Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
File:                     D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft (raw, json)
Hash identifier:          BHl0bFKZ2d4TwsSH6RV74JJwcys0k7Md3Nr4QrPg+bk=
Subject key identifier:   C3:7A:14:D5:92:99:05:CF:69:65:1B:80:8F:3A:C6:88:E2:80:DF:BA
Authority key identifier: D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2
Certificate issuer:       /CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2
Certificate serial:       5EC7BC18B9C4690FECBB9FD4440DA85555A9F9EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
Manifest number:          0138
Signing time:             Sun 22 Feb 2026 14:32:15 +0000
Manifest this update:     Sun 22 Feb 2026 14:27:15 +0000
Manifest next update:     Mon 23 Feb 2026 14:48:15 +0000
Files and hashes:         1: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: DETwoG/6qi/ZI8aHY1Z5rVUEPEzo75t1n/OyDZwKtCg=)
                          2: D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl (hash: NKWnMwJHnmhuv+YQ98leh5iPLG2vBH8klZ5hxAZtaYY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl
                          rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 14:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c7:bc:18:b9:c4:69:0f:ec:bb:9f:d4:44:0d:a8:55:55:a9:f9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5C431D17B830735FEB26409C69E3EF4FE61DBC2
        Validity
            Not Before: Feb 22 14:27:15 2026 GMT
            Not After : Feb 23 14:48:15 2026 GMT
        Subject: CN=C37A14D5929905CF69651B808F3AC688E280DFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:62:07:0e:4f:1a:87:69:a7:71:08:83:50:
                    52:77:0d:14:ed:9b:13:b2:c9:b9:67:5c:cf:fa:59:
                    3f:f5:2c:e5:e8:1b:d5:18:58:9f:e7:59:d3:61:e1:
                    11:d6:29:fc:1f:4d:06:da:38:29:a9:29:b5:65:9f:
                    8e:95:6f:10:3e:7b:36:11:96:17:1c:99:09:68:de:
                    ca:c8:52:0f:91:1b:a4:16:4c:c0:19:e7:59:eb:14:
                    3d:3b:7d:d1:a2:07:bd:18:28:1d:b6:1a:c2:d3:e9:
                    2b:b6:76:56:4d:4d:fa:fe:b3:78:d4:11:16:b5:ba:
                    1c:e7:48:b3:76:d3:bf:2a:8f:d0:5b:36:e5:1c:74:
                    55:2d:13:1f:73:aa:48:c1:b1:07:d2:fb:55:2c:e9:
                    f2:24:5f:ca:04:55:af:11:12:89:60:bb:47:02:6f:
                    4c:ab:a6:7d:c1:fe:58:86:ba:68:3f:3d:a4:5a:0f:
                    d4:20:c0:82:1b:61:89:43:e3:64:80:fe:d8:5c:ea:
                    ef:91:55:66:b6:ae:85:21:f1:53:85:14:7e:c9:91:
                    f7:b7:3d:89:a8:c5:21:35:82:e1:19:78:c6:5f:04:
                    68:dc:56:82:83:70:ca:08:1b:54:f9:98:c7:96:20:
                    b3:30:29:82:bd:05:a7:7d:c1:88:b0:21:83:be:ae:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:14:D5:92:99:05:CF:69:65:1B:80:8F:3A:C6:88:E2:80:DF:BA
