Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
File:                     E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft (raw, json)
Hash identifier:          UQ/guk/HQ0003z3ghX1cOTS7hA4Tx7WswEJviMn9uws=
Subject key identifier:   D8:AB:4A:B9:78:F4:68:83:29:47:B7:52:7C:3D:50:FB:65:91:CD:16
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       03CA9A61E99803368A1494FE43D542570EC7DC17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
Manifest number:          0357
Signing time:             Wed 08 Apr 2026 00:04:44 +0000
Manifest this update:     Tue 07 Apr 2026 23:59:44 +0000
Manifest next update:     Thu 09 Apr 2026 02:26:44 +0000
Files and hashes:         1: 34352e3232362e3132302e302f32322d3234203d3e20323636343333.roa (hash: FxKFICEQyRLWaja1zhuNJ5BlZPLEz3p9yAyXQ7ftl64=)
                          2: 3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (hash: 0+nFMdCLym7Rsl6HvblfjhZQUqbxHP0qWYbL35iKgYc=)
                          3: 3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (hash: n8S2COXT7FsJis/4Ekfbx3z3cwFdOm+NqrDeR9NrRhU=)
                          4: 3137302e38322e342e302f32322d3234203d3e20323636343333.roa (hash: b/Zm6CJPfwWN47+L36utGZhmWMOak2gazTH2hP371BA=)
                          5: 323830343a333762633a3a2f33322d3438203d3e20323636343333.roa (hash: C8YJW+N8NJZjj/oZjIZOUPg47Ky3lJ6FSdFbH3qWvZA=)
                          6: E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl (hash: lE2hGWtu56oTR8GG9p31nS20FER5Lptqwtr9qOTUw4c=)
                          7: 3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (hash: UxFzZ8WfxRekPlsHdoXcpFmzdBByfdNKSoJ2Ksi0fUY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 02:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ca:9a:61:e9:98:03:36:8a:14:94:fe:43:d5:42:57:0e:c7:dc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Apr  7 23:59:44 2026 GMT
            Not After : Apr  9 02:26:44 2026 GMT
        Subject: CN=D8AB4AB978F468832947B7527C3D50FB6591CD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:97:be:07:0c:06:3a:71:64:4b:4c:57:6a:
                    b0:31:68:7f:76:6e:be:51:4e:82:db:83:20:13:c0:
                    0b:3d:4d:2f:81:d8:4a:40:0f:a0:1f:17:71:43:30:
                    fd:1c:6c:cd:6d:31:81:96:cf:a3:48:37:4a:ff:fa:
                    b9:33:ea:c3:ae:bd:e4:5f:d3:db:42:29:7e:6a:b1:
                    8c:f1:9b:e3:f7:22:18:cd:34:49:4d:bd:58:76:d3:
                    8e:0c:6e:96:41:5a:00:69:79:f0:cf:d5:dd:fe:85:
                    61:c4:b2:0c:6a:82:9e:45:2b:44:b4:48:bb:cd:3e:
                    51:35:f9:65:fe:91:19:b5:30:97:36:05:27:af:6c:
                    8a:e3:85:62:1d:c5:3b:fc:bf:ce:20:39:9d:a5:8b:
                    c8:a2:78:b6:39:fa:a7:f6:2c:98:90:9d:fe:db:d7:
                    9f:08:27:0e:6d:38:75:83:83:7f:7e:4a:de:01:13:
                    71:90:d9:ce:90:95:0e:4f:b1:52:e4:55:2a:9e:d5:
