Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft
File:                     CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft (raw, json)
Hash identifier:          zwSH2jRSxm6yMrZSgd+o3WhySnbOAr6TWvcEiYL6sUM=
Subject key identifier:   21:3E:DD:9F:5F:A2:C6:6E:16:F0:FC:96:C7:AC:FF:FB:D0:CA:57:07
Authority key identifier: CF:E2:F3:8B:E1:5B:E6:0D:09:B1:11:0A:8B:A4:99:22:0A:9A:CA:D5
Certificate issuer:       /CN=CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5
Certificate serial:       3243445836635C93F16B31F6787B60FE7EA244A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft
Manifest number:          1B
Signing time:             Sun 22 Feb 2026 14:26:46 +0000
Manifest this update:     Sun 22 Feb 2026 14:21:46 +0000
Manifest next update:     Mon 23 Feb 2026 16:03:46 +0000
Files and hashes:         1: 323830343a393762303a3a2f33322d313238203d3e20323735363339.roa (hash: XcRDU1Dpg/pzjWdA3lHmWBDcNiQMj18Go+aR183mxg4=)
                          2: CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.crl (hash: hI5O478duwbMk0JxCM8xTZKwbMVoNQNCknRUO1iSxpM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.crl
                          rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 16:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:43:44:58:36:63:5c:93:f1:6b:31:f6:78:7b:60:fe:7e:a2:44:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5
        Validity
            Not Before: Feb 22 14:21:46 2026 GMT
            Not After : Feb 23 16:03:46 2026 GMT
        Subject: CN=213EDD9F5FA2C66E16F0FC96C7ACFFFBD0CA5707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ef:3f:e9:43:c0:bf:e1:77:61:01:a6:83:cd:
                    3c:58:15:50:25:df:82:24:9a:6c:71:16:b3:18:20:
                    b3:25:79:40:6e:24:87:82:05:0c:82:76:42:b3:90:
                    10:d7:0c:54:8c:f7:c2:fa:cb:41:cd:2f:fe:37:d9:
                    83:e6:07:14:33:06:73:aa:9b:a2:a7:88:1d:a8:5d:
                    e8:02:d9:d6:08:50:b1:36:92:33:60:c2:93:39:e1:
                    b8:77:75:85:95:68:6e:68:9c:18:c4:b9:1d:c8:87:
                    dc:c3:a8:06:ce:9f:be:5f:38:fb:26:53:67:81:a5:
                    d7:53:73:6a:82:67:e5:6c:25:46:8e:d2:6a:b2:17:
                    74:0d:ab:0f:54:4b:02:04:30:2b:f5:43:4a:55:54:
                    9a:cf:66:44:07:21:ed:a1:0a:36:ef:47:b0:48:ee:
                    3f:78:73:38:98:e9:62:db:c1:58:74:84:20:3a:e9:
                    de:e0:5e:4d:04:72:82:c4:1d:92:5a:b4:0b:33:72:
                    c5:dd:b8:e0:dc:92:66:54:14:e7:bc:8d:9f:1b:a8:
                    13:8e:f3:f5:b5:70:27:f6:d2:61:a7:1f:4a:c6:fa:
                    fa:5c:e5:98:f0:37:a8:ec:70:db:07:28:da:e7:e2:
                    2a:1e:0b:05:6e:17:f4:ba:af:8d:52:c4:60:a1:f7:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:DD:9F:5F:A2:C6:6E:16:F0:FC:96:C7:AC:FF:FB:D0:CA:57:07
            X509v3 Authority Key Identifier:
