Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
File:                     9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft (raw, json)
Hash identifier:          WAh/RFZ+b3fb0uUMp1+rkQsNu+xTWVf0zOPJg1gd+zw=
Subject key identifier:   08:EC:22:13:69:CF:27:38:FA:43:3D:77:96:7D:3B:8D:51:B8:4A:FE
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       2FC76CAC91121AA83DCBC16BF00376D848D06584
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
Manifest number:          01B1
Signing time:             Thu 09 Apr 2026 07:58:36 +0000
Manifest this update:     Thu 09 Apr 2026 07:53:36 +0000
Manifest next update:     Fri 10 Apr 2026 11:52:36 +0000
Files and hashes:         1: 3137372e33392e3135382e302f32342d3234203d3e203532373732.roa (hash: Fz3tP8gKblZ22Wi1BAPHz+6zBLQmcfIP2KON8HEOA0k=)
                          2: 3137372e33392e3135362e302f32342d3234203d3e203532373732.roa (hash: Th0oVTLhtkCoCMjLFF1EY7VT9auvt0MCdfW5RVWEq90=)
                          3: 323830343a323539633a3130303a3a2f34302d3430203d3e203532373732.roa (hash: uGhf5b+b9vD9gvSp9oZ6e4bL9uXZe0dzHDuziYVHF8I=)
                          4: 3137372e33392e3135392e302f32342d3234203d3e203532373732.roa (hash: EStoz7g6NgVP9LvO4IvsAnHG9swt6RGVRBAEv5bfnZQ=)
                          5: 323830343a323539633a3a2f33322d3332203d3e203532373732.roa (hash: 7i8PNiZy7UrEhvpiW3Goqw6tna2/N8kVlQNd4cZH4LU=)
                          6: 3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (hash: WqXkrMFi1xrk2zthF8dDfcr8ODee4Hrhy1bzZ884Zu8=)
                          7: 9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl (hash: zBxJ/CRxyN+B4zHQIj80Je1Mt1itu5UDGb0fv83SEJ0=)
                          8: 3137372e33392e3135362e302f32332d3233203d3e203532373732.roa (hash: ALX6KMg3Ze8VHCHIAcAg0n13xYhjclLLScn/XjezNbU=)
                          9: 3137372e33392e3135382e302f32332d3233203d3e203532373732.roa (hash: BXzCbuIBKvjthNMH1nGZrKuBVsgTxF8Hs+LbPYeyMwU=)
                          10: 323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa (hash: FnNxSfDiH+7afm/gfWLqnHecDaZX2BMS0yYD3kUx36c=)
                          11: 323830343a323539633a3a2f33332d3333203d3e203532373732.roa (hash: 9hvcl4YzxrpxmW0f5Zve5PtPcqEy9KBGriE9Bhtfdt8=)
                          12: 3137372e33392e3135372e302f32342d3234203d3e203532373732.roa (hash: wGkD/IoRNPM0pCmB5sGtxeTnI8G+0sgFg8ClAoS0wGc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c7:6c:ac:91:12:1a:a8:3d:cb:c1:6b:f0:03:76:d8:48:d0:65:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: Apr  9 07:53:36 2026 GMT
            Not After : Apr 10 11:52:36 2026 GMT
        Subject: CN=08EC221369CF2738FA433D77967D3B8D51B84AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:1a:e9:5c:61:de:f3:76:ee:c4:01:4d:cb:
                    34:75:1a:af:b8:cb:8b:eb:66:85:bf:08:f7:df:da:
                    7a:c0:60:2d:ae:a6:b5:0d:a1:a1:c6:c6:04:92:ff:
                    64:d9:1c:3c:43:6c:60:fc:b4:92:ed:1c:d6:71:cf:
                    63:68:ae:ca:45:3b:56:17:ac:f7:83:fc:72:76:f1:
                    63:44:d8:83:bc:90:08:c7:7b:94:aa:fb:a5:7b:9d:
                    9c:72:de:d7:88:69:79:f3:4c:6e:d3:26:99:8f:7d:
                    76:d9:ec:25:17:fe:af:1a:64:bc:cd:b3:a0:97:ec:
