Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
File:                     BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft (raw, json)
Hash identifier:          Vqe8C0MYO1WHR54dXQF21V6EBc9qn+wh8hul5Iepw+4=
Subject key identifier:   4A:4F:51:04:81:1C:58:9B:FD:75:80:F1:45:45:C0:B4:09:84:43:A3
Authority key identifier: BD:C0:8A:E9:BB:1C:B8:0A:BF:25:D5:15:19:F7:02:6F:0C:BA:B8:4E
Certificate issuer:       /CN=BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E
Certificate serial:       562B152BD04B23DFA33B5694928A7A47826C723B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
Manifest number:          11
Signing time:             Thu 09 Apr 2026 01:01:23 +0000
Manifest this update:     Thu 09 Apr 2026 00:56:23 +0000
Manifest next update:     Fri 10 Apr 2026 04:30:23 +0000
Files and hashes:         1: 34352e3138392e36342e302f32322d3234203d3e20323639353836.roa (hash: m3ALDBJBDgEYACSmc1CLeUe99KJGHhT0+hqGGiDTpPU=)
                          2: 323830343a363664383a3a2f33322d3334203d3e20323639353836.roa (hash: EdEoSRQNtJp8GptGynQ2iuCqakkFGelzxq4kQUoFycc=)
                          3: BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl (hash: C8v7beC/Dt4xXRzOiIP0Hzcl/w+KRscp+RDxcUBKY8Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl
                          rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2b:15:2b:d0:4b:23:df:a3:3b:56:94:92:8a:7a:47:82:6c:72:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E
        Validity
            Not Before: Apr  9 00:56:23 2026 GMT
            Not After : Apr 10 04:30:23 2026 GMT
        Subject: CN=4A4F5104811C589BFD7580F14545C0B4098443A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:28:b5:ea:89:50:68:eb:55:5f:20:ab:fb:08:
                    68:33:21:d4:45:56:1c:d1:5a:2a:e7:ed:dd:28:2f:
                    b4:90:a4:77:1b:5f:6e:81:13:c8:73:c7:e6:b8:e6:
                    fd:4e:a0:a9:af:a6:a5:53:fb:c9:c7:1a:9d:3f:78:
                    c3:44:e9:ee:84:f5:43:a4:05:c6:9f:bc:8c:39:1c:
                    70:d9:7c:d4:2c:12:f8:0b:f7:1f:7d:23:bd:2f:8f:
                    ce:77:2b:42:42:bc:fc:de:5f:72:61:33:3e:f1:0e:
                    96:d7:a2:b4:de:58:78:34:66:da:3a:62:34:38:ff:
                    98:1c:92:ed:bc:d5:e9:3d:99:80:a2:41:f4:93:b8:
                    1c:c0:f1:a7:dd:4c:2b:3b:95:7a:e8:45:df:2a:fd:
                    25:60:f4:d5:95:09:3b:44:d8:5b:c2:81:3d:12:a1:
                    ce:e5:11:92:65:6f:e9:af:87:62:d1:0e:7f:d9:a9:
                    51:94:f8:58:89:28:ce:0c:70:ff:45:ab:ad:f2:e8:
                    03:d4:59:3c:43:94:0b:21:73:cc:ca:a0:73:96:f2:
                    a2:aa:a1:86:26:cd:26:3f:5f:24:66:22:70:51:55:
                    21:31:06:d7:f1:f2:52:1e:43:7f:af:bb:be:de:c8:
                    72:e0:67:c6:90:5d:dc:4a:80:9b:88:09:84:8f:4e:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4F:51:04:81:1C:58:9B:FD:75:80:F1:45:45:C0:B4:09:84:43:A3
