Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
File:                     0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json)
Hash identifier:          Dhy/sw13j4S2g76WiPlqkx1nzNJKDIDrUnqw7ytD6U0=
Subject key identifier:   71:BE:8F:A6:5E:A8:0F:36:D3:8A:0D:94:57:06:2B:ED:0D:64:68:A7
Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
Certificate issuer:       /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
Certificate serial:       6C9C95B28DA4A279C8E8988505C5F144DF240CCD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
Manifest number:          0101
Signing time:             Tue 07 Apr 2026 22:01:39 +0000
Manifest this update:     Tue 07 Apr 2026 21:56:39 +0000
Manifest next update:     Wed 08 Apr 2026 23:33:39 +0000
Files and hashes:         1: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: VAJx91Iglaj8A7quD884quFG+9PHI+x2CEcnnyqslDg=)
                          2: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 23:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9c:95:b2:8d:a4:a2:79:c8:e8:98:85:05:c5:f1:44:df:24:0c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
        Validity
            Not Before: Apr  7 21:56:39 2026 GMT
            Not After : Apr  8 23:33:39 2026 GMT
        Subject: CN=71BE8FA65EA80F36D38A0D9457062BED0D6468A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:a4:37:30:b6:b9:fa:5d:3d:22:db:b1:be:
                    4e:bc:4a:e5:1d:64:73:2e:ba:f7:c2:66:75:2d:da:
                    ec:e5:28:a5:8d:a7:2a:7f:43:d1:78:44:c8:5a:d2:
                    13:66:57:16:e1:2e:db:63:7f:b1:1c:ef:84:d3:02:
                    ce:bb:d5:26:62:4c:84:09:8a:35:cb:a7:8a:22:03:
                    d0:c7:b1:b8:ec:60:eb:47:61:ac:f3:07:ec:47:fe:
                    94:aa:f4:67:75:f4:52:19:cc:16:7d:5b:55:54:d3:
                    49:7b:bf:9b:c1:8f:da:4e:71:a6:0e:26:57:d5:c6:
                    89:61:40:fe:91:a0:3d:a4:d1:21:a6:d1:12:8b:8f:
                    f0:45:e6:06:e7:1d:e9:03:43:3c:db:2c:97:3a:09:
                    6f:2d:4a:62:72:01:cf:37:d0:de:25:31:1a:d4:9b:
                    82:1a:b2:a4:94:d0:99:62:9a:be:13:28:fd:8e:16:
                    15:39:7e:ee:b8:7d:6e:c5:a6:e1:19:6f:55:16:6d:
                    0b:2f:4b:0b:b1:c8:3d:ef:c7:9e:21:a5:51:c5:7e:
                    1f:61:91:80:d8:ed:e9:ea:cd:9f:6c:39:b4:69:52:
                    75:d9:e7:dd:c1:12:a4:e5:b3:e7:cb:d1:ea:da:fb:
                    db:15:33:9a:24:94:67:1d:ab:b9:93:df:c9:64:d0:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BE:8F:A6:5E:A8:0F:36:D3:8A:0D:94:57:06:2B:ED:0D:64:68:A7
            X509v3 Authority Key Identifier:
                keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:a2:e5:47:22:23:d6:8f:e6:2f:a2:c7:8a:5b:a8:b0:3b:
         8a:f5:99:b9:d7:82:ea:75:45:d6:ac:5d:89:71:2f:22:9e:e2:
         b5:33:c0:59:33:9d:c9:77:ac:f4:eb:7e:ea:a0:54:19:13:e9:
         15:0d:c6:8e:05:7e:e0:88:53:04:9a:92:d3:16:62:d1:1e:ed:
         4f:6a:11:37:d5:14:bf:8e:4b:99:0c:90:17:4d:b1:7d:02:6f:
         86:76:3e:ac:9a:e7:50:eb:a7:89:5f:44:c8:e1:e8:86:23:70:
         ef:dd:6b:50:4c:5e:60:d2:cd:a1:3e:f8:e6:04:eb:84:25:a6:
         ff:14:db:a6:50:71:39:88:d3:30:c6:16:21:d1:b3:19:90:50:
         8b:1b:d9:d6:42:6c:ac:32:73:91:5a:be:ca:bf:2c:e6:eb:bb:
         df:05:75:35:5a:5a:b0:0a:83:d5:a8:3e:fb:cb:11:2d:aa:fe:
         bf:a1:f5:f8:95:f0:13:c0:3f:e6:87:db:47:55:68:cf:9f:ec:
         d2:01:d8:3b:19:4e:f3:63:dd:a5:53:80:2b:90:b6:b5:17:25:
         78:ef:b2:bd:08:a7:e7:a2:df:ef:e4:09:dd:6a:44:ac:f6:37:
         cb:5c:29:e9:78:2d:19:81:7c:6e:a9:95:37:31:9f:f5:53:d7:
         7a:e8:5e:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbJyVso2konnI6JiFBcXxRN8kDM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJGMjg0MUZBMjMzNkE3QzhCRDE5MkJDOTM1RjhGM0E1
M0Y3RjBGOTAeFw0yNjA0MDcyMTU2MzlaFw0yNjA0MDgyMzMzMzlaMDMxMTAvBgNV
BAMTKDcxQkU4RkE2NUVBODBGMzZEMzhBMEQ5NDU3MDYyQkVEMEQ2NDY4QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfKQ3MLa5+l09Ituxvk68SuUd
ZHMuuvfCZnUt2uzlKKWNpyp/Q9F4RMha0hNmVxbhLttjf7Ec74TTAs671SZiTIQJ
ijXLp4oiA9DHsbjsYOtHYazzB+xH/pSq9Gd19FIZzBZ9W1VU00l7v5vBj9pOcaYO
JlfVxolhQP6RoD2k0SGm0RKLj/BF5gbnHekDQzzbLJc6CW8tSmJyAc830N4lMRrU
m4IasqSU0Jlimr4TKP2OFhU5fu64fW7FpuEZb1UWbQsvSwuxyD3vx54hpVHFfh9h
kYDY7enqzZ9sObRpUnXZ593BEqTls+fL0era+9sVM5oklGcdq7mT38lk0Os5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcb6Ppl6oDzbTig2UVwYr7Q1kaKcwHwYDVR0j
BBgwFoAUC/KEH6IzanyL0ZK8k1+POlP38PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN
dVgvMC8wQkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCRjI4NDFGQTIzMzZBN0M4
QkQxOTJCQzkzNUY4RjNBNTNGN0YwRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMC8w
QkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbOWi5UciI9aP5i+ix4pbqLA7ivWZudeC6nVF1qxdiXEvIp7itTPAWTOdyXes
9Ot+6qBUGRPpFQ3GjgV+4IhTBJqS0xZi0R7tT2oRN9UUv45LmQyQF02xfQJvhnY+
rJrnUOuniV9EyOHohiNw791rUExeYNLNoT745gTrhCWm/xTbplBxOYjTMMYWIdGz
GZBQixvZ1kJsrDJzkVq+yr8s5uu73wV1NVpasAqD1ag++8sRLar+v6H1+JXwE8A/
5ofbR1Voz5/s0gHYOxlO82PdpVOAK5C2tRcleO+yvQin56Lf7+QJ3WpErPY3y1wp
6XgtGYF8bqmVNzGf9VPXeuheJw==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:37:47 2026 by rpki-client