Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
File:                     2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json)
Hash identifier:          UPlHpHP6qIOeFSE99pKnJSnaZb/WbFdMblqHiCQbu5o=
Subject key identifier:   07:09:AE:31:90:73:20:30:61:35:86:CB:51:E0:3F:CC:8D:BA:1A:78
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       53DC792663E7E74BDE540E34502F1F562C2AFB40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
Manifest number:          03CB
Signing time:             Wed 08 Apr 2026 06:48:27 +0000
Manifest this update:     Wed 08 Apr 2026 06:43:27 +0000
Manifest next update:     Thu 09 Apr 2026 07:28:27 +0000
Files and hashes:         1: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: balLqWtekE7xoXyozNcnhLY0gSCHw8MWCc2OS3afiiI=)
                          2: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: RZ00+qXW/BPYoY+V3LazcZSeSl7+kD6hzoXFr0qzr8Q=)
                          3: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: ljm+pZB82IaalIH4v5D/SonzzRKJCcEAEIWRNZqROeU=)
                          4: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: UpP12LnX8V9yOeNpWAhngLI5xTreMtmtTfodbgcvkaQ=)
                          5: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: QymnaSDu1ODQfT5ybG3gM6X4xk9jNNtTQ+zkNvj0XzM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dc:79:26:63:e7:e7:4b:de:54:0e:34:50:2f:1f:56:2c:2a:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Apr  8 06:43:27 2026 GMT
            Not After : Apr  9 07:28:27 2026 GMT
        Subject: CN=0709AE3190732030613586CB51E03FCC8DBA1A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:62:48:19:6f:a0:fd:9d:74:ec:3c:81:04:
                    32:8b:fb:28:09:7c:05:2c:df:ec:85:29:1f:e7:57:
                    14:2c:b7:a6:da:c2:fe:03:65:88:2b:16:90:84:b6:
                    c6:21:5c:6a:14:ad:7b:fc:e5:30:0d:f8:14:08:8b:
                    dd:4d:ae:5b:c1:df:6d:34:51:ae:1b:2a:06:c8:59:
                    5a:79:59:35:bd:ad:24:cf:47:67:68:88:6e:6a:51:
                    62:5a:23:b6:a1:56:84:6c:ee:a8:9a:87:30:7f:99:
                    b8:4f:fe:55:75:32:88:2b:7f:27:ed:50:7f:1e:be:
                    49:64:d1:07:43:97:b4:c1:cf:34:c9:4e:71:00:d5:
                    eb:5a:78:8c:7c:c4:cb:dd:e5:2f:90:fe:a8:5d:27:
                    f2:a5:2b:70:6f:65:25:24:3a:2a:40:67:23:eb:30:
                    60:1b:b2:f4:23:22:05:01:f3:26:fe:62:42:ff:6c:
                    23:1e:81:2c:4e:f3:f1:67:28:74:e1:0a:52:4c:fa:
                    96:dc:42:fc:3c:a2:0f:88:64:b4:fe:34:46:6e:4c:
                    47:54:4c:72:d7:43:40:1c:9e:be:b1:b0:44:61:b2:
                    e7:56:7b:24:b4:1d:b4:f5:a7:f9:1c:46:49:a7:9e:
                    8d:8c:cf:63:7a:7f:80:6b:bd:2b:62:2e:50:75:5b:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:AE:31:90:73:20:30:61:35:86:CB:51:E0:3F:CC:8D:BA:1A:78
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:0c:07:ce:56:96:92:e0:98:09:8c:7e:50:74:10:c2:a3:
         d0:39:af:4a:24:d1:18:bc:4d:b4:1f:d0:eb:f3:f1:ce:c3:04:
         20:69:4b:d3:d2:5f:65:6d:5b:da:aa:a2:e9:a1:62:ac:3b:24:
         ce:35:10:82:8c:8e:a7:49:a2:19:f6:4f:dd:00:bc:b8:84:19:
         fa:0e:b5:aa:93:0c:67:c6:0f:c6:30:4f:fa:3c:59:9a:77:8b:
         55:cd:b2:78:24:da:67:39:30:68:ec:74:b6:68:ae:73:74:18:
         28:22:4d:55:61:48:6c:77:37:0a:dd:91:aa:8d:57:77:fd:61:
         bf:56:cf:87:91:04:d1:31:91:37:a3:67:5e:2a:31:86:86:4a:
         48:ac:1c:44:59:26:29:f9:12:a6:39:96:b7:00:26:2f:e8:77:
         c5:d9:2d:1a:94:31:3a:13:07:a9:7d:aa:da:23:28:6c:13:04:
         0c:a5:f5:03:91:65:5c:f9:15:0d:0c:81:d3:b1:b3:f9:5c:a0:
         be:c5:88:86:de:2e:17:a9:ea:90:69:31:0c:57:30:77:6d:ca:
         b5:f0:5f:a5:84:c3:36:d5:1e:12:60:e6:ea:66:74:d5:f1:01:
         e2:24:f3:53:89:a3:79:4f:68:42:b6:94:6d:ef:19:fa:19:e8:
         5b:5a:f0:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU9x5JmPn50veVA40UC8fViwq+0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz
NkU5MUI1QzAeFw0yNjA0MDgwNjQzMjdaFw0yNjA0MDkwNzI4MjdaMDMxMTAvBgNV
BAMTKDA3MDlBRTMxOTA3MzIwMzA2MTM1ODZDQjUxRTAzRkNDOERCQTFBNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWGJIGW+g/Z107DyBBDKL+ygJ
fAUs3+yFKR/nVxQst6bawv4DZYgrFpCEtsYhXGoUrXv85TAN+BQIi91NrlvB3200
Ua4bKgbIWVp5WTW9rSTPR2doiG5qUWJaI7ahVoRs7qiahzB/mbhP/lV1Mogrfyft
UH8evklk0QdDl7TBzzTJTnEA1etaeIx8xMvd5S+Q/qhdJ/KlK3BvZSUkOipAZyPr
MGAbsvQjIgUB8yb+YkL/bCMegSxO8/FnKHThClJM+pbcQvw8og+IZLT+NEZuTEdU
THLXQ0Acnr6xsERhsudWeyS0HbT1p/kcRkmnno2Mz2N6f4BrvStiLlB1W2lvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUBwmuMZBzIDBhNYbLUeA/zI26GngwHwYDVR0j
BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp
WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw
MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y
QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXl0MB85WlpLgmAmMflB0EMKj0DmvSiTRGLxNtB/Q6/PxzsMEIGlL09JfZW1b
2qqi6aFirDskzjUQgoyOp0miGfZP3QC8uIQZ+g61qpMMZ8YPxjBP+jxZmneLVc2y
eCTaZzkwaOx0tmiuc3QYKCJNVWFIbHc3Ct2Rqo1Xd/1hv1bPh5EE0TGRN6NnXiox
hoZKSKwcRFkmKfkSpjmWtwAmL+h3xdktGpQxOhMHqX2q2iMobBMEDKX1A5FlXPkV
DQyB07Gz+VygvsWIht4uF6nqkGkxDFcwd23KtfBfpYTDNtUeEmDm6mZ01fEB4iTz
U4mjeU9oQraUbe8Z+hnoW1rwjg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 15:43:37 2026 by rpki-client