Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
File:                     3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft (raw, json)
Hash identifier:          l+WCXO/vXtffbKLtH9C77wyLVNAlLlc3nqEOO9jOkQM=
Subject key identifier:   3C:0D:67:0B:19:D0:8B:89:13:55:57:7D:F2:1C:87:72:8A:E1:30:98
Authority key identifier: 3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6
Certificate issuer:       /CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6
Certificate serial:       3F1CBB1BAE0F33251AFEFB28F6E71793E380C300
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
Manifest number:          12
Signing time:             Fri 26 Jun 2026 15:47:25 +0000
Manifest this update:     Fri 26 Jun 2026 15:42:25 +0000
Manifest next update:     Sat 27 Jun 2026 17:51:25 +0000
Files and hashes:         1: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl (hash: 445kbka/sDTsZpGoykfsyP31REe3QXYAB5ZcM1Q9o5g=)
                          2: 323830343a363137303a3a2f33322d3334203d3e20323639323334.roa (hash: GDWiVyYfYIGnY9YXPjOtHtg7fsHIeEu+qkoct3a9MEM=)
                          3: 34352e3138322e37362e302f32322d3234203d3e20323639323334.roa (hash: y6WkApazOcWL7P7yXx57R2acGoFqorCQklwtt2CakBE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl
                          rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 17:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:bb:1b:ae:0f:33:25:1a:fe:fb:28:f6:e7:17:93:e3:80:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6
        Validity
            Not Before: Jun 26 15:42:25 2026 GMT
            Not After : Jun 27 17:51:25 2026 GMT
        Subject: CN=3C0D670B19D08B891355577DF21C87728AE13098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:7b:30:ca:02:5a:70:68:26:06:5d:ca:33:
                    28:c1:5b:71:5e:c3:59:3a:4c:62:36:99:12:5f:47:
                    4c:cc:13:bc:9e:6e:6d:ce:d0:a9:de:8a:04:75:3b:
                    4f:9f:c2:8d:78:5f:4b:3c:7c:1e:39:c4:8a:1c:ad:
                    f9:1a:f9:ef:56:c5:60:1d:e9:41:bd:d2:57:c5:9a:
                    76:1c:b9:42:e7:e0:2a:2a:1e:4d:c2:df:04:68:6d:
                    a4:9e:94:0a:0d:91:3c:ef:1c:74:c7:63:2b:15:52:
                    e6:6c:66:83:ab:9a:cf:f7:32:e8:ee:13:a4:a5:66:
                    08:e0:39:af:31:6c:b9:c4:59:1c:0d:59:02:8b:09:
                    ca:1e:d3:04:d7:94:18:21:33:41:de:0e:4f:ae:b4:
                    f6:91:81:a8:44:0f:f0:14:e3:d9:11:3d:a4:35:10:
                    ff:2f:a7:33:d5:0a:12:f0:87:23:0d:5c:a2:1d:6f:
                    63:cd:d1:1b:0c:43:47:3a:3e:86:bc:d3:29:12:f3:
                    3f:5a:fe:f7:af:40:b4:d0:4d:97:d1:e7:c2:0b:32:
                    7b:0a:92:e7:f0:0f:0f:12:ce:61:f6:2c:88:4c:c9:
                    2d:eb:93:be:0e:f0:58:91:96:6c:62:df:71:8e:e5:
