Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
File:                     470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json)
Hash identifier:          GnHFvD7Mr0IUzDRmQCSP2B7J9Me97iWg+/F9ld3JqCs=
Subject key identifier:   85:B5:20:98:C6:F3:0F:42:96:DC:B1:CA:EE:03:07:70:46:4B:47:DF
Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
Certificate issuer:       /CN=470AE1EB9714E43320F9D361336505142D7D836B
Certificate serial:       0F301F3F6A8B777A8B0CD5F75833046A26A950EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
Manifest number:          0149
Signing time:             Sun 22 Feb 2026 15:08:14 +0000
Manifest this update:     Sun 22 Feb 2026 15:03:14 +0000
Manifest next update:     Mon 23 Feb 2026 16:52:14 +0000
Files and hashes:         1: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=)
                          2: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=)
                          3: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: HSpTGMVyRuJR1ZzfRLnDbXpmqqr5MzUpz7ZPpW9PKyI=)
                          4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
                          rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 16:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:30:1f:3f:6a:8b:77:7a:8b:0c:d5:f7:58:33:04:6a:26:a9:50:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B
        Validity
            Not Before: Feb 22 15:03:14 2026 GMT
            Not After : Feb 23 16:52:14 2026 GMT
        Subject: CN=85B52098C6F30F4296DCB1CAEE030770464B47DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:90:f4:e5:62:25:23:4a:89:ed:93:13:78:
                    d9:0f:8a:fb:87:07:93:46:a6:c5:68:47:30:62:2a:
                    c0:7b:5f:06:de:bf:6b:da:e3:64:68:9d:ca:e0:e5:
                    86:50:e1:c1:ee:95:a0:0d:f9:c5:3b:ee:ba:27:29:
                    5e:10:ea:00:af:d9:c6:03:5c:1d:d6:02:95:b0:18:
                    41:d8:14:5c:12:af:c2:5c:8c:f2:fb:11:d7:5e:fd:
                    1c:d2:cd:ac:3a:9b:9a:04:2d:86:db:50:af:05:2f:
                    54:1f:1c:34:a3:85:75:cb:61:5d:8d:02:36:25:eb:
                    3c:e3:5c:b9:17:b4:55:78:7a:47:25:27:c3:43:98:
                    12:8d:ee:d4:b3:a7:a2:f7:5a:a1:88:23:e5:e6:cb:
                    9d:3a:bb:86:b4:17:20:c6:fd:aa:8a:5a:26:51:f4:
                    64:91:15:ec:99:39:a8:c0:64:a2:fa:4a:c1:81:ee:
                    e6:a8:db:23:c6:68:be:4b:1c:07:a5:19:6f:73:fb:
                    37:1d:94:43:5a:49:a3:bd:31:7d:97:4b:45:f2:c7:
                    0e:fc:c6:66:ad:bf:11:f3:f5:43:00:af:4e:3b:27:
                    0b:c0:69:b6:50:e1:c0:fa:9f:bf:f3:0a:f5:1a:6b:
                    59:ba:84:6e:cd:40:4f:f6:03:eb:99:46:07:5f:73:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B5:20:98:C6:F3:0F:42:96:DC:B1:CA:EE:03:07:70:46:4B:47:DF
            X509v3 Authority Key Identifier:
                keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:51:16:43:87:95:c6:0e:d7:d5:72:64:ad:90:8a:12:c0:
         e6:4f:11:47:0b:9c:c9:6d:94:0f:cd:fe:90:d8:dd:6f:a7:b8:
         b9:cc:43:6c:d2:e1:b8:3a:38:b4:5c:11:ad:b5:5a:b6:28:fe:
         35:fd:08:74:8b:bf:80:f9:73:fb:ba:4b:f9:ba:63:11:c1:75:
         c5:52:6e:da:1a:81:d0:e9:6e:28:63:77:46:ed:5b:1b:fe:78:
         70:60:1a:0e:f4:1a:f5:3c:2e:89:20:75:e2:3b:fd:4e:b7:23:
         b7:8c:f0:18:b3:47:74:4b:92:67:3d:39:47:56:43:74:bd:34:
         99:ee:cf:96:d2:a3:55:a9:a2:81:52:6a:a3:c0:f4:43:d6:4b:
         54:02:6d:fa:f9:ac:d4:85:14:fc:76:b6:d4:ef:8d:32:da:19:
         53:98:0e:23:71:b3:8b:3e:d2:4d:d1:b6:91:e7:02:ac:6a:2d:
         9c:6c:16:d5:93:b3:d6:52:bd:19:00:15:59:44:ed:b8:b9:76:
         82:0b:c3:45:e2:72:45:5b:d2:c7:b1:56:a1:a2:dc:f9:f2:da:
         6d:d0:0d:29:4d:2a:c7:29:72:65:37:d9:f5:37:d2:8c:81:52:
         cb:7d:19:e9:93:a5:d6:e7:27:95:de:74:f5:f8:c0:24:bb:3b:
         fe:7f:6c:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDzAfP2qLd3qLDNX3WDMEaiapUOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy
RDdEODM2QjAeFw0yNjAyMjIxNTAzMTRaFw0yNjAyMjMxNjUyMTRaMDMxMTAvBgNV
BAMTKDg1QjUyMDk4QzZGMzBGNDI5NkRDQjFDQUVFMDMwNzcwNDY0QjQ3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZZD05WIlI0qJ7ZMTeNkPivuH
B5NGpsVoRzBiKsB7Xwbev2va42Roncrg5YZQ4cHulaAN+cU77ronKV4Q6gCv2cYD
XB3WApWwGEHYFFwSr8JcjPL7Edde/RzSzaw6m5oELYbbUK8FL1QfHDSjhXXLYV2N
AjYl6zzjXLkXtFV4ekclJ8NDmBKN7tSzp6L3WqGII+Xmy506u4a0FyDG/aqKWiZR
9GSRFeyZOajAZKL6SsGB7uao2yPGaL5LHAelGW9z+zcdlENaSaO9MX2XS0Xyxw78
xmatvxHz9UMAr047JwvAabZQ4cD6n7/zCvUaa1m6hG7NQE/2A+uZRgdfcxcvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhbUgmMbzD0KW3LHK7gMHcEZLR98wHwYDVR0j
BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv
THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy
MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80
NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVmhRFkOHlcYO19VyZK2QihLA5k8RRwucyW2UD83+kNjdb6e4ucxDbNLhuDo4
tFwRrbVatij+Nf0IdIu/gPlz+7pL+bpjEcF1xVJu2hqB0OluKGN3Ru1bG/54cGAa
DvQa9TwuiSB14jv9Trcjt4zwGLNHdEuSZz05R1ZDdL00me7PltKjVamigVJqo8D0
Q9ZLVAJt+vms1IUU/Ha21O+NMtoZU5gOI3Gziz7STdG2kecCrGotnGwW1ZOz1lK9
GQAVWUTtuLl2ggvDReJyRVvSx7FWoaLc+fLabdANKU0qxylyZTfZ9TfSjIFSy30Z
6ZOl1ucnld509fjAJLs7/n9sjw==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:20 2026 by rpki-client