            X509v3 Authority Key Identifier:
                keyid:BD:C0:8A:E9:BB:1C:B8:0A:BF:25:D5:15:19:F7:02:6F:0C:BA:B8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:39:d8:00:4e:51:80:92:7e:de:a8:d4:2d:ff:7e:28:65:e5:
         01:50:61:08:9f:19:a5:bd:c4:e2:cd:c9:26:c8:8e:86:1e:82:
         35:a0:9c:d6:81:5b:eb:c9:6d:81:d2:c5:e0:8d:5a:1f:54:78:
         65:36:15:bd:cc:47:de:c0:a7:1d:0c:af:20:49:39:ea:d8:71:
         56:de:d8:63:81:f3:58:b3:16:dd:b9:de:01:28:20:b4:14:6b:
         16:e5:5b:7f:f1:d5:89:da:64:a2:24:07:27:d7:2e:96:85:54:
         1f:da:b0:a5:c1:e3:f9:64:91:26:61:01:f0:00:ab:01:8e:cd:
         96:bb:1a:d4:74:de:aa:0d:6d:b7:44:15:dd:a9:ed:55:aa:93:
         c6:86:c9:e6:98:59:0a:50:6a:04:40:cb:84:74:35:e9:01:82:
         5b:5b:67:28:85:ad:9f:6d:08:19:84:88:d0:2d:a2:aa:54:9a:
         ae:62:da:df:45:87:ee:83:33:32:56:21:e2:9a:ab:2e:59:94:
         af:12:4e:62:7a:11:e5:40:2f:7c:c2:91:d8:28:90:fc:b5:98:
         29:6f:93:b3:8d:c4:2c:14:38:c0:4b:6f:76:c6:8b:cd:bd:70:
         fc:9d:01:e3:13:c9:b1:a5:27:49:69:4a:c8:e7:7d:4f:3a:46:
         60:c0:38:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVisVK9BLI9+jO1aUkop6R4JscjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDMDhBRTlCQjFDQjgwQUJGMjVENTE1MTlGNzAyNkYw
Q0JBQjg0RTAeFw0yNjA0MDkwMDU2MjNaFw0yNjA0MTAwNDMwMjNaMDMxMTAvBgNV
BAMTKDRBNEY1MTA0ODExQzU4OUJGRDc1ODBGMTQ1NDVDMEI0MDk4NDQzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKLXqiVBo61VfIKv7CGgzIdRF
VhzRWirn7d0oL7SQpHcbX26BE8hzx+a45v1OoKmvpqVT+8nHGp0/eMNE6e6E9UOk
BcafvIw5HHDZfNQsEvgL9x99I70vj853K0JCvPzeX3JhMz7xDpbXorTeWHg0Zto6
YjQ4/5gcku281ek9mYCiQfSTuBzA8afdTCs7lXroRd8q/SVg9NWVCTtE2FvCgT0S
oc7lEZJlb+mvh2LRDn/ZqVGU+FiJKM4McP9Fq63y6APUWTxDlAshc8zKoHOW8qKq
oYYmzSY/XyRmInBRVSExBtfx8lIeQ3+vu77eyHLgZ8aQXdxKgJuICYSPTt/FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSk9RBIEcWJv9dYDxRUXAtAmEQ6MwHwYDVR0j
BBgwFoAUvcCK6bscuAq/JdUVGfcCbwy6uE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhmRGZRR3NwNmVUejJQNGc3VVFtdHpQR3dnVmoyc0xLbVFxb0pSZU44
a2YvMC9CREMwOEFFOUJCMUNCODBBQkYyNUQ1MTUxOUY3MDI2RjBDQkFCODRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzA4QUU5QkIxQ0I4MEFC
RjI1RDUxNTE5RjcwMjZGMENCQUI4NEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVhmRGZRR3NwNmVUejJQNGc3VVFtdHpQR3dnVmoyc0xLbVFxb0pSZU44a2YvMC9C
REMwOEFFOUJCMUNCODBBQkYyNUQ1MTUxOUY3MDI2RjBDQkFCODRFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKDnYAE5RgJJ+3qjULf9+KGXlAVBhCJ8Zpb3E4s3JJsiOhh6CNaCc1oFb68lt
gdLF4I1aH1R4ZTYVvcxH3sCnHQyvIEk56thxVt7YY4HzWLMW3bneASggtBRrFuVb
f/HVidpkoiQHJ9culoVUH9qwpcHj+WSRJmEB8ACrAY7Nlrsa1HTeqg1tt0QV3ant
VaqTxobJ5phZClBqBEDLhHQ16QGCW1tnKIWtn20IGYSI0C2iqlSarmLa30WH7oMz
MlYh4pqrLlmUrxJOYnoR5UAvfMKR2CiQ/LWYKW+Ts43ELBQ4wEtvdsaLzb1w/J0B
4xPJsaUnSWlKyOd9TzpGYMA4sQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 11:08:01 2026 by rpki-client