Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
File:                     C4A0C992AC81775846EF3EACD736353F739F7D8D.mft (raw, json)
Hash identifier:          8LcS/zhp9WD2cooa1b2NpmCH/lGbOQDgbxks1AJv83w=
Subject key identifier:   69:00:16:56:6F:E2:37:0A:29:46:8B:AB:84:1E:C8:68:31:06:0A:1C
Authority key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D
Certificate issuer:       /CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
Certificate serial:       35BE7AAB0D879F8F46528D7D247333F8BE3DD4DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
Manifest number:          01E2
Signing time:             Wed 08 Apr 2026 10:58:57 +0000
Manifest this update:     Wed 08 Apr 2026 10:53:57 +0000
Manifest next update:     Thu 09 Apr 2026 13:39:57 +0000
Files and hashes:         1: 323830343a6531633a3a2f33322d3334203d3e203532353435.roa (hash: Y+Nm9Qg5bdUyRGd6aV5jpXl7oAxM5JXbGjkTuIUfvag=)
                          2: 3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (hash: sPmYwrleYk60iVzRKjEPkW2mXoJ21mRmEiFeQ8dlLWw=)
                          3: 3133312e37322e34382e302f32322d3234203d3e203532353435.roa (hash: Bb0kJTvT13zXjhXQKAhJWgr/b2sBD6PguhCL0LmXPFc=)
                          4: 323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (hash: UltvwK1IjkiZQh4BCvjHwbqzp4fVl0TTCRXlrGrBNz4=)
                          5: C4A0C992AC81775846EF3EACD736353F739F7D8D.crl (hash: voELT3jHkFh9Jj7aPeIBYwj9nCgtZGCvLN3aDwyhECA=)
                          6: 3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (hash: 65gA/77fIfi/AzedgoYOwttHc1VkZPbASGxxcWoce2U=)
                          7: 3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (hash: ZoebQ8nWQa3jdbb3EtwGSfMgCsFTKXtcv2/F7kCqlmY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:7a:ab:0d:87:9f:8f:46:52:8d:7d:24:73:33:f8:be:3d:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
        Validity
            Not Before: Apr  8 10:53:57 2026 GMT
            Not After : Apr  9 13:39:57 2026 GMT
        Subject: CN=690016566FE2370A29468BAB841EC86831060A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:92:0c:7a:15:85:d0:12:35:4c:97:98:d9:
                    1f:e1:3a:1b:50:e8:7f:f2:57:1b:5f:a9:df:a8:9c:
                    6e:49:6c:30:ed:b6:e0:33:24:83:c0:4f:2c:fe:fc:
                    53:9a:cd:c6:4e:26:0e:5b:cc:e2:e4:a1:42:69:8b:
                    79:ac:c9:6d:12:e7:5c:73:28:90:64:cd:cd:d8:e7:
                    5f:df:d5:69:8d:e8:dd:19:b5:22:34:d7:49:56:d8:
                    71:29:33:7b:c7:c8:84:f5:85:b7:4e:db:1f:96:5d:
                    a5:e8:f2:0b:c7:d0:ec:4f:a2:85:a3:f6:b1:47:20:
                    33:06:22:5a:42:ae:3e:fa:ba:95:52:fb:27:ae:c8:
                    dc:54:c3:da:f5:4a:65:45:68:e1:dc:c5:30:78:fc:
                    d6:51:c6:84:d7:ca:dd:5e:db:f0:f9:fe:f1:f9:3c:
                    8c:c2:b9:e3:33:4f:49:3c:f5:39:9b:a5:d7:df:50:
                    5a:40:b6:3a:4f:c0:69:22:9c:c2:2f:26:02:28:5f:
                    f1:72:c2:31:c0:a9:c2:f8:6c:a4:02:62:fa:4f:18:
                    ae:ee:69:4f:61:f2:8a:7f:94:1b:42:37:b2:92:69:
                    48:be:89:20:fd:9f:bd:54:2e:66:4c:33:02:a7:9f:
                    dd:8d:16:af:fd:02:be:32:38:2d:c8:c7:29:db:92:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:00:16:56:6F:E2:37:0A:29:46:8B:AB:84:1E:C8:68:31:06:0A:1C
            X509v3 Authority Key Identifier:
                keyid:C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4b:27:fe:d1:da:da:04:6d:b4:12:06:4b:3e:90:97:e8:85:
         80:b6:63:00:9e:5e:b8:3c:2f:8d:c5:28:22:38:ef:0b:0d:9d:
         ed:96:bf:f7:9d:a2:82:08:28:06:e4:d0:0b:b0:23:2d:bd:19:
         71:ce:d6:f0:b6:93:7e:00:03:a9:b3:8b:d9:e3:83:da:8c:6a:
         5c:6c:98:07:88:7b:8c:6b:c7:a6:f8:90:01:24:21:d8:a7:b8:
         83:dd:c4:fd:68:1f:e0:a9:cd:3a:83:b2:0e:0d:11:c9:23:96:
         a7:e9:76:65:9b:66:39:e1:5e:bc:02:7f:38:38:c4:5e:c9:54:
         23:07:2d:f9:a2:e7:b5:44:f1:86:56:40:1e:87:28:b5:bf:75:
         18:b9:3f:2c:a7:82:90:87:92:1a:96:1c:8c:91:9d:6b:5b:d2:
         fe:81:53:ca:94:52:76:50:1d:34:ce:28:dd:fd:4a:21:36:92:
         83:0c:bb:80:77:46:84:ad:ff:7f:b1:25:de:a5:98:91:b8:db:
         0d:dc:8a:a8:34:89:ac:0d:04:f8:18:19:18:fb:a6:02:d2:1c:
         7e:72:c5:f8:49:20:ca:7d:99:25:10:ab:06:40:e4:74:f3:34:
         6c:57:01:45:69:f8:54:2b:cd:44:ad:1e:f4:2a:5c:2a:15:4a:
         22:9b:9a:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNb56qw2Hn49GUo19JHMz+L491NswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRBMEM5OTJBQzgxNzc1ODQ2RUYzRUFDRDczNjM1M0Y3
MzlGN0Q4RDAeFw0yNjA0MDgxMDUzNTdaFw0yNjA0MDkxMzM5NTdaMDMxMTAvBgNV
BAMTKDY5MDAxNjU2NkZFMjM3MEEyOTQ2OEJBQjg0MUVDODY4MzEwNjBBMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviJIMehWF0BI1TJeY2R/hOhtQ
6H/yVxtfqd+onG5JbDDttuAzJIPATyz+/FOazcZOJg5bzOLkoUJpi3msyW0S51xz
KJBkzc3Y51/f1WmN6N0ZtSI010lW2HEpM3vHyIT1hbdO2x+WXaXo8gvH0OxPooWj
9rFHIDMGIlpCrj76upVS+yeuyNxUw9r1SmVFaOHcxTB4/NZRxoTXyt1e2/D5/vH5
PIzCueMzT0k89TmbpdffUFpAtjpPwGkinMIvJgIoX/FywjHAqcL4bKQCYvpPGK7u
aU9h8op/lBtCN7KSaUi+iSD9n71ULmZMMwKnn92NFq/9Ar4yOC3Ixynbkh2dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaQAWVm/iNwopRourhB7IaDEGChwwHwYDVR0j
BBgwFoAUxKDJkqyBd1hG7z6s1zY1P3OffY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMC9DNEEwQzk5MkFDODE3NzU4NDZFRjNFQUNENzM2MzUzRjczOUY3RDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QTBDOTkyQUM4MTc3NTg0
NkVGM0VBQ0Q3MzYzNTNGNzM5RjdEOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFxeHgvMC9D
NEEwQzk5MkFDODE3NzU4NDZFRjNFQUNENzM2MzUzRjczOUY3RDhELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL0sn/tHa2gRttBIGSz6Ql+iFgLZjAJ5euDwvjcUoIjjvCw2d7Za/952igggo
BuTQC7AjLb0Zcc7W8LaTfgADqbOL2eOD2oxqXGyYB4h7jGvHpviQASQh2Ke4g93E
/Wgf4KnNOoOyDg0RySOWp+l2ZZtmOeFevAJ/ODjEXslUIwct+aLntUTxhlZAHoco
tb91GLk/LKeCkIeSGpYcjJGda1vS/oFTypRSdlAdNM4o3f1KITaSgwy7gHdGhK3/
f7El3qWYkbjbDdyKqDSJrA0E+BgZGPumAtIcfnLF+Ekgyn2ZJRCrBkDkdPM0bFcB
RWn4VCvNRK0e9CpcKhVKIpuauA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:34:55 2026 by rpki-client