Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
File:                     DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft (raw, json)
Hash identifier:          IG0EtKkgV3oCOCFhZMjWvLY27R9wr1XQIpUrtez21Hs=
Subject key identifier:   74:B4:FF:3C:BA:95:69:EC:A9:BF:1F:8E:17:F4:8F:31:C9:06:06:58
Authority key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D
Certificate issuer:       /CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
Certificate serial:       1481E9AEFA5E4F4338A23B1ED811F9B2743494D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
Manifest number:          0331
Signing time:             Sun 24 May 2026 04:04:07 +0000
Manifest this update:     Sun 24 May 2026 03:59:07 +0000
Manifest next update:     Mon 25 May 2026 06:26:07 +0000
Files and hashes:         1: 34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa (hash: xSMmFAAWq1u+fIRT1VfC0jFrGbToGjtqVCKo6TuGZ48=)
                          2: DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl (hash: hAGP15Sz8YA0BSkJk4LxgcIr0vUhEnR1WqhE55i+OAE=)
                          3: 323830343a363162343a3a2f33322d313238203d3e20323639323531.roa (hash: vTMSQ0NcGNW7SwsUL0mwA0ATgC9+9p6vx7LJ6LWK5rc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl
                          rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:e9:ae:fa:5e:4f:43:38:a2:3b:1e:d8:11:f9:b2:74:34:94:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
        Validity
            Not Before: May 24 03:59:07 2026 GMT
            Not After : May 25 06:26:07 2026 GMT
        Subject: CN=74B4FF3CBA9569ECA9BF1F8E17F48F31C9060658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:22:7c:71:49:33:aa:fe:f7:01:56:25:13:
                    05:c2:ed:14:81:c4:f4:3e:66:2b:5a:92:0d:c4:66:
                    aa:08:c4:8e:ce:df:8d:b0:09:3a:76:97:4a:0f:f9:
                    c9:52:ec:98:5f:b5:23:af:34:55:f3:1f:c6:8e:9d:
                    6c:db:0d:e1:cd:91:74:6c:65:a4:fc:25:ea:d9:aa:
                    e8:d9:b9:80:fc:37:00:0e:31:ac:4e:88:c2:3e:01:
                    26:b5:12:c5:59:6b:a9:0b:cd:cf:35:8f:2f:14:db:
                    1f:61:e2:1b:cf:a3:5c:5e:17:7a:16:cc:e7:06:04:
                    3b:6b:84:b7:bb:81:65:ad:e0:d9:8b:9f:34:e4:8f:
                    ad:a0:c1:e8:76:c0:99:ba:e0:50:91:ce:8e:6e:2c:
                    c4:ea:5d:d9:85:ec:cf:98:1d:98:92:a6:7d:d2:d6:
                    2e:ea:05:f6:5d:ee:27:c0:a9:60:e7:eb:5a:92:9d:
                    45:d1:0c:5a:76:62:e3:75:bb:70:6b:29:e3:a5:ce:
                    56:2a:a9:98:be:71:47:2b:46:9b:69:1c:6b:44:e6:
                    4e:d2:ea:fb:3b:1b:e0:72:99:6b:4e:17:43:9d:81:
                    45:62:9b:58:ff:74:9e:72:dc:35:5c:26:77:1b:f2:
                    af:ab:29:d9:4c:a8:e9:aa:df:9b:d8:2a:6c:c0:9d:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:FF:3C:BA:95:69:EC:A9:BF:1F:8E:17:F4:8F:31:C9:06:06:58
