Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft
File:                     BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft (raw, json)
Hash identifier:          b8f/SRAs1pDtkuKzGUqoDZlGcE2NeP4R1ZoQQ+SeiXs=
Subject key identifier:   D5:6F:CC:D7:9B:A1:60:28:C1:19:F7:4F:E1:9A:59:84:A9:61:9E:9D
Authority key identifier: BD:33:22:3E:F2:A3:73:94:67:5D:7D:34:B5:C8:F3:27:DA:58:A7:6E
Certificate issuer:       /CN=BD33223EF2A37394675D7D34B5C8F327DA58A76E
Certificate serial:       4DFC256448B172EC8F1C910DAB64CD765B4B7CCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft
Manifest number:          CB
Signing time:             Tue 07 Apr 2026 14:15:22 +0000
Manifest this update:     Tue 07 Apr 2026 14:10:22 +0000
Manifest next update:     Wed 08 Apr 2026 17:56:22 +0000
Files and hashes:         1: 323830343a386630633a3a2f33322d313238203d3e20323733343634.roa (hash: yYw47TgaVmtOmfFRpM4vizV4A19jVR0QOmN2wiNSI7M=)
                          2: BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl (hash: y51fgiCQDdSMD9sGe+9/aWbyhSreX2ms/5uJzpx/tJQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl
                          rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 17:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fc:25:64:48:b1:72:ec:8f:1c:91:0d:ab:64:cd:76:5b:4b:7c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD33223EF2A37394675D7D34B5C8F327DA58A76E
        Validity
            Not Before: Apr  7 14:10:22 2026 GMT
            Not After : Apr  8 17:56:22 2026 GMT
        Subject: CN=D56FCCD79BA16028C119F74FE19A5984A9619E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:35:fe:f9:75:56:e5:65:af:94:37:7c:fc:
                    ae:44:7f:e2:4a:be:63:23:8b:5d:68:e2:3a:03:d9:
                    fb:40:a2:9f:cd:57:8c:ae:f1:62:c3:50:a3:ad:cf:
                    96:c5:5e:3e:ad:3e:e4:87:90:0a:b0:de:52:3c:22:
                    83:25:e5:19:a5:ff:0a:1f:74:e4:b6:2b:ee:26:2f:
                    34:1d:94:75:82:e9:bb:18:24:23:72:49:9b:fb:80:
                    ec:e6:52:d3:eb:c5:50:c2:3d:b9:a3:e8:f8:7d:9d:
                    86:54:10:28:58:d9:e5:68:4e:39:27:16:62:0c:7a:
                    fa:d9:0a:9e:e7:d5:9a:b4:c4:bd:c6:38:43:e5:b7:
                    f7:05:7c:88:76:ab:04:cc:a2:9b:f9:98:9b:61:2b:
                    1b:a7:7e:e8:9b:3c:c6:bd:b1:b1:e8:c2:9c:de:a7:
                    89:f5:d1:25:b8:be:5e:f9:c0:37:1d:3f:5a:6f:ca:
                    41:44:89:59:c6:a0:83:e4:1b:7e:d3:46:bf:11:3b:
                    b6:b2:48:e7:23:76:4c:4c:6a:14:04:41:b4:f8:3b:
                    cc:7c:f0:58:dd:b6:3e:7e:1f:be:92:29:ed:ad:0a:
                    7b:18:d7:62:31:9f:be:d5:a9:44:c2:2c:55:fa:e6:
                    5c:30:45:4b:0a:c3:06:16:0c:e4:2b:a7:20:c1:23:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6F:CC:D7:9B:A1:60:28:C1:19:F7:4F:E1:9A:59:84:A9:61:9E:9D
            X509v3 Authority Key Identifier:
