33322d3332203d3e203631373932.roa (hash: zHBVTUBnR+xbwji6JVUdRg0MsKUdPKUIU0tERwH4f6M=)
                          7: 3230312e35352e3139362e302f32322d3232203d3e203631373932.roa (hash: J0mYs0fzR0mOVze7cTBEVZo4hZZrQFqWPvJRYly0lg0=)
                          8: CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl (hash: WyJJHkZT3v47w7rbQPpFD2zFS523pZ9KC/qG01ob+IU=)
                          9: 3137302e3234372e3233392e302f32342d3234203d3e203631373932.roa (hash: 203AL4NBhBycj+vxU5+ovaUOgvD9LecJjLlS2saKm9Y=)
                          10: 323830343a313936343a3a2f33332d3333203d3e203631373932.roa (hash: B7uhdADRB/qpR0N7Nv3nA1bj4eB0sZ92c8CWrY8NFjo=)
                          11: 3230312e35352e3139362e302f32332d3233203d3e203631373932.roa (hash: ojTwfVCng+7ymOiarD5AYKRaqQLpx5tvbx3yrswWgbw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 05:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:96:1a:48:5b:92:55:7b:41:88:c4:6c:b2:d3:de:f8:1f:93:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
        Validity
            Not Before: Jun 13 02:03:14 2026 GMT
            Not After : Jun 14 05:28:14 2026 GMT
        Subject: CN=9CAA6A7E8A5E350879E1A511A1761BEE5130F21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:ad:32:e9:3f:d5:05:e5:26:0d:0c:f1:8d:
                    7a:d1:e6:06:fb:a8:44:d1:b1:0e:48:c7:f5:d9:0a:
                    1b:b8:bb:59:17:ad:30:58:de:4c:15:8a:9a:fa:30:
                    1e:61:d8:00:20:07:0b:cc:e7:8c:7d:85:7a:66:09:
                    e2:f4:7a:8e:be:0c:23:ae:7a:72:ff:59:bf:4b:b0:
                    34:3d:4d:2d:1d:68:3f:85:fe:ad:e3:83:1e:b5:68:
                    b6:2c:6c:2b:57:c3:d3:8e:e6:54:07:a0:4d:41:b5:
                    16:71:5c:4c:a7:47:7b:44:cb:d1:c9:96:fd:a1:bd:
                    72:fa:14:c0:7b:ea:e0:22:91:7e:c6:c9:b5:d6:74:
                    fa:73:be:8d:77:1d:03:16:bc:56:ed:11:72:e7:cf:
                    41:50:25:ac:3d:f4:8d:14:5d:20:1b:13:0e:56:78:
                    c5:e2:50:ca:fd:ff:7f:92:15:79:27:aa:2b:5c:b5:
                    05:a2:72:ae:af:c1:5c:95:09:4e:e5:6d:f4:b6:d6:
                    78:26:ac:56:e9:4f:88:fa:b0:e3:8b:ab:ab:42:22:
                    33:cd:47:fe:a1:65:c0:e7:13:e2:c1:04:e6:c2:18:
                    a3:72:7f:84:64:65:d3:19:d5:81:2d:68:59:9a:7e:
                    dd:a7:96:1e:0c:e0:e6:c8:c2:1e:9d:f5:a7:48:bc:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AA:6A:7E:8A:5E:35:08:79:E1:A5:11:A1:76:1B:EE:51:30:F2:1C
            X509v3 Authority Key Identifier:
                keyid:CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:36:88:3f:4d:cc:65:4e:2d:df:04:d1:d0:d1:28:2f:3c:37:
         be:d3:90:e1:26:75:d4:4c:aa:76:6a:9c:8f:e5:bb:a6:b4:8c:
         a4:9a:73:ee:cb:6f:6d:b8:08:b7:f6:1a:0d:4e:c4:f3:12:1c:
         64:30:73:83:6d:8b:93:0a:bb:15:f6:f8:a8:bf:3b:10:90:36:
         df:e2:37:af:9b:9a:28:df:f7:ee:73:0d:13:77:f6:c3:ed:a1:
         79:40:58:e7:2d:a0:4e:86:db:c4:37:d0:8f:b3:28:18:c2:ad:
         3f:f5:a1:89:be:19:c8:43:7c:29:3c:50:ca:17:eb:bb:a9:ba:
         50:3f:3c:4c:17:f3:45:07:13:42:f6:c8:e3:01:68:f4:f9:2f:
         d4:65:8c:60:cc:08:27:e0:1d:54:89:e3:be:08:27:a8:e2:f7:
         8d:cc:9f:4d:11:4d:80:99:e5:93:73:c8:90:11:53:06:b7:6a:
         2d:1d:a3:9e:3d:3e:51:ae:b4:bf:61:10:9c:3c:78:e9:39:43:
         21:e3:00:58:0b:d3:12:cc:c3:b2:a7:d6:0b:ed:c1:95:4b:35:
         6c:64:1f:8f:a4:29:0a:0e:f2:b3:80:21:05:18:08:85:fd:de:
         2b:a4:8f:7f:a8:02:88:01:c1:ec:10:01:4e:89:57:4c:21:75:
         58:38:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:56 2026 by rpki-client