Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
File:                     020AFECF727CE88A459FCBC17D694507CE9ADE22.mft (raw, json)
Hash identifier:          A9ihPWt9llcw+6qcatKR4CMa00lloM+dEZ4+CubuZtg=
Subject key identifier:   86:77:2A:A1:7D:E1:B1:54:9F:AB:2C:16:68:60:14:A0:4F:20:08:42
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Certificate issuer:       /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial:       3E3C528E0196738B14ADBBB8E4879ADC1A0F70E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
Manifest number:          027C
Signing time:             Tue 07 Apr 2026 16:41:53 +0000
Manifest this update:     Tue 07 Apr 2026 16:36:53 +0000
Manifest next update:     Wed 08 Apr 2026 19:43:53 +0000
Files and hashes:         1: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: JSrN2QrOp4mvWs4tfdMlhACA5kJW39lUGtJvvCvm+W0=)
                          2: 020AFECF727CE88A459FCBC17D694507CE9ADE22.crl (hash: QCczmpxZ0tknfI/Zdb9bgO5LUETbYKrU8PkICNyI4hA=)
                          3: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: VGZMBxywOT6eMn/obggfUBg48R1BMRQHc1qiRhOgaq4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
                          rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3c:52:8e:01:96:73:8b:14:ad:bb:b8:e4:87:9a:dc:1a:0f:70:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
        Validity
            Not Before: Apr  7 16:36:53 2026 GMT
            Not After : Apr  8 19:43:53 2026 GMT
        Subject: CN=86772AA17DE1B1549FAB2C16686014A04F200842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:2f:0d:fa:eb:ad:b5:35:4a:e1:93:7b:5b:
                    94:31:fa:de:7a:26:cf:98:b0:90:82:68:07:6c:ea:
                    58:8b:a3:43:ac:d9:d5:c2:92:99:ff:53:d6:c1:92:
                    50:1b:e8:21:7a:1c:e3:75:7f:b7:17:01:19:3d:65:
                    7f:d3:0f:39:42:f4:68:b0:ee:79:9b:69:da:1a:7d:
                    68:c8:f1:e3:7a:47:7c:3d:3f:0d:66:4c:6e:fb:e9:
                    75:58:ef:f7:b4:03:b6:ee:a1:fe:4d:3f:cb:57:f5:
                    5a:f7:c9:26:9b:e2:ce:19:4e:87:53:2d:10:8b:8b:
                    a7:1a:ae:f0:f5:a0:56:0f:11:e4:f8:62:bc:ee:eb:
                    8d:01:86:3d:da:be:6b:48:42:d7:ab:8f:80:00:44:
                    1f:f0:3d:68:00:88:4b:fb:2a:ca:14:c0:81:9f:a1:
                    18:07:dc:6c:54:84:5a:1d:fe:0c:a1:23:b2:35:88:
                    39:f3:04:8a:4a:7a:5a:3f:c3:c9:35:ec:21:77:ed:
                    a0:b7:cf:42:2f:43:cd:56:b9:41:6b:8f:15:23:cf:
                    32:6f:bb:9e:f8:c3:e1:e7:8b:3c:07:7f:21:87:37:
                    b9:52:d5:7f:59:fd:f6:ea:e8:54:da:d8:0e:04:e9:
                    a6:22:8c:0b:2f:04:a5:8d:d2:40:54:a2:be:67:a9:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:77:2A:A1:7D:E1:B1:54:9F:AB:2C:16:68:60:14:A0:4F:20:08:42
