Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          XdTD4eiE+/DcgMPIUezZ7EoPG1FJBG1ZiEwiyPOed9k=
Subject key identifier:   37:9D:C9:23:48:92:F9:9B:4C:C1:0C:B1:D0:3F:F1:FF:07:A0:7F:02
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       20D2CE30AF68CB9A76C46AA738080FBE5F4340D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          02F9
Signing time:             Sun 23 Aug 2026 21:15:01 +0000
Manifest this update:     Sun 23 Aug 2026 21:10:01 +0000
Manifest next update:     Mon 24 Aug 2026 23:27:01 +0000
Files and hashes:         1: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: il53B7Q73jNFlH7g51wKgGiNgid+xMbJfds7WZ0O2Bg=)
                          2: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: p+UFfhkBAnWncsui85kUuhM0+jqknevxzdqYB/fmK3s=)
                          3: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=)
                          4: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: dFZ0LGf9VUQmelCd2T2ZnwoXRmTaX8jDdO8dHAjtnkk=)
                          5: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=)
                          6: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM=)
                          7: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: /tPewUU55btnsY96egOZeIv6Axo6ZopDItU7TlMFrn4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d2:ce:30:af:68:cb:9a:76:c4:6a:a7:38:08:0f:be:5f:43:40:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Aug 23 21:10:01 2026 GMT
            Not After : Aug 24 23:27:01 2026 GMT
        Subject: CN=379DC9234892F99B4CC10CB1D03FF1FF07A07F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:ae:a1:97:8c:92:90:8c:17:46:cb:d0:68:
                    1e:52:f7:db:78:3a:b2:42:41:13:aa:e3:10:71:7d:
                    15:f3:a2:6a:19:5e:ae:0c:79:9f:da:ed:bc:29:1e:
                    39:ad:a0:9d:bf:77:b1:4f:cb:32:44:83:64:21:18:
                    79:9d:19:1f:34:c3:9c:ab:2a:ee:03:ff:d2:39:f8:
                    ce:35:c4:8b:8a:5e:63:7b:df:f7:97:6a:2a:d0:af:
                    e0:13:87:67:48:90:76:18:d3:bd:f8:13:81:28:01:
                    95:bd:29:00:74:16:92:a8:c9:f5:c1:8d:9c:1e:06:
                    62:51:39:bf:50:b9:e8:5a:81:e1:36:6b:e5:70:9f:
                    42:05:dd:71:f6:81:90:6a:19:85:15:3b:3f:a8:45:
                    b5:6d:5d:85:4e:e5:e9:a7:0d:9a:fb:11:32:a2:56:
                    39:a5:a3:b1:6c:66:f5:e4:9d:1e:55:de:ba:3f:99:
                    b6:74:3b:31:d8:a4:c1:17:1c:63:3e:0b:b3:0b:89:
                    d1:be:68:12:9c:c3:f3:4b:6b:96:93:47:5b:93:ec:
                    35:b3:d3:63:9f:3d:86:63:ae:ca:b9:7c:a3:51:14:
                    bf:56:f0:ed:d3:11:44:25:16:8b:f5:76:cc:ce:fa:
                    29:88:a4:28:13:54:bc:8f:4a:90:e1:ab:2c:48:ba:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:C9:23:48:92:F9:9B:4C:C1:0C:B1:D0:3F:F1:FF:07:A0:7F:02
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:52:26:2e:2c:a5:16:36:e7:aa:f6:8c:c2:6c:fb:46:72:ed:
         6a:73:96:c0:54:d4:0c:ce:a2:53:ff:5a:a5:a1:21:30:be:bb:
         78:ad:ee:81:79:a6:27:16:e2:02:12:88:61:6c:f7:38:dd:5b:
         ca:0b:34:b9:0b:39:93:10:98:4b:2f:7e:78:52:3b:1d:1a:e4:
         f4:77:1f:7a:fb:dc:40:43:b5:25:20:e2:2a:db:d0:48:68:c3:
         a6:2b:15:f5:30:43:75:54:ef:45:93:a9:01:51:c9:21:9d:63:
         28:85:56:b7:cd:62:cc:38:0e:0f:33:f8:9b:ca:00:48:dd:c2:
         6d:c6:ba:8a:7a:62:1f:40:35:51:58:05:bd:7a:b2:10:12:b6:
         06:23:18:33:88:4f:67:f0:15:7c:4a:12:21:8b:04:d2:58:a7:
         d5:18:1b:6e:ab:a9:36:f1:2a:49:5d:d1:9b:e2:b4:3b:eb:c3:
         6a:49:6a:f4:da:4e:2e:e6:bb:af:dc:e4:da:1b:6a:25:2c:2b:
         85:b9:22:6f:5d:31:0f:69:03:0b:81:7f:63:92:56:52:94:21:
         62:8a:68:b0:68:f9:6e:11:5a:52:e3:d5:f0:37:5b:14:ec:14:
         5f:17:b6:a1:62:0c:d4:29:04:bd:01:69:0e:d8:6f:c4:a4:be:
         ee:21:95:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUINLOMK9oy5p2xGqnOAgPvl9DQNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxMEUwNEYyNzUxMEZGRjFFODM2MjA1MjA3MDQxMkM5
MDNGRkQ4QjAeFw0yNjA4MjMyMTEwMDFaFw0yNjA4MjQyMzI3MDFaMDMxMTAvBgNV
BAMTKDM3OURDOTIzNDg5MkY5OUI0Q0MxMENCMUQwM0ZGMUZGMDdBMDdGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Rq6hl4ySkIwXRsvQaB5S99t4
OrJCQROq4xBxfRXzomoZXq4MeZ/a7bwpHjmtoJ2/d7FPyzJEg2QhGHmdGR80w5yr
Ku4D/9I5+M41xIuKXmN73/eXairQr+ATh2dIkHYY0734E4EoAZW9KQB0FpKoyfXB
jZweBmJROb9QuehageE2a+Vwn0IF3XH2gZBqGYUVOz+oRbVtXYVO5emnDZr7ETKi
Vjmlo7FsZvXknR5V3ro/mbZ0OzHYpMEXHGM+C7MLidG+aBKcw/NLa5aTR1uT7DWz
02OfPYZjrsq5fKNRFL9W8O3TEUQlFov1dszO+imIpCgTVLyPSpDhqyxIuthzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUN53JI0iS+ZtMwQyx0D/x/wegfwIwHwYDVR0j
BBgwFoAUqRDgTydRD/8eg2IFIHBBLJA//YswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC9BOTEwRTA0RjI3NTEwRkZGMUU4MzYyMDUyMDcwNDEyQzkwM0ZGRDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MTBFMDRGMjc1MTBGRkYx
RTgzNjIwNTIwNzA0MTJDOTAzRkZEOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNFQWkvMC9B
OTEwRTA0RjI3NTEwRkZGMUU4MzYyMDUyMDcwNDEyQzkwM0ZGRDhCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARlImLiylFjbnqvaMwmz7RnLtanOWwFTUDM6iU/9apaEhML67eK3ugXmmJxbi
AhKIYWz3ON1bygs0uQs5kxCYSy9+eFI7HRrk9HcfevvcQEO1JSDiKtvQSGjDpisV
9TBDdVTvRZOpAVHJIZ1jKIVWt81izDgODzP4m8oASN3Cbca6inpiH0A1UVgFvXqy
EBK2BiMYM4hPZ/AVfEoSIYsE0lin1RgbbqupNvEqSV3Rm+K0O+vDaklq9NpOLua7
r9zk2htqJSwrhbkib10xD2kDC4F/Y5JWUpQhYoposGj5bhFaUuPV8DdbFOwUXxe2
oWIM1CkEvQFpDthvxKS+7iGVrA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 07:09:49 2026 by rpki-client