Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File:                     BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier:          fDbpeohZDZqlp6AzNTyIl4W8haDgv/0Lv+cGh1M/kfs=
Subject key identifier:   BA:35:81:AA:DA:08:9E:AA:BE:E1:96:B0:B4:92:34:01:BC:88:EE:18
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       85468EDD8B2F55BF22318481289CDC105204EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number:          03E8
Signing time:             Sat 18 Apr 2026 06:20:18 +0000
Manifest this update:     Sat 18 Apr 2026 06:15:18 +0000
Manifest next update:     Sun 19 Apr 2026 07:24:18 +0000
Files and hashes:         1: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: VNfQ/9S5mlQKU0tDOCIzg6f87VK8feWileE4VHBdvZs=)
                          2: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: Aa284McDfTPmjic3mysbGGpbN5J63jS24v2FD6iYht0=)
                          3: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: KrbejnEAB1jYoyxgNuPx+4IjNgbAPuqfamW0X1CVqgY=)
                          4: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: TxOIhbwzlN7I7q94EScK4FFwq4vxuPW0ymjAuYngXN8=)
                          5: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: BRDX2bcHpAwtqDa7mj74P+hWC5po7P4vzhu+qudBurg=)
                          6: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: EXKoERunxHBjD0wM17VenuhxYo/CI6MX+lv8XDiQ0Z0=)
                          7: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: QYuarhhb51IIJNcMd8PqyCgbNMJp1l2Brpl4eGszn1Q=)
                          8: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: Rvo51TuPLd1M8Qn3gxgvH5b8+pcMostBoJ2Bw5X49aQ=)
                          9: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: Jvk4BhtkTqCaEGOfHpRXl47mcoGZIB2qsIvobQVyGEY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 07:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            85:46:8e:dd:8b:2f:55:bf:22:31:84:81:28:9c:dc:10:52:04:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: Apr 18 06:15:18 2026 GMT
            Not After : Apr 19 07:24:18 2026 GMT
        Subject: CN=BA3581AADA089EAABEE196B0B4923401BC88EE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:71:39:1d:7e:ed:0a:2e:3c:d8:b0:55:b6:
                    35:2b:46:c1:12:d2:75:91:c1:fb:37:07:1b:ee:d2:
                    2b:2b:f3:01:ce:a2:6c:d2:ac:c3:fa:57:61:c1:5d:
                    6d:62:ae:50:f4:47:7d:9f:62:71:4d:c5:41:66:a8:
                    63:db:31:8e:b2:54:1f:3d:d9:16:7c:f8:a3:11:39:
                    30:07:55:45:54:82:f9:5d:af:50:91:27:0d:c1:60:
                    3b:dc:eb:ae:18:82:37:07:dd:2d:26:c6:8b:65:c9:
                    06:20:67:5c:4b:e4:5e:60:b7:81:45:02:99:30:4c:
                    f1:af:2b:0a:5d:f2:4a:2a:94:d0:e9:51:c0:2a:8a:
                    03:8c:7a:df:f3:a1:b3:3c:b6:e2:3d:87:9f:f3:c6:
                    fb:21:c5:4e:79:ca:f8:9e:f2:18:70:e6:47:74:56:
                    80:c9:85:a4:ca:07:c2:9b:03:95:e4:44:1e:09:8e:
                    88:e5:9b:6a:56:66:9a:d0:bf:2a:3d:88:b4:3f:85:
                    99:31:a3:f9:24:83:04:dc:72:33:eb:89:b3:08:7e:
                    80:97:59:25:62:eb:66:b7:3d:b5:59:fa:35:41:1f:
                    d2:d8:1a:af:12:47:9b:32:fe:62:28:80:38:6e:1a:
                    78:0c:03:11:05:fb:93:4f:db:40:d3:31:02:93:07:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:35:81:AA:DA:08:9E:AA:BE:E1:96:B0:B4:92:34:01:BC:88:EE:18
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:21:1f:50:01:00:0f:7c:49:36:c3:7e:33:0a:c7:36:a3:0c:
         8d:d2:71:9e:92:17:44:4c:ed:73:c3:1d:15:8d:3b:0a:9c:7a:
         c8:bd:ab:d7:80:3b:96:90:8b:5e:05:b7:61:87:17:f6:dc:14:
         23:d6:3e:87:a0:10:bc:03:94:54:ac:f5:ea:fc:65:90:85:2f:
         56:c5:89:bb:08:c3:c1:74:f7:d3:35:dc:d8:3f:e5:1a:63:bd:
         da:24:e2:be:63:a1:3a:6c:c4:d9:95:84:0d:e2:97:8c:be:dd:
         29:45:b9:af:ed:ef:fe:59:71:10:48:86:ae:74:09:a1:6d:76:
         27:d6:bc:34:f5:ca:18:39:3a:65:3a:f5:bf:c4:14:c0:11:ae:
         0a:d7:6f:79:81:44:33:08:a9:d2:ca:cc:c5:73:9e:f9:3e:6a:
         d8:f6:08:e7:cb:72:f7:00:ee:4d:3c:e1:43:95:42:fa:9d:31:
         f0:1f:e2:a4:9c:fe:2c:b8:98:cd:23:1e:2e:c9:3c:55:14:f0:
         c1:9a:8f:24:97:04:cc:bb:6a:fc:b6:54:13:f9:3c:85:68:7e:
         c3:08:02:1a:a9:2d:47:10:a4:2f:b4:14:68:77:74:3f:b2:bc:
         cf:c4:5e:b8:f0:14:47:90:b4:ed:ba:c3:91:8d:fe:0a:3e:26:
         c6:d8:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:21:22 2026 by rpki-client