                    2b:17:95:c7:95:e7:26:e7:44:dd:8c:04:0f:c5:6e:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0D:67:0B:19:D0:8B:89:13:55:57:7D:F2:1C:87:72:8A:E1:30:98
            X509v3 Authority Key Identifier:
                keyid:3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:14:15:0d:e1:d0:91:f6:32:4e:54:f9:ff:38:e0:41:24:
         29:41:2f:0e:7c:62:61:9c:9f:e7:00:f5:1e:8a:de:8e:9f:24:
         08:2b:bd:87:6c:dc:11:2d:14:b4:64:9d:fc:d6:5b:8c:c1:cf:
         7d:61:b3:4c:af:a7:d9:ed:3f:56:5b:88:a6:d7:34:b8:9d:e7:
         a6:2d:32:c6:8f:b8:04:3d:9d:a4:0f:fe:71:76:aa:72:28:74:
         5c:58:61:8a:69:c6:ab:b1:61:0b:58:2d:20:5f:a3:51:ff:4b:
         77:8a:34:0a:d0:02:1a:b6:3f:ca:89:44:b5:c9:62:25:77:46:
         39:12:c1:cb:ae:c2:4a:ab:a7:5e:bb:71:80:f6:74:98:4e:15:
         f6:dd:5a:e5:e7:f2:43:c2:50:63:3e:ba:28:69:f3:fa:35:1f:
         84:e7:5b:6d:78:ca:21:23:ee:7e:61:39:0d:12:87:05:38:d0:
         c3:2a:b0:05:f9:c1:1f:7e:6f:0d:40:00:f4:67:d7:25:b1:6c:
         cf:bd:43:39:51:33:27:e7:1d:dd:7e:b8:21:32:9c:80:a5:60:
         6e:2e:15:db:d8:e1:27:be:19:e0:50:17:52:a3:32:a2:f9:80:
         db:84:08:d8:5a:c2:9c:a3:a1:2f:e5:24:ce:8e:49:46:b1:4a:
         ec:4c:5a:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPxy7G64PMyUa/vso9ucXk+OAwwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M2OEE5N0IyQzRBMDQ1NEY3OTREQkNCN0Y3MTI4OURC
MTcxQTdCNjAeFw0yNjA2MjYxNTQyMjVaFw0yNjA2MjcxNzUxMjVaMDMxMTAvBgNV
BAMTKDNDMEQ2NzBCMTlEMDhCODkxMzU1NTc3REYyMUM4NzcyOEFFMTMwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRXswygJacGgmBl3KMyjBW3Fe
w1k6TGI2mRJfR0zME7yebm3O0KneigR1O0+fwo14X0s8fB45xIocrfka+e9WxWAd
6UG90lfFmnYcuULn4CoqHk3C3wRobaSelAoNkTzvHHTHYysVUuZsZoOrms/3Muju
E6SlZgjgOa8xbLnEWRwNWQKLCcoe0wTXlBghM0HeDk+utPaRgahED/AU49kRPaQ1
EP8vpzPVChLwhyMNXKIdb2PN0RsMQ0c6Poa80ykS8z9a/vevQLTQTZfR58ILMnsK
kufwDw8SzmH2LIhMyS3rk74O8FiRlmxi33GO5SsXlceV5ybnRN2MBA/FbkyHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPA1nCxnQi4kTVVd98hyHcorhMJgwHwYDVR0j
BBgwFoAUPGipeyxKBFT3lNvLf3EonbFxp7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR
UVYvMC8zQzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDNjhBOTdCMkM0QTA0NTRG
Nzk0REJDQjdGNzEyODlEQjE3MUE3QjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlRUVYvMC8z
QzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfAQUFQ3h0JH2Mk5U+f844EEkKUEvDnxiYZyf5wD1Horejp8kCCu9h2zcES0U
tGSd/NZbjMHPfWGzTK+n2e0/VluIptc0uJ3npi0yxo+4BD2dpA/+cXaqcih0XFhh
imnGq7FhC1gtIF+jUf9Ld4o0CtACGrY/yolEtcliJXdGORLBy67CSqunXrtxgPZ0
mE4V9t1a5efyQ8JQYz66KGnz+jUfhOdbbXjKISPufmE5DRKHBTjQwyqwBfnBH35v
DUAA9GfXJbFsz71DOVEzJ+cd3X64ITKcgKVgbi4V29jhJ74Z4FAXUqMyovmA24QI
2FrCnKOhL+Ukzo5JRrFK7Exavg==
-----END CERTIFICATE-----
Generated at Sat Jun 27 12:10:46 2026 by rpki-client