Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
File:                     305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft (raw, json)
Hash identifier:          EhahDLIH53dwLTNc4VsoE3hfUs1cdv6Kf9/vsBfPbVI=
Subject key identifier:   AF:07:8E:04:96:AE:BD:58:CD:0D:A1:B7:29:22:57:82:8E:C1:9E:B2
Authority key identifier: 30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C
Certificate issuer:       /CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C
Certificate serial:       24649D9B6304005711C39C3F7A0F1D8A7079C33D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
Manifest number:          021C
Signing time:             Wed 08 Apr 2026 08:23:12 +0000
Manifest this update:     Wed 08 Apr 2026 08:18:12 +0000
Manifest next update:     Thu 09 Apr 2026 10:50:12 +0000
Files and hashes:         1: 323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (hash: h7Ouc9zL1UqSMEPAk+XyQSa5xwyc2CbaFButmKh7Vp8=)
                          2: 34352e3138342e3139362e302f32322d3234203d3e20323639333432.roa (hash: EPR9dtZnPtAEMJZMnmYWm/aAMJO+jxKaf24eM+Nx+7M=)
                          3: 305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl (hash: P2ng3mXCdWb4G1eYtwGh5RdBf4SllCzEYReyvXCKMrA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl
                          rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:64:9d:9b:63:04:00:57:11:c3:9c:3f:7a:0f:1d:8a:70:79:c3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C
        Validity
            Not Before: Apr  8 08:18:12 2026 GMT
            Not After : Apr  9 10:50:12 2026 GMT
        Subject: CN=AF078E0496AEBD58CD0DA1B7292257828EC19EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:41:1d:c9:e1:69:f2:93:1e:74:db:dd:4b:fe:
                    44:d7:9e:cb:c5:97:c7:bd:cc:f3:55:0e:24:7a:bb:
                    1c:76:8c:fa:de:b4:62:cd:44:70:dc:31:1f:90:57:
                    be:68:a5:ea:e6:b0:28:4a:d3:ae:91:34:0c:5c:5f:
                    cd:3e:6a:ae:2e:b1:01:af:23:e1:2a:9d:01:8d:85:
                    11:ba:2f:52:df:ad:55:15:b2:76:2e:d1:d7:36:56:
                    b1:ad:6f:d7:51:24:2c:56:7a:7c:ed:32:78:34:14:
                    4d:fb:93:33:a0:a3:c6:b8:b0:ff:a3:61:29:f2:4f:
                    fa:d3:8d:d9:6c:04:2a:0d:b6:37:5a:77:28:7e:bf:
                    0d:de:14:a7:bf:34:af:41:8f:aa:a0:6c:db:ff:d9:
                    3a:02:b2:e4:b7:9c:68:6f:22:2b:73:a4:01:37:28:
                    0b:7d:8c:7c:0a:cf:e9:03:c2:66:43:67:86:af:1a:
                    56:72:3a:75:5f:5f:a1:ee:75:09:24:8f:8c:db:b8:
                    b1:a9:f7:9c:db:76:4e:a0:46:78:21:17:99:cb:5e:
                    41:f7:b2:c8:6f:28:83:b6:ff:04:77:f5:24:a6:7c:
                    de:c2:64:4c:e4:d1:34:56:2f:99:b7:02:91:34:94:
                    91:40:76:a3:ff:c0:d3:ad:fc:f5:cd:42:41:eb:73:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:07:8E:04:96:AE:BD:58:CD:0D:A1:B7:29:22:57:82:8E:C1:9E:B2
            X509v3 Authority Key Identifier:
                keyid:30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:31:a2:5f:95:ad:67:4d:6d:cf:c4:32:d6:ba:59:52:4c:f1:
         ad:52:8c:6e:e5:a6:65:91:50:af:6c:a3:17:ca:f6:81:a0:a2:
         34:4d:66:8e:25:5b:ae:bc:65:9f:db:95:df:d3:76:0e:68:a7:
         fc:8b:fd:f8:12:0b:93:ed:06:56:19:28:ba:ca:53:29:9c:d6:
         6d:e3:11:89:7d:54:3a:c3:2a:b2:e0:63:3a:bd:95:af:10:c7:
         d3:24:78:9c:b1:31:83:0f:3d:d9:c1:90:eb:16:53:1d:c2:9d:
         22:21:72:83:84:bf:3f:6f:5a:3a:e0:cc:bc:9d:91:55:31:ec:
         47:e6:dd:15:73:86:16:a2:f6:0b:b4:72:74:4e:29:60:ad:9c:
         41:a9:6e:a2:46:6f:42:04:44:f5:e6:10:03:e3:44:86:58:81:
         0d:9c:be:81:dc:76:12:50:93:55:11:3a:97:26:0c:f9:2f:97:
         5d:4a:bb:c8:22:e1:f7:d8:69:3b:f8:ef:aa:d2:56:00:e9:73:
         02:e5:d5:72:02:b9:c9:53:c7:13:44:55:d5:db:ef:2f:6e:a1:
         b0:7c:23:9b:c9:c3:0f:58:35:3e:11:fd:a1:9a:84:a4:eb:78:
         2a:6b:b6:45:f8:29:cc:07:44:b7:cc:d9:35:41:dd:64:04:7f:
         71:8f:9d:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJGSdm2MEAFcRw5w/eg8dinB5wz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1QTNBNzQ5ODlDMkJEREUwQUEyNkIyQTRFRjkyRjYy
MTNBMDM0QzAeFw0yNjA0MDgwODE4MTJaFw0yNjA0MDkxMDUwMTJaMDMxMTAvBgNV
BAMTKEFGMDc4RTA0OTZBRUJENThDRDBEQTFCNzI5MjI1NzgyOEVDMTlFQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuQR3J4Wnykx50291L/kTXnsvF
l8e9zPNVDiR6uxx2jPretGLNRHDcMR+QV75opermsChK066RNAxcX80+aq4usQGv
I+EqnQGNhRG6L1LfrVUVsnYu0dc2VrGtb9dRJCxWenztMng0FE37kzOgo8a4sP+j
YSnyT/rTjdlsBCoNtjdadyh+vw3eFKe/NK9Bj6qgbNv/2ToCsuS3nGhvIitzpAE3
KAt9jHwKz+kDwmZDZ4avGlZyOnVfX6HudQkkj4zbuLGp95zbdk6gRnghF5nLXkH3
sshvKIO2/wR39SSmfN7CZEzk0TRWL5m3ApE0lJFAdqP/wNOt/PXNQkHrc/HxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrweOBJauvVjNDaG3KSJXgo7BnrIwHwYDVR0j
BBgwFoAUMFo6dJicK93gqiaypO+S9iE6A0wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdm
ak0vMC8zMDVBM0E3NDk4OUMyQkRERTBBQTI2QjJBNEVGOTJGNjIxM0EwMzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNUEzQTc0OTg5QzJCRERF
MEFBMjZCMkE0RUY5MkY2MjEzQTAzNEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdmak0vMC8z
MDVBM0E3NDk4OUMyQkRERTBBQTI2QjJBNEVGOTJGNjIxM0EwMzRDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKTGiX5WtZ01tz8Qy1rpZUkzxrVKMbuWmZZFQr2yjF8r2gaCiNE1mjiVbrrxl
n9uV39N2Dmin/Iv9+BILk+0GVhkouspTKZzWbeMRiX1UOsMqsuBjOr2VrxDH0yR4
nLExgw892cGQ6xZTHcKdIiFyg4S/P29aOuDMvJ2RVTHsR+bdFXOGFqL2C7RydE4p
YK2cQaluokZvQgRE9eYQA+NEhliBDZy+gdx2ElCTVRE6lyYM+S+XXUq7yCLh99hp
O/jvqtJWAOlzAuXVcgK5yVPHE0RV1dvvL26hsHwjm8nDD1g1PhH9oZqEpOt4Kmu2
RfgpzAdEt8zZNUHdZAR/cY+dDA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 18:21:38 2026 by rpki-client