Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json)
Hash identifier:          iUVyTT5SNKOM7z0ZMsDjfqc7nAZYPz3NgvklozxCyTA=
Subject key identifier:   FE:34:2D:9C:07:1A:C6:B1:42:97:36:AA:FC:02:3D:59:9C:03:EC:5B
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       3205B8840996B43F195D3A6A365AC3B7697B8F48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
Manifest number:          03D3
Signing time:             Wed 08 Apr 2026 11:30:00 +0000
Manifest this update:     Wed 08 Apr 2026 11:25:00 +0000
Manifest next update:     Thu 09 Apr 2026 11:35:00 +0000
Files and hashes:         1: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: tiAhAv+gVbWnoT7cv+d8lIbVabpk8bEQbwc0BlWu3rA=)
                          2: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: zyRJOiiqXZco2HnDWeQ6bYjAoYiXQImsmBofds7Syx8=)
                          3: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: IWYZXcg3OmimkKiv+s1rdVnT4q8ViSPy8aJgPOJsXlQ=)
                          4: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: o/FwBJR2RpZgahnxgXMMyagNRhKTBqEFV9E92sD1lrI=)
                          5: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: ZlSDgPNh56nAawdjSDhFfcG60JSspTvr2ONkxv60a9c=)
                          6: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=)
                          7: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: w3iIpPfw+vjn8mKuKjFVKpT1wLZA+Sy+4PtT+m4vmNc=)
                          8: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=)
                          9: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=)
                          10: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: wsG14M7bLmG7pzF/f4Qx2Au3TbYb5fZpJb804Z65SVA=)
                          11: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek=)
                          12: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: gFIIDGbj9XYgwHaSzz61DO559mRwID/lhg7zHWCMNMo=)
                          13: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: V1cDZrw/jQuyXO5uGWhl5gnjqatTeLgacGxDPKp+eQs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 11:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:05:b8:84:09:96:b4:3f:19:5d:3a:6a:36:5a:c3:b7:69:7b:8f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Apr  8 11:25:00 2026 GMT
            Not After : Apr  9 11:35:00 2026 GMT
        Subject: CN=FE342D9C071AC6B1429736AAFC023D599C03EC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:8c:42:b5:d6:02:f1:db:fc:24:82:69:3c:
                    86:b4:71:c6:7d:9a:ea:06:aa:df:f0:5c:23:87:aa:
                    fc:4b:f3:d7:29:43:e7:af:52:8c:de:1e:4b:8b:33:
                    7b:1c:fe:58:05:80:3e:3a:4e:0a:3b:9c:a9:28:1a:
                    59:a2:99:8e:73:04:39:67:5f:6c:72:d2:99:fd:a7:
                    70:b1:0c:89:d6:21:03:ea:b4:32:36:40:f8:6c:cb:
                    06:cf:37:c2:af:74:c7:2a:bf:c5:d7:4d:ee:7c:83:
                    3e:71:98:bc:49:17:c6:b9:62:4f:8a:b6:43:76:ac:
                    25:e5:27:82:ac:0b:85:4f:34:b0:62:3b:c1:54:c8:
                    b0:9b:27:6d:28:7e:5f:61:e4:d2:47:e0:08:76:ba:
                    8c:2e:c8:b4:ea:73:78:ca:d0:15:41:2a:e3:e8:27:
                    cb:62:2d:51:55:f1:3e:97:05:50:1c:29:a2:36:34:
                    36:bd:ab:62:fb:18:b7:0c:c2:16:8b:80:fa:9a:19:
                    3c:f9:4d:b3:3a:fe:3b:0c:98:89:5a:ff:29:9b:9e:
                    34:4a:f5:d9:6c:36:73:d1:dd:45:05:77:4b:68:06:
                    3d:20:bb:96:cb:59:7b:93:af:a0:18:89:4e:8e:c8:
                    43:59:88:8f:73:5a:aa:ff:07:ec:ee:e7:cb:8f:06:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:34:2D:9C:07:1A:C6:B1:42:97:36:AA:FC:02:3D:59:9C:03:EC:5B
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d3:de:7d:a2:f9:d0:88:9d:6e:a1:f6:03:6a:28:44:02:fd:
         4e:9b:f2:03:c4:01:e2:eb:8d:94:49:46:dc:bc:85:5b:ee:11:
         13:d4:ae:b9:4b:cf:6d:46:fb:b5:70:67:a7:40:62:41:67:0a:
         0c:6a:7f:cf:12:32:de:87:76:64:c6:ff:33:d1:55:73:91:b6:
         fb:66:60:83:f4:f1:dc:90:50:ca:33:d2:8d:41:41:81:62:5f:
         55:84:bd:09:f0:2f:1a:48:fa:14:2d:70:40:b8:f4:c4:74:f2:
         38:7b:a5:6c:19:70:a5:d2:d0:ae:27:a5:97:a2:95:f5:c0:04:
         dc:0c:a8:08:c7:e0:4c:fc:1c:08:cb:86:91:e2:43:f3:ed:20:
         b1:ae:fa:13:97:de:8d:96:6c:da:8a:dd:6b:39:cd:ad:dd:9f:
         aa:f8:46:46:11:5d:22:66:75:8e:cb:72:b8:f5:d3:b1:fc:e4:
         ca:66:31:fd:fe:80:2d:bc:37:e4:58:52:a8:5b:77:ea:65:61:
         95:a7:56:97:15:44:b5:02:d9:8a:55:36:7e:b5:9a:96:ff:e3:
         3c:0f:d1:22:53:d9:4d:99:85:67:a1:45:17:30:96:ed:0e:82:
         f7:a3:b9:0b:69:60:f8:c7:40:40:93:99:e4:55:61:53:f1:1c:
         73:d7:a8:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMgW4hAmWtD8ZXTpqNlrDt2l7j0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx
MjMzOEQ5QzAeFw0yNjA0MDgxMTI1MDBaFw0yNjA0MDkxMTM1MDBaMDMxMTAvBgNV
BAMTKEZFMzQyRDlDMDcxQUM2QjE0Mjk3MzZBQUZDMDIzRDU5OUMwM0VDNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RoxCtdYC8dv8JIJpPIa0ccZ9
muoGqt/wXCOHqvxL89cpQ+evUozeHkuLM3sc/lgFgD46Tgo7nKkoGlmimY5zBDln
X2xy0pn9p3CxDInWIQPqtDI2QPhsywbPN8KvdMcqv8XXTe58gz5xmLxJF8a5Yk+K
tkN2rCXlJ4KsC4VPNLBiO8FUyLCbJ20ofl9h5NJH4Ah2uowuyLTqc3jK0BVBKuPo
J8tiLVFV8T6XBVAcKaI2NDa9q2L7GLcMwhaLgPqaGTz5TbM6/jsMmIla/ymbnjRK
9dlsNnPR3UUFd0toBj0gu5bLWXuTr6AYiU6OyENZiI9zWqr/B+zu58uPBpzvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/jQtnAcaxrFClzaq/AI9WZwD7FswHwYDVR0j
BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW
azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux
RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMS8y
QkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAudPefaL50IidbqH2A2ooRAL9TpvyA8QB4uuNlElG3LyFW+4RE9SuuUvPbUb7
tXBnp0BiQWcKDGp/zxIy3od2ZMb/M9FVc5G2+2Zgg/Tx3JBQyjPSjUFBgWJfVYS9
CfAvGkj6FC1wQLj0xHTyOHulbBlwpdLQriell6KV9cAE3AyoCMfgTPwcCMuGkeJD
8+0gsa76E5fejZZs2ordaznNrd2fqvhGRhFdImZ1jstyuPXTsfzkymYx/f6ALbw3
5FhSqFt36mVhladWlxVEtQLZilU2frWalv/jPA/RIlPZTZmFZ6FFFzCW7Q6C96O5
C2lg+MdAQJOZ5FVhU/Ecc9eoTA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 23:12:16 2026 by rpki-client