                    05:49:f1:34:c4:2e:37:8b:62:0d:96:28:18:d8:74:
                    72:bf:7f:a9:1e:f3:ae:9f:76:e5:e0:66:f4:35:31:
                    f9:e2:01:51:c2:37:57:39:85:ab:ee:73:75:48:13:
                    e2:db:8b:d1:23:3a:a9:30:3f:fa:ef:6c:b6:18:52:
                    11:1c:3b:02:73:d4:78:2e:69:b5:5c:84:26:9a:a9:
                    b0:13:92:55:2d:ba:f9:3f:55:90:e5:0e:37:bc:1a:
                    d4:b7:50:99:d5:5d:c6:31:ac:be:d5:66:f4:77:ce:
                    2c:14:d1:50:26:29:a3:64:b3:29:19:84:ad:69:70:
                    02:ce:c7:73:07:de:99:c2:8c:37:94:ee:b2:65:77:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:22:13:69:CF:27:38:FA:43:3D:77:96:7D:3B:8D:51:B8:4A:FE
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:93:98:a5:ee:ac:a3:b7:1c:22:bb:e4:19:14:b4:52:a1:
         26:df:87:78:b4:e8:f9:34:32:0d:ba:f3:81:ad:27:e3:34:22:
         c7:13:2e:26:bf:9f:dc:46:a5:3b:36:91:9c:16:c1:61:77:d9:
         eb:90:d7:83:db:00:bd:2e:13:bf:6a:b8:4f:f7:04:f3:ee:88:
         5e:f5:5e:bd:58:7e:e1:59:9a:ff:9e:08:e3:f4:c0:5a:e0:df:
         f1:e4:5c:79:ef:59:cb:c0:36:66:fa:ca:f8:e1:d4:47:fc:0b:
         a1:9f:a8:db:c0:cd:39:73:fb:7e:24:d8:1e:33:9d:a2:80:e7:
         32:43:8f:b9:28:f0:57:f4:ea:19:ab:78:79:de:13:84:b9:07:
         80:5c:da:02:80:7a:e4:ea:86:53:c3:32:76:d2:5d:a2:3a:11:
         5b:30:b0:ab:17:65:1a:29:28:47:89:72:60:ac:fa:c1:5e:cf:
         13:86:56:0b:44:d0:4c:de:33:06:67:0f:2a:9d:eb:e7:5f:8c:
         98:e4:dc:46:d1:ae:97:e1:5b:46:78:d0:72:87:91:77:b7:09:
         3e:da:bc:29:70:b5:14:00:89:85:b0:ad:69:0e:68:a5:08:ec:
         c8:4e:7e:62:2a:a6:2b:91:57:b6:3b:72:02:f0:3e:ad:93:d4:
         31:9b:d3:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUL8dsrJESGqg9y8Fr8AN22EjQZYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNFNzBGOTEzRTkxMzdCMzUyNTkyQjdBMkMwNzVEMkVB
OUY0MjY5RDAeFw0yNjA0MDkwNzUzMzZaFw0yNjA0MTAxMTUyMzZaMDMxMTAvBgNV
BAMTKDA4RUMyMjEzNjlDRjI3MzhGQTQzM0Q3Nzk2N0QzQjhENTFCODRBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbBrpXGHe83buxAFNyzR1Gq+4
y4vrZoW/CPff2nrAYC2uprUNoaHGxgSS/2TZHDxDbGD8tJLtHNZxz2NorspFO1YX
rPeD/HJ28WNE2IO8kAjHe5Sq+6V7nZxy3teIaXnzTG7TJpmPfXbZ7CUX/q8aZLzN
s6CX7AVJ8TTELjeLYg2WKBjYdHK/f6ke866fduXgZvQ1MfniAVHCN1c5havuc3VI
E+Lbi9EjOqkwP/rvbLYYUhEcOwJz1HguabVchCaaqbATklUtuvk/VZDlDje8GtS3
UJnVXcYxrL7VZvR3ziwU0VAmKaNksykZhK1pcALOx3MH3pnCjDeU7rJld9mfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCOwiE2nPJzj6Qz13ln07jVG4Sv4wHwYDVR0j
BBgwFoAUnOcPkT6RN7NSWSt6LAddLqn0Jp0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC85Q0U3MEY5MTNFOTEzN0IzNTI1OTJCN0EyQzA3NUQyRUE5RjQyNjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRTcwRjkxM0U5MTM3QjM1
MjU5MkI3QTJDMDc1RDJFQTlGNDI2OUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4VGYvMC85
Q0U3MEY5MTNFOTEzN0IzNTI1OTJCN0EyQzA3NUQyRUE5RjQyNjlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHiCTmKXurKO3HCK75BkUtFKhJt+HeLTo+TQyDbrzga0n4zQixxMuJr+f3Eal
OzaRnBbBYXfZ65DXg9sAvS4Tv2q4T/cE8+6IXvVevVh+4Vma/54I4/TAWuDf8eRc
ee9Zy8A2ZvrK+OHUR/wLoZ+o28DNOXP7fiTYHjOdooDnMkOPuSjwV/TqGat4ed4T
hLkHgFzaAoB65OqGU8MydtJdojoRWzCwqxdlGikoR4lyYKz6wV7PE4ZWC0TQTN4z
BmcPKp3r51+MmOTcRtGul+FbRnjQcoeRd7cJPtq