                keyid:BD:33:22:3E:F2:A3:73:94:67:5D:7D:34:B5:C8:F3:27:DA:58:A7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD33223EF2A37394675D7D34B5C8F327DA58A76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/BD33223EF2A37394675D7D34B5C8F327DA58A76E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:51:61:b6:c0:4e:7e:90:1f:64:db:1c:2e:90:33:cb:a3:
         04:a5:e4:7a:8c:d1:a9:9c:01:c2:14:92:37:31:97:81:cc:dd:
         64:99:26:a3:77:8c:1e:07:0e:67:d9:13:10:c2:29:e1:b7:d0:
         b7:89:c6:33:95:3e:84:61:51:c0:64:aa:c7:6e:f5:e3:58:55:
         36:6f:aa:51:b9:dc:ed:db:95:8e:e1:bc:52:e6:71:bb:15:b7:
         a8:1a:e9:26:9d:e7:76:0e:81:e6:49:80:f3:d5:2d:1c:58:54:
         6c:f0:a8:c8:86:94:c3:f1:f8:35:8c:33:8b:80:a9:aa:28:a7:
         20:ec:c6:63:b6:42:68:d1:ac:9d:de:75:93:a8:22:0b:c0:36:
         00:8d:9f:ad:a4:92:a2:b7:b2:fb:7e:1d:e6:9c:98:12:e1:56:
         23:f3:7a:e1:39:04:fb:26:e1:1e:de:90:76:24:48:d4:7e:fe:
         91:78:d0:f4:22:6a:05:ef:8b:fd:75:91:c2:98:a9:22:3d:11:
         35:5f:4b:77:ce:2a:28:bb:4f:a7:2c:56:91:42:98:15:d4:2d:
         74:19:4b:1b:fd:7f:cf:ee:f5:68:dd:ff:11:0f:6c:dd:b9:51:
         c1:de:68:ae:67:a9:1b:60:2c:b1:75:05:9c:2b:15:0b:b4:d3:
         f5:f0:78:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTfwlZEixcuyPHJENq2TNdltLfM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQzMzIyM0VGMkEzNzM5NDY3NUQ3RDM0QjVDOEYzMjdE
QTU4QTc2RTAeFw0yNjA0MDcxNDEwMjJaFw0yNjA0MDgxNzU2MjJaMDMxMTAvBgNV
BAMTKEQ1NkZDQ0Q3OUJBMTYwMjhDMTE5Rjc0RkUxOUE1OTg0QTk2MTlFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXjX++XVW5WWvlDd8/K5Ef+JK
vmMji11o4joD2ftAop/NV4yu8WLDUKOtz5bFXj6tPuSHkAqw3lI8IoMl5Rml/wof
dOS2K+4mLzQdlHWC6bsYJCNySZv7gOzmUtPrxVDCPbmj6Ph9nYZUEChY2eVoTjkn
FmIMevrZCp7n1Zq0xL3GOEPlt/cFfIh2qwTMopv5mJthKxunfuibPMa9sbHowpze
p4n10SW4vl75wDcdP1pvykFEiVnGoIPkG37TRr8RO7aySOcjdkxMahQEQbT4O8x8
8Fjdtj5+H76SKe2tCnsY12Ixn77VqUTCLFX65lwwRUsKwwYWDOQrpyDBI6opAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1W/M15uhYCjBGfdP4ZpZhKlhnp0wHwYDVR0j
BBgwFoAUvTMiPvKjc5RnXX00tcjzJ9pYp24wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRThGMWdaYXZVWmUxdjJXRmRKb3R1S29NUGpHNXpMZ2RmekZEaE1WQmdn
VGQvMC9CRDMzMjIzRUYyQTM3Mzk0Njc1RDdEMzRCNUM4RjMyN0RBNThBNzZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMzMyMjNFRjJBMzczOTQ2
NzVEN0QzNEI1QzhGMzI3REE1OEE3NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RThGMWdaYXZVWmUxdjJXRmRKb3R1S29NUGpHNXpMZ2RmekZEaE1WQmdnVGQvMC9C
RDMzMjIzRUYyQTM3Mzk0Njc1RDdEMzRCNUM4RjMyN0RBNThBNzZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAptpRYbbATn6QH2TbHC6QM8ujBKXkeozRqZwBwhSSNzGXgczdZJkmo3eMHgcO
Z9kTEMIp4bfQt4nGM5U+hGFRwGSqx27141hVNm+qUbnc7duVjuG8UuZxuxW3qBrp
Jp3ndg6B5kmA89UtHFhUbPCoyIaUw/H4NYwzi4CpqiinIOzGY7ZCaNGsnd51k6gi
C8A2AI2fraSSorey+34d5pyYEuFWI/N64TkE+ybhHt6QdiRI1H7+kXjQ9CJqBe+L
/XWRwpipIj0RNV9Ld84qKLtPpyxWkUKYFdQtdBlLG/1/z+71aN3/EQ9s3blRwd5o
rmepG2AssXUFnCsVC7TT9fB4Pw==
-----END CERTIFICATE-----
Generated at Wed Apr 8 09:26:44 2026 by rpki-client