Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          UcEYngUam0J1V/PfRN+XZ8+TpMte4ui6Z1H5NLXEWNk=
Subject key identifier:   CD:50:AE:6D:05:74:49:52:8E:FC:DF:56:44:8C:BB:46:51:5E:96:CA
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       4478D9FFF9B26188C92B5EE82427303AE82762D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          03DB
Signing time:             Fri 17 Apr 2026 11:10:04 +0000
Manifest this update:     Fri 17 Apr 2026 11:05:04 +0000
Manifest next update:     Sat 18 Apr 2026 11:10:04 +0000
Files and hashes:         1: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
                          2: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
                          3: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
                          4: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: IGi+TTJmXHKdGGZmcsZgR4vm1k3gA+9mIxDlgzn4aS0=)
                          5: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
                          6: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
                          7: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
                          8: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:78:d9:ff:f9:b2:61:88:c9:2b:5e:e8:24:27:30:3a:e8:27:62:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Apr 17 11:05:04 2026 GMT
            Not After : Apr 18 11:10:04 2026 GMT
        Subject: CN=CD50AE6D057449528EFCDF56448CBB46515E96CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:9e:8a:98:c2:08:8d:2c:0f:4b:fc:b8:5c:
                    44:ae:b9:40:a3:dc:8f:29:03:46:36:79:71:5e:9f:
                    1b:73:2c:d2:c3:0c:3b:cd:b2:a9:67:e2:07:5b:7b:
                    35:72:18:97:ba:b4:33:c4:b6:f0:14:2b:60:1a:3c:
                    4d:d2:b8:05:25:17:52:63:6f:f9:94:65:52:f0:0f:
                    9f:f4:fe:09:cd:c1:2e:19:4b:40:2d:df:94:2d:b7:
                    8a:d5:05:07:10:bd:a5:54:12:ff:20:7f:c5:2a:6f:
                    f4:aa:8a:83:d3:3a:50:da:a9:7d:c2:12:41:14:df:
                    85:d6:91:65:e0:57:c3:43:e9:b5:eb:7a:c3:22:c0:
                    fb:d9:48:20:51:0a:25:11:95:91:17:3e:23:d4:6f:
                    fb:92:e8:2a:2a:8a:a5:26:a1:44:4d:2d:0a:19:e4:
                    87:de:ea:e3:db:d5:46:0b:34:f3:5e:a7:24:4d:d6:
                    fd:26:dd:ec:e4:12:e3:50:d6:aa:f2:41:ab:82:bf:
                    95:a9:8b:72:ac:9f:75:9a:5d:4b:46:15:e6:e9:c5:
                    43:b4:7c:cf:26:a5:f4:22:67:d3:b4:1f:74:1e:0c:
                    aa:ea:20:14:c3:8b:c2:cf:78:67:d8:4c:8f:ad:aa:
                    ca:da:45:0b:c3:d8:16:75:5c:ef:59:bb:93:78:93:
                    01:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:AE:6D:05:74:49:52:8E:FC:DF:56:44:8C:BB:46:51:5E:96:CA
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:49:75:08:3c:06:b4:c9:42:9e:eb:c2:5e:a0:5d:5f:82:
         3c:55:f8:ce:92:29:fb:59:5a:c1:44:f3:d3:3f:01:46:f4:7e:
         0c:27:6f:9c:3c:de:07:d7:f7:66:3f:fe:14:d2:f3:a1:a4:36:
         c3:d0:92:c6:9d:30:0a:77:9e:5e:54:a3:a6:9f:5b:97:d0:b7:
         f6:e0:ee:38:5d:92:46:05:19:07:0f:d2:05:34:03:69:6f:36:
         a3:82:f3:89:c4:46:6e:be:e7:dd:f9:a9:95:37:30:43:c2:ae:
         a7:1b:2b:c0:ea:5b:b7:3f:a4:88:52:8f:cc:dc:2c:89:9b:2c:
         3d:e7:d8:a1:18:9e:7e:a2:0d:f0:9e:6e:89:57:27:ca:86:b9:
         55:90:32:62:4e:d6:8e:92:7a:3d:6b:a8:1b:1b:24:f0:85:d1:
         5e:d2:b8:2d:41:22:bf:b5:12:1e:cd:52:89:9d:be:aa:87:c5:
         b6:3c:5a:36:b7:23:2f:17:f9:d0:0c:44:52:2e:21:91:cf:ad:
         0d:a0:2b:a4:ee:de:74:4e:58:1b:52:a2:63:7c:39:c5:4e:6f:
         13:5d:22:16:d4:02:ed:4a:1d:ce:db:21:10:37:7a:9d:a9:16:
         14:eb:45:40:86:d4:c1:a6:19:5a:ec:2c:f2:fa:95:05:73:ab:
         1e:95:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:28 2026 by rpki-client