Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft (raw, json)
Hash identifier:          WFt7ClVeCNHRF60dQRcsdYeGjbzGd22bnOBx6u3PG/w=
Subject key identifier:   9A:9F:E7:C2:66:F2:E3:80:E7:4C:31:48:DE:08:3E:A5:A5:0D:60:8C
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       41BCF125D33BCE4584CEBB6466C2373A8A12D44A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
Manifest number:          03DE
Signing time:             Fri 17 Apr 2026 19:45:04 +0000
Manifest this update:     Fri 17 Apr 2026 19:40:03 +0000
Manifest next update:     Sat 18 Apr 2026 20:55:03 +0000
Files and hashes:         1: 3230312e36322e38302e302f32302d3332203d3e203238363334.roa (hash: JUM+mZn4I731ckqg5etOIprwlzEz1QI6CcYrHs0w+e8=)
                          2: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl (hash: 8+z89aNKwkxzJGpKBN9773x+3VQ02sYSh2Q1djkZLEM=)
                          3: 3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (hash: VV3slyXw0dXnOyRYL699MDERwdC66RjHXPVvG9vvh+8=)
                          4: 3138392e39302e39362e302f32302d3332203d3e203238363334.roa (hash: dP+Exqx6yblDuBAesafJP46VFYhPiDun28jsF6/yRYw=)
                          5: 3137372e3130352e3132382e302f32302d3332203d3e203238363334.roa (hash: WqK6JLgnc4CYzO4o8fupzWU+mD8b3j/ib7G5LO2rtvc=)
                          6: 3137392e39362e3132382e302f32302d3332203d3e203238363334.roa (hash: ww+6/mOwnZqDWgiq6nrCEN5YVbELexsDpxaBU/91Rmw=)
                          7: 3230312e36322e36342e302f32302d3332203d3e203238363334.roa (hash: fgfdm3WXF59XhwohOEFy/UTMwl1qHu0sR16yibOPCNY=)
                          8: 323830343a3132383a3a2f33322d313238203d3e203238363334.roa (hash: DI2VueJPKN1HxsJT1hvhXnH1+HSJYlvBccri4TUZ5+Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:f1:25:d3:3b:ce:45:84:ce:bb:64:66:c2:37:3a:8a:12:d4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Apr 17 19:40:03 2026 GMT
            Not After : Apr 18 20:55:03 2026 GMT
        Subject: CN=9A9FE7C266F2E380E74C3148DE083EA5A50D608C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:25:30:2e:6e:76:00:95:00:a8:82:5e:aa:
                    36:18:45:16:e4:27:1b:12:a4:73:35:15:8a:a2:ab:
                    4c:90:83:90:ae:4f:88:d5:b1:da:b1:f2:6f:8b:0e:
                    e5:57:c1:c2:4d:72:43:05:99:78:ca:29:ba:be:d2:
                    f8:2c:18:78:59:57:fc:de:b4:ce:e1:28:a5:41:0e:
                    e7:d3:b8:65:0a:a4:77:e5:11:71:b4:52:0f:19:f3:
                    9a:e1:df:aa:7c:62:57:49:fb:c1:df:ae:5f:6f:f0:
                    a3:c7:30:0f:89:9d:c9:30:5b:6d:40:dc:0c:b1:69:
                    00:b6:cb:27:3f:ef:57:2f:8b:af:48:a2:f8:80:07:
                    4a:7f:3e:8f:2a:d1:64:0a:40:be:74:bb:9e:06:4f:
                    e8:27:1a:2c:0b:59:5b:18:6b:08:35:3c:88:ed:c1:
                    5c:4c:83:73:38:b7:81:e8:a1:69:c3:80:40:98:ec:
                    e8:14:44:12:bf:11:5c:96:68:3a:fd:18:ca:b5:9a:
                    c8:1c:c2:df:22:4d:3b:80:21:63:9b:f0:c6:fd:87:
                    4e:d3:29:96:a6:a3:dd:84:e5:99:34:2a:44:b2:18:
                    ae:0a:77:2b:da:f1:64:d9:e9:0b:64:63:55:e6:11:
                    e8:a4:c4:d6:ae:31:6c:d8:26:ef:d7:6e:5a:e4:64:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9F:E7:C2:66:F2:E3:80:E7:4C:31:48:DE:08:3E:A5:A5:0D:60:8C
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:44:c0:cb:4c:e9:42:a9:0c:80:ac:27:6e:53:2e:13:ae:
         79:61:f1:57:94:e3:5a:a4:fb:37:ef:d9:25:62:36:ad:3d:c6:
         8e:ac:88:10:ef:70:a3:ca:b4:b6:6a:46:4b:13:cc:48:01:e6:
         20:15:13:47:4f:fe:1c:ab:8d:9d:e9:10:e0:f7:94:2d:6e:e4:
         e7:f6:d5:0d:b2:06:aa:7c:b5:bf:36:c1:ef:28:db:32:0b:b9:
         a2:49:3a:dd:a1:56:ee:34:c2:8d:05:34:ce:08:a2:5f:17:48:
         47:12:ce:b6:9d:b9:8b:64:7a:28:9a:d8:3a:da:c8:00:fa:38:
         b6:84:ba:81:df:a2:47:64:a6:4a:a2:ae:d0:13:d8:b7:ec:9c:
         54:f6:13:07:95:4f:62:d4:60:9c:4b:c4:e1:60:7b:aa:a1:ec:
         d1:0e:24:3f:fe:47:b5:14:e5:61:eb:73:83:81:89:f4:fa:26:
         be:1e:0f:45:bf:63:69:02:71:53:38:a8:58:3d:c4:44:7b:1f:
         82:f3:2c:b7:80:72:20:c1:5b:71:a4:25:23:8b:b7:55:d3:37:
         dc:7d:f6:b4:2e:02:67:3d:1f:c4:2b:7e:57:18:9f:50:bf:43:
         cb:e8:98:d2:a0:62:8e:9c:15:b7:83:f6:cd:97:3f:2b:79:da:
         33:33:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:40:48 2026 by rpki-client