Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File:                     B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier:          BaS1KO4wFpZQlNi6NCtWP1gdB6qwOCCrSVPvpvVJ0LE=
Subject key identifier:   73:5F:A1:68:C8:FB:CB:0F:BE:86:E4:02:03:54:49:A0:46:50:6E:91
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       4A5355A4B885D59D3EB5FB3DDC1DC28320105FDB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number:          039B
Signing time:             Mon 02 Mar 2026 17:04:52 +0000
Manifest this update:     Mon 02 Mar 2026 16:59:52 +0000
Manifest next update:     Tue 03 Mar 2026 19:54:52 +0000
Files and hashes:         1: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: PKGVa0L+swMi+O3jto7r5DSG35H4tJns957ocZd1fek=)
                          2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: V04zcf9mn2VTZhOmG5Y0biHuffqV+J34ixOhbUQAANA=)
                          3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: VYej78JcpqPEEZLXLzhwSPB2VlOIApr/1pd6s3ifVWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 18:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:53:55:a4:b8:85:d5:9d:3e:b5:fb:3d:dc:1d:c2:83:20:10:5f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Mar  2 16:59:52 2026 GMT
            Not After : Mar  3 19:54:52 2026 GMT
        Subject: CN=735FA168C8FBCB0FBE86E402035449A046506E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:6e:bc:91:ab:a2:07:12:a4:3f:3b:47:a6:
                    df:ae:94:59:34:e6:11:21:68:19:4e:f0:ea:9f:f4:
                    32:31:56:e4:e1:3f:06:c8:03:5e:6a:55:38:1d:64:
                    1e:eb:54:7c:98:58:a8:38:6a:ff:06:3f:48:f3:6d:
                    e5:d8:7e:cb:ec:e0:b1:1b:ac:be:77:34:e2:2d:26:
                    b7:1f:7c:76:7c:38:69:2c:62:eb:9b:eb:bd:ee:c6:
                    e8:f3:c4:4c:96:49:d4:6e:b8:fb:1a:68:0c:85:56:
                    ef:27:39:58:7b:c5:85:51:ec:83:42:d0:ce:cb:8e:
                    13:5f:2c:3a:cc:56:5d:99:08:cf:7e:c0:17:27:93:
                    30:fa:5b:f8:64:fc:6c:0f:d8:8b:22:79:fe:09:75:
                    e4:21:45:1f:69:4e:40:4b:da:93:71:aa:9b:4e:3e:
                    00:da:4d:ea:09:95:82:08:7f:81:9d:2f:62:d6:ab:
                    75:27:dc:0c:17:c0:38:28:45:1a:d6:8e:77:53:b5:
                    19:1c:37:a0:b9:32:24:22:ce:b5:cd:0d:78:62:d7:
                    1b:74:73:83:cf:ab:3d:47:bb:b1:9f:99:cc:d4:eb:
                    00:7f:ba:75:c1:10:7b:f4:ad:8f:26:5d:b4:7a:b0:
                    49:16:ca:2d:c1:2b:af:17:b0:f5:fb:01:34:3d:a6:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:A1:68:C8:FB:CB:0F:BE:86:E4:02:03:54:49:A0:46:50:6E:91
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:61:b5:1a:63:cb:9c:13:c9:88:f7:27:b0:3c:d4:89:c7:bf:
         bc:8f:33:45:aa:a9:34:a7:29:45:83:88:15:cf:34:ba:38:f9:
         0a:c4:8b:35:82:ac:1f:7d:d5:61:a3:43:6c:c4:08:39:cf:20:
         d1:1b:c6:d2:33:d7:3f:7e:71:09:7b:67:50:c0:fb:02:4f:8c:
         5a:4a:9b:d6:31:ac:87:4d:17:58:6a:a9:04:50:4d:5a:fd:a5:
         45:b6:29:05:62:8e:8d:cc:af:9a:e3:23:d4:07:b0:ae:f5:02:
         6b:fc:3b:cc:c6:78:68:43:a2:97:95:91:a3:a4:61:e4:05:58:
         7f:55:67:5b:06:2f:5c:18:f0:30:68:c0:f8:43:52:df:f1:5a:
         d4:84:a4:9f:2f:ac:c1:1d:b0:62:fd:84:1b:40:f9:e1:72:38:
         b6:f6:a3:a8:bf:eb:f3:c7:51:f2:e1:20:05:80:75:53:1a:c0:
         05:bf:24:e3:66:57:ae:6f:d9:d6:ee:02:18:7f:7f:3b:86:fd:
         32:48:6b:bc:36:47:f3:59:2a:81:1d:5d:8d:08:2a:7c:4e:07:
         25:4d:6b:aa:8e:d4:b1:59:46:a2:48:9e:ef:6c:a9:f9:2c:7c:
         cb:f1:a9:84:b7:0d:aa:48:ae:ba:b8:06:b6:3c:90:ae:05:a6:
         82:4b:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:03 2026 by rpki-client