            X509v3 Authority Key Identifier:
                keyid:DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:57:30:2e:92:b6:38:82:7a:4b:92:05:2c:cd:72:4b:d3:
         32:d6:71:b9:2f:a8:0f:a8:b2:aa:fd:6b:4f:bd:e3:50:97:78:
         e9:84:df:49:4b:61:8c:85:e5:93:62:7b:c8:7d:23:83:f3:2a:
         8e:2f:3e:6c:35:ec:58:be:7c:6a:29:5d:87:ab:ba:68:c3:61:
         76:0c:66:90:3b:5f:c3:7b:49:09:1b:a9:95:51:d5:b6:2b:7a:
         bf:ca:02:f0:e4:a3:ef:89:d7:bf:07:aa:ec:1c:72:16:7c:f3:
         91:ab:74:16:45:7f:c9:68:29:38:69:49:80:2a:50:20:7f:d3:
         58:63:e6:36:4b:0a:f3:05:c1:38:1c:50:60:d4:81:6d:1d:07:
         26:2d:7c:b6:db:3b:2d:03:95:d7:2f:3d:4e:22:52:2a:65:ff:
         dc:3a:1d:58:52:6f:dc:51:15:af:82:52:e5:65:cd:bc:c3:c7:
         d5:5f:92:1c:7c:cc:2c:96:c6:1e:74:4a:61:dd:48:0d:23:c8:
         b3:c9:64:d5:a0:8f:c1:3d:f9:53:eb:6a:04:ff:7d:de:d6:58:
         be:5e:01:23:bc:3e:26:6c:09:ba:0b:a3:4e:c9:f6:fc:99:0d:
         44:52:ea:58:c2:2e:6a:92:1b:56:58:48:d1:fd:e9:f9:57:74:
         8d:8c:60:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFIHprvpeT0M4ojse2BH5snQ0lNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ5NkMyMkRBNzkxNTczODRCOEY2OEFCMTg0NUFBRjFF
Nzk0QTg2RDAeFw0yNjA1MjQwMzU5MDdaFw0yNjA1MjUwNjI2MDdaMDMxMTAvBgNV
BAMTKDc0QjRGRjNDQkE5NTY5RUNBOUJGMUY4RTE3RjQ4RjMxQzkwNjA2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6iJ8cUkzqv73AVYlEwXC7RSB
xPQ+Zitakg3EZqoIxI7O342wCTp2l0oP+clS7JhftSOvNFXzH8aOnWzbDeHNkXRs
ZaT8JerZqujZuYD8NwAOMaxOiMI+ASa1EsVZa6kLzc81jy8U2x9h4hvPo1xeF3oW
zOcGBDtrhLe7gWWt4NmLnzTkj62gweh2wJm64FCRzo5uLMTqXdmF7M+YHZiSpn3S
1i7qBfZd7ifAqWDn61qSnUXRDFp2YuN1u3BrKeOlzlYqqZi+cUcrRptpHGtE5k7S
6vs7G+BymWtOF0OdgUVim1j/dJ5y3DVcJncb8q+rKdlMqOmq35vYKmzAnddrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdLT/PLqVaeypvx+OF/SPMckGBlgwHwYDVR0j
BBgwFoAU3ZbCLaeRVzhLj2irGEWq8eeUqG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVN2YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxB
aDYvMC9ERDk2QzIyREE3OTE1NzM4NEI4RjY4QUIxODQ1QUFGMUU3OTRBODZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REOTZDMjJEQTc5MTU3Mzg0
QjhGNjhBQjE4NDVBQUYxRTc5NEE4NkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVN2YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxBaDYvMC9E
RDk2QzIyREE3OTE1NzM4NEI4RjY4QUIxODQ1QUFGMUU3OTRBODZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACI1XMC6StjiCekuSBSzNckvTMtZxuS+oD6iyqv1rT73jUJd46YTfSUthjIXl
k2J7yH0jg/Mqji8+bDXsWL58aildh6u6aMNhdgxmkDtfw3tJCRuplVHVtit6v8oC
8OSj74nXvweq7BxyFnzzkat0FkV/yWgpOGlJgCpQIH/TWGPmNksK8wXBOBxQYNSB
bR0HJi18tts7LQOV1y89TiJSKmX/3DodWFJv3FEVr4JS5WXNvMPH1V+SHHzMLJbG
HnRKYd1IDSPIs8lk1aCPwT35U+tqBP993tZYvl4BI7w+JmwJugujTsn2/JkNRFLq
WMIuapIbVlhI0f3p+Vd0jYxg0Q==
-----END CERTIFICATE-----
Generated at Sun May 24 14:07:57 2026 by rpki-client