                keyid:CF:E2:F3:8B:E1:5B:E6:0D:09:B1:11:0A:8B:A4:99:22:0A:9A:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q1b63Q55ExU7oGUz5kZZNgfjJXxhe1jF93wkmzDJxMQ/0/CFE2F38BE15BE60D09B1110A8BA499220A9ACAD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5c:6b:40:22:87:82:2d:b2:c0:57:3b:2c:2f:1b:25:3c:96:
         05:45:ab:2d:c9:f2:4b:16:99:0d:72:f7:9c:bc:a3:df:3b:fb:
         dd:a8:73:24:b3:b5:df:d2:f1:f1:ef:03:80:be:24:27:c8:db:
         6a:d2:13:40:05:9f:b3:21:39:30:d2:b7:ee:93:c5:23:d9:0b:
         f5:78:41:09:ad:d2:d7:49:6e:ef:3d:43:e2:ac:54:42:b3:29:
         d8:4b:3f:8e:bd:20:8a:e7:43:0a:d3:0a:e7:08:db:71:a3:01:
         39:ea:f8:43:9a:74:0c:7e:e3:bb:01:ce:47:e9:47:1e:a9:b7:
         be:c4:8e:af:eb:d8:d5:cd:c6:05:36:08:df:d1:e2:59:23:29:
         ed:a9:38:85:eb:7c:fd:c5:77:fe:7c:c6:91:90:5f:b1:30:c7:
         f3:d2:dd:7d:b7:f3:60:81:12:da:b6:29:af:07:b7:5f:21:14:
         d6:a5:4f:c5:f1:03:93:99:37:e0:1b:fa:3d:48:6c:25:d0:d0:
         2c:a0:8a:e9:5c:cc:eb:83:da:98:e5:4d:dc:41:69:7d:d0:e1:
         26:59:f9:ad:c6:38:b8:74:85:86:eb:0f:5b:8a:7c:a3:c4:fb:
         e2:11:ba:e4:4f:d9:5a:b8:23:ce:c8:40:08:4f:48:d2:8b:44:
         78:61:c0:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMkNEWDZjXJPxazH2eHtg/n6iRKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZFMkYzOEJFMTVCRTYwRDA5QjExMTBBOEJBNDk5MjIw
QTlBQ0FENTAeFw0yNjAyMjIxNDIxNDZaFw0yNjAyMjMxNjAzNDZaMDMxMTAvBgNV
BAMTKDIxM0VERDlGNUZBMkM2NkUxNkYwRkM5NkM3QUNGRkZCRDBDQTU3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7z/pQ8C/4XdhAaaDzTxYFVAl
34IkmmxxFrMYILMleUBuJIeCBQyCdkKzkBDXDFSM98L6y0HNL/432YPmBxQzBnOq
m6KniB2oXegC2dYIULE2kjNgwpM54bh3dYWVaG5onBjEuR3Ih9zDqAbOn75fOPsm
U2eBpddTc2qCZ+VsJUaO0mqyF3QNqw9USwIEMCv1Q0pVVJrPZkQHIe2hCjbvR7BI
7j94cziY6WLbwVh0hCA66d7gXk0EcoLEHZJatAszcsXduODckmZUFOe8jZ8bqBOO
8/W1cCf20mGnH0rG+vpc5ZjwN6jscNsHKNrn4ioeCwVuF/S6r41SxGCh98arAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIT7dn1+ixm4W8PyWx6z/+9DKVwcwHwYDVR0j
BBgwFoAUz+Lzi+Fb5g0JsREKi6SZIgqaytUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFExYjYzUTU1RXhVN29HVXo1a1paTmdmakpYeGhlMWpGOTN3a216REp4
TVEvMC9DRkUyRjM4QkUxNUJFNjBEMDlCMTExMEE4QkE0OTkyMjBBOUFDQUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRTJGMzhCRTE1QkU2MEQw
OUIxMTEwQThCQTQ5OTIyMEE5QUNBRDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFExYjYzUTU1RXhVN29HVXo1a1paTmdmakpYeGhlMWpGOTN3a216REp4TVEvMC9D
RkUyRjM4QkUxNUJFNjBEMDlCMTExMEE4QkE0OTkyMjBBOUFDQUQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASFxrQCKHgi2ywFc7LC8bJTyWBUWrLcnySxaZDXL3nLyj3zv73ahzJLO139Lx
8e8DgL4kJ8jbatITQAWfsyE5MNK37pPFI9kL9XhBCa3S10lu7z1D4qxUQrMp2Es/
jr0giudDCtMK5wjbcaMBOer4Q5p0DH7juwHOR+lHHqm3vsSOr+vY1c3GBTYI39Hi
WSMp7ak4het8/cV3/nzGkZBfsTDH89LdfbfzYIES2rYprwe3XyEU1qVPxfEDk5k3
4Bv6PUhsJdDQLKCK6VzM64PamOVN3EFpfdDhJln5rcY4uHSFhusPW4p8o8T74hG6
5E/ZWrgjzshACE9I0otEeGHAXA==
-----END CERTIFICATE-----
Generated at Mon Feb 23 01:37:07 2026 by rpki-client