            X509v3 Authority Key Identifier:
                keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:42:0c:da:8e:34:c3:65:e0:8a:96:60:ba:df:7f:7d:e5:
         4b:e7:62:29:73:cf:fa:4c:9c:2b:ed:24:eb:3f:0a:f6:0d:a7:
         6f:e1:fb:f6:b7:e1:9d:ce:0e:29:ac:15:ae:ca:f3:7e:a8:61:
         50:41:fe:5a:ed:bd:90:1b:97:18:ae:e6:46:10:0a:9b:19:df:
         f0:af:e3:51:d5:4a:be:28:c9:cb:31:f5:7b:2d:aa:f3:92:bc:
         e7:d8:3d:87:6f:8a:a3:29:c5:e9:ca:f6:fc:92:fe:c4:68:90:
         9a:e9:f7:28:b7:d1:45:8a:3f:57:64:9b:94:92:f2:a3:7a:f7:
         aa:55:45:47:b3:5e:8b:98:95:5c:1d:2e:d9:5e:fc:69:87:b8:
         ab:1c:80:cc:6b:37:3a:5c:ce:9a:88:c4:fb:42:4a:78:4a:05:
         ed:26:4b:c7:f7:f7:9c:1d:a1:33:b8:dd:a9:ec:b9:52:d7:43:
         a6:6e:f4:cd:2b:09:c2:da:d5:a7:27:87:75:98:a9:d4:e7:8c:
         77:01:d6:9c:c1:a0:71:90:e8:cb:8e:b4:a4:6b:7c:03:ab:0e:
         da:3a:f3:90:0c:2e:ce:e0:a6:1c:aa:6c:28:64:76:19:48:59:
         df:b7:9a:d7:c0:7d:10:26:68:1e:ee:b4:79:cb:89:aa:de:da:
         3b:6c:8a:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPjxSjgGWc4sUrbu45Iea3BoPcOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIwQUZFQ0Y3MjdDRTg4QTQ1OUZDQkMxN0Q2OTQ1MDdD
RTlBREUyMjAeFw0yNjA0MDcxNjM2NTNaFw0yNjA0MDgxOTQzNTNaMDMxMTAvBgNV
BAMTKDg2NzcyQUExN0RFMUIxNTQ5RkFCMkMxNjY4NjAxNEEwNEYyMDA4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTC8N+uuttTVK4ZN7W5Qx+t56
Js+YsJCCaAds6liLo0Os2dXCkpn/U9bBklAb6CF6HON1f7cXARk9ZX/TDzlC9Giw
7nmbadoafWjI8eN6R3w9Pw1mTG776XVY7/e0A7buof5NP8tX9Vr3ySab4s4ZTodT
LRCLi6carvD1oFYPEeT4Yrzu640Bhj3avmtIQterj4AARB/wPWgAiEv7KsoUwIGf
oRgH3GxUhFod/gyhI7I1iDnzBIpKelo/w8k17CF37aC3z0IvQ81WuUFrjxUjzzJv
u574w+HnizwHfyGHN7lS1X9Z/fbq6FTa2A4E6aYijAsvBKWN0kBUor5nqethAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhncqoX3hsVSfqywWaGAUoE8gCEIwHwYDVR0j
BBgwFoAUAgr+z3J86IpFn8vBfWlFB86a3iIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURnOFdHWlA0R0JzeGJZVTI1TnBIb3EyTkE0RzJ0Nlh5QjN6YjJDZWdu
YUYvMC8wMjBBRkVDRjcyN0NFODhBNDU5RkNCQzE3RDY5NDUwN0NFOUFERTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMEFGRUNGNzI3Q0U4OEE0
NTlGQ0JDMTdENjk0NTA3Q0U5QURFMjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RURnOFdHWlA0R0JzeGJZVTI1TnBIb3EyTkE0RzJ0Nlh5QjN6YjJDZWduYUYvMC8w
MjBBRkVDRjcyN0NFODhBNDU5RkNCQzE3RDY5NDUwN0NFOUFERTIyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeg1CDNqONMNl4IqWYLrff33lS+diKXPP+kycK+0k6z8K9g2nb+H79rfhnc4O
KawVrsrzfqhhUEH+Wu29kBuXGK7mRhAKmxnf8K/jUdVKvijJyzH1ey2q85K859g9
h2+KoynF6cr2/JL+xGiQmun3KLfRRYo/V2SblJLyo3r3qlVFR7Nei5iVXB0u2V78
aYe4qxyAzGs3OlzOmojE+0JKeEoF7SZLx/f3nB2hM7jdqey5UtdDpm70zSsJwtrV
pyeHdZip1OeMdwHWnMGgcZDoy460pGt8A6sO2jrzkAwuzuCmHKpsKGR2GUhZ37ea
18B9ECZoHu60ecuJqt7aO2yK6Q==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:33:56 2026 by rpki-client