                    e1:bd:56:be:2f:ba:54:b8:80:7e:7b:1d:d8:4a:21:
                    67:38:c2:e0:88:53:56:ab:a5:f8:6a:5b:ba:3c:33:
                    96:76:af:e2:45:22:b6:91:8b:a2:ff:cd:d6:b5:d7:
                    2d:8d:58:fa:96:40:1e:9d:36:9f:d7:9a:7d:e3:88:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:4A:B9:78:F4:68:83:29:47:B7:52:7C:3D:50:FB:65:91:CD:16
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:3a:12:0e:52:9e:97:9f:c2:bc:d0:79:3a:65:68:df:f5:
         a4:cd:9a:85:16:ca:04:da:81:57:0f:09:2e:5f:e2:90:5b:7c:
         39:49:7d:bd:96:73:74:fa:19:97:38:9b:66:0b:ad:29:6c:68:
         f5:18:db:24:f1:80:5f:cf:5b:3c:10:ae:d6:d4:60:14:b7:7d:
         0a:aa:ac:cd:f6:a4:3c:8d:a0:8b:84:eb:3b:a0:36:07:20:99:
         4c:01:3a:38:15:44:2a:fc:aa:26:fc:3d:d6:3f:0f:50:0f:16:
         9d:92:a8:2d:d8:f2:1f:fb:cb:83:d0:11:da:b8:f0:61:9a:b0:
         4b:c9:1d:f6:8b:50:9c:6a:cf:64:88:a8:a2:7e:ac:11:ef:f5:
         3f:91:ef:8a:e8:dd:e8:af:b1:16:49:df:59:47:00:22:a5:e7:
         fc:55:0f:1c:9e:a2:5e:4d:e1:33:4e:ba:54:88:df:e1:06:a1:
         0a:a0:da:bb:b1:2a:03:0f:77:c8:ba:09:f2:7e:21:fd:03:64:
         71:38:03:4b:b6:f9:1e:0e:10:f4:82:f0:cc:76:91:16:cb:cd:
         5d:32:23:01:a0:39:08:d5:e6:0a:72:06:9a:f4:c7:24:c7:8a:
         63:c9:cb:f6:74:6a:f0:e5:fe:1d:9c:22:c2:f5:04:db:b9:50:
         c6:69:b3:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA8qaYemYAzaKFJT+Q9VCVw7H3BcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCMEZBMTI0QjNCN0QxOTlFNkEwOTlGMDU3Nzc2MzFB
OUYyQzEwMjAeFw0yNjA0MDcyMzU5NDRaFw0yNjA0MDkwMjI2NDRaMDMxMTAvBgNV
BAMTKEQ4QUI0QUI5NzhGNDY4ODMyOTQ3Qjc1MjdDM0Q1MEZCNjU5MUNEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEpe+BwwGOnFkS0xXarAxaH92
br5RToLbgyATwAs9TS+B2EpAD6AfF3FDMP0cbM1tMYGWz6NIN0r/+rkz6sOuveRf
09tCKX5qsYzxm+P3IhjNNElNvVh2044MbpZBWgBpefDP1d3+hWHEsgxqgp5FK0S0
SLvNPlE1+WX+kRm1MJc2BSevbIrjhWIdxTv8v84gOZ2li8iieLY5+qf2LJiQnf7b
158IJw5tOHWDg39+St4BE3GQ2c6QlQ5PsVLkVSqe1eG9Vr4vulS4gH57HdhKIWc4
wuCIU1arpfhqW7o8M5Z2r+JFIraRi6L/zda11y2NWPqWQB6dNp/Xmn3jiJhbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2KtKuXj0aIMpR7dSfD1Q+2WRzRYwHwYDVR0j
BBgwFoAU5LD6Eks7fRmeagmfBXd2ManywQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC9FNEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjBGQTEyNEIzQjdEMTk5
RTZBMDk5RjA1Nzc3NjMxQTlGMkMxMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5VWYvMC9F
NEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALCc6Eg5SnpefwrzQeTplaN/1pM2ahRbKBNqBVw8JLl/ikFt8OUl9vZZzdPoZ
lzibZgutKWxo9RjbJPGAX89bPBCu1tRgFLd9CqqszfakPI2gi4TrO6A2ByCZTAE6
OBVEKvyqJvw91j8PUA8WnZKoLdjyH/vLg9AR2rjwYZqwS8kd9otQnGrPZIioon6s
Ee/1P5Hviujd6K+xFknfWUcAIqXn/FUPHJ6iXk3hM066VIjf4QahCqDau7EqAw93
yLoJ8n4h/QNkcTgDS7b5Hg4Q9ILwzHaRFsvNXTIjAaA5CNXmCnIGmvTHJMeKY8nL
9nRq8OX+HZwiwvUE27lQxmmzjw==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:47:49 2026 by rpki-client