            X509v3 Authority Key Identifier:
                keyid:D5:C4:31:D1:7B:83:07:35:FE:B2:64:09:C6:9E:3E:F4:FE:61:DB:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/D5C431D17B830735FEB26409C69E3EF4FE61DBC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:be:1f:fa:3c:f6:ad:09:77:62:01:d8:ab:59:22:2c:f7:9c:
         85:7b:51:ab:b6:ad:7c:c9:52:dd:9b:b9:2c:a7:06:90:be:99:
         0c:6a:00:f2:ef:bd:5d:65:b8:7c:13:4b:e8:89:5c:f9:58:49:
         3c:4a:25:27:ef:89:0c:94:d2:ff:7b:7a:16:5b:56:3e:e0:1f:
         7e:16:59:0d:fd:65:78:12:08:fa:2c:d4:fb:30:9c:5e:56:43:
         ec:86:0d:22:f0:af:53:20:1f:56:df:15:67:a9:dc:ed:d9:6c:
         39:4f:25:78:b5:62:e4:d5:63:a9:7f:cb:31:b5:4c:5c:82:6a:
         cf:c7:f8:7e:ea:c2:7d:1a:1c:b7:73:cd:e9:64:35:a4:be:a0:
         e0:ab:e9:85:2f:16:e9:47:c6:ce:57:ee:d1:52:d4:af:5a:f3:
         fb:53:bf:5e:c2:69:c9:a5:43:16:10:91:23:d0:0e:44:b1:8a:
         3b:68:7a:28:34:41:4d:7b:ab:df:5f:75:02:7e:66:80:be:9d:
         83:cd:61:73:72:43:5e:bc:22:a4:99:b6:a0:f4:1e:10:72:eb:
         45:6c:c8:c8:2f:38:39:d2:a4:e3:ab:15:89:89:b1:68:10:82:
         8e:ca:33:6e:52:03:d5:b6:55:c1:e9:f7:da:16:cd:b9:d1:16:
         cd:0f:dc:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXse8GLnEaQ/su5/URA2oVVWp+e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDNDMxRDE3QjgzMDczNUZFQjI2NDA5QzY5RTNFRjRG
RTYxREJDMjAeFw0yNjAyMjIxNDI3MTVaFw0yNjAyMjMxNDQ4MTVaMDMxMTAvBgNV
BAMTKEMzN0ExNEQ1OTI5OTA1Q0Y2OTY1MUI4MDhGM0FDNjg4RTI4MERGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpimIHDk8ah2mncQiDUFJ3DRTt
mxOyyblnXM/6WT/1LOXoG9UYWJ/nWdNh4RHWKfwfTQbaOCmpKbVln46VbxA+ezYR
lhccmQlo3srIUg+RG6QWTMAZ51nrFD07fdGiB70YKB22GsLT6Su2dlZNTfr+s3jU
ERa1uhznSLN2078qj9BbNuUcdFUtEx9zqkjBsQfS+1Us6fIkX8oEVa8REolgu0cC
b0yrpn3B/liGumg/PaRaD9QgwIIbYYlD42SA/thc6u+RVWa2roUh8VOFFH7Jkfe3
PYmoxSE1guEZeMZfBGjcVoKDcMoIG1T5mMeWILMwKYK9Bad9wYiwIYO+ruxXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUw3oU1ZKZBc9pZRuAjzrGiOKA37owHwYDVR0j
BBgwFoAU1cQx0XuDBzX+smQJxp4+9P5h28IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVw
TUQvMC9ENUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QzQzMUQxN0I4MzA3MzVG
RUIyNjQwOUM2OUUzRUY0RkU2MURCQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVNxeEY5b1ZHeHNjVWJzQ0haSm9ZOFRQeEc0M1N2OFBwa1VRbmJyMzVwTUQvMC9E
NUM0MzFEMTdCODMwNzM1RkVCMjY0MDlDNjlFM0VGNEZFNjFEQkMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVb4f+jz2rQl3YgHYq1kiLPechXtRq7atfMlS3Zu5LKcGkL6ZDGoA8u+9XWW4
fBNL6Ilc+VhJPEolJ++JDJTS/3t6FltWPuAffhZZDf1leBII+izU+zCcXlZD7IYN
IvCvUyAfVt8VZ6nc7dlsOU8leLVi5NVjqX/LMbVMXIJqz8f4furCfRoct3PN6WQ1
pL6g4KvphS8W6UfGzlfu0VLUr1rz+1O/XsJpyaVDFhCRI9AORLGKO2h6KDRBTXur
3191An5mgL6dg81hc3JDXrwipJm2oPQeEHLrRWzIyC84OdKk46sViYmxaBCCjsoz
blID1bZVwen32hbNudEWzQ/cfg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:43:34 2026 by rpki-client