Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft
File:                     3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft (raw, json)
Hash identifier:          XTpANCyVg4D3rV+4OT7Wnk9zQL5sj7uFrHBfSya86II=
Subject key identifier:   C8:E5:76:46:97:B4:0F:C8:AF:F9:67:EB:22:BE:D1:9A:71:68:B7:7F
Authority key identifier: 3D:DB:BF:9A:0F:76:77:70:00:C6:58:08:DF:CC:56:A2:47:59:E1:2B
Certificate issuer:       /CN=3DDBBF9A0F76777000C65808DFCC56A24759E12B
Certificate serial:       2DFFA349AA990FBD486FBF120983B5B022C03F7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft
Manifest number:          18
Signing time:             Fri 17 Apr 2026 09:27:03 +0000
Manifest this update:     Fri 17 Apr 2026 09:22:03 +0000
Manifest next update:     Sat 18 Apr 2026 11:38:03 +0000
Files and hashes:         1: 3139312e362e352e302f32342d3234203d3e20323731323339.roa (hash: xJQ3u4iAH5w5LCkYgKnfi4XPIQoCTm77ULG/UiJBXy0=)
                          2: 34352e3232352e3132382e302f32332d3233203d3e20323731323339.roa (hash: VB6AvLqMI41pxkXoq4qIVr73LVLZDt8wm8eXPPMXOJs=)
                          3: 3230312e34362e3132302e302f32332d3233203d3e20323731323339.roa (hash: MLGRG7Bo3cgSm8JoC+Dbs1VHcS8L9CqbNk+OUQWYk1U=)
                          4: 323830343a373836343a3a2f33322d3438203d3e20323731323339.roa (hash: /7l2SuuGVVDsrREVquROSeBzi579TOfhxiNOAPmErKw=)
                          5: 3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl (hash: la/gBInX0ySwIvISjemX6E2yAI7E6x/Z3C+AEgG0zVM=)
                          6: 3230312e34362e3132312e302f32342d3234203d3e20323731323339.roa (hash: q9wFA8ovIdtTa/bLzFKO0rcIilHXNz7Kly3RkEHVZQw=)
                          7: 34352e3232352e3132382e302f32342d3234203d3e20323731323339.roa (hash: cZWHXz1SEfpQP0ABnYde0ZH03mGX63dRU2T0w1wqk78=)
                          8: 34352e3232352e3132392e302f32342d3234203d3e20323731323339.roa (hash: k0Dv0ZFDJkS8YUw5My7uqwtGKYZmr67soT7rSj8x3Fo=)
                          9: 3230312e34362e3132302e302f32342d3234203d3e20323731323339.roa (hash: FgyUvimObt607Ny9w84evUWRZ43YWY72TAvd7hl0JZ8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl
                          rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:a3:49:aa:99:0f:bd:48:6f:bf:12:09:83:b5:b0:22:c0:3f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDBBF9A0F76777000C65808DFCC56A24759E12B
        Validity
            Not Before: Apr 17 09:22:03 2026 GMT
            Not After : Apr 18 11:38:03 2026 GMT
        Subject: CN=C8E5764697B40FC8AFF967EB22BED19A7168B77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:f0:82:a7:45:d1:42:f5:5a:54:d6:84:d3:
                    85:44:27:36:51:89:b0:b9:40:4c:61:6a:bc:9e:d1:
                    9a:9e:97:9d:44:9a:1f:95:ab:6c:ad:d9:e4:34:47:
                    72:35:de:51:08:d4:18:e9:93:29:3e:64:a8:4d:aa:
                    f6:f4:a9:8d:5b:b8:ec:c1:83:84:84:8c:79:73:6a:
                    5c:c4:1b:6e:28:cb:8d:55:58:df:29:65:d1:73:2d:
                    25:2c:75:fc:db:d0:ad:a0:27:9f:5e:ae:75:0f:ff:
                    14:32:9d:59:bd:e2:b0:54:32:84:b0:b6:42:b3:d9:
                    4f:dd:8a:e0:de:6e:08:28:0b:78:ec:4f:f2:a0:f2:
                    cf:61:cd:49:6a:bc:77:aa:24:09:bb:5a:90:5d:bc:
                    30:a8:d2:e6:30:ed:59:41:53:a0:63:b7:10:53:c2:
                    e8:ea:f5:02:6b:81:43:32:18:4d:30:ac:8e:ce:9a:
                    f2:05:63:04:14:87:fc:11:56:f2:f2:d3:14:a0:00:
                    fb:8e:e3:89:a2:9c:77:3d:59:1b:72:67:db:8c:47:
                    d8:e8:c7:ab:5a:4f:4b:fb:42:e8:66:00:76:1e:fd:
                    16:22:4d:72:90:4c:df:cd:48:ef:c6:3d:08:29:04:
                    36:79:ec:11:53:22:3d:8f:a9:ad:51:6c:ef:ce:74:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:76:46:97:B4:0F:C8:AF:F9:67:EB:22:BE:D1:9A:71:68:B7:7F
            X509v3 Authority Key Identifier:
                keyid:3D:DB:BF:9A:0F:76:77:70:00:C6:58:08:DF:CC:56:A2:47:59:E1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:54:77:dd:85:55:5d:13:9c:4b:b9:75:b0:72:0a:22:68:69:
         72:ad:37:1d:e5:ea:ab:ac:00:12:bf:b4:06:20:44:e9:39:45:
         75:20:8e:5b:bd:26:22:7d:2e:51:ad:86:47:68:30:96:aa:90:
         65:cf:d9:20:e1:16:0e:59:3e:81:fd:85:57:8d:f4:f5:64:f4:
         f3:72:b8:53:32:f1:85:ea:e4:8f:e9:c7:67:6a:19:d2:31:fc:
         79:60:53:92:ae:c4:ca:1b:14:7e:5e:24:d6:94:76:31:c3:34:
         41:5f:57:26:e1:f9:90:89:09:0e:dc:7d:22:57:80:03:b9:8d:
         e1:51:d5:68:02:e7:d4:d4:f2:37:8c:0b:b2:e7:24:53:e8:c6:
         a2:88:cf:ba:63:92:e1:d5:9e:45:37:2b:74:4d:ad:d7:cd:25:
         44:f0:8f:f6:16:c0:50:00:15:71:5c:46:d0:c0:70:a5:5e:67:
         9e:ae:ed:2d:e0:e5:03:8e:28:70:f7:02:ef:a7:fb:d9:f4:e1:
         db:d7:99:f8:ab:bb:ae:f3:32:68:1b:2b:ea:f9:f2:46:9b:5d:
         d6:42:c7:fe:47:43:fb:e0:0d:1e:1f:7f:2d:5d:8d:6d:12:93:
         5b:bb:6b:87:8a:36:3b:85:f4:9c:39:4e:0c:53:11:2d:fd:dd:
         e6:6d:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:34 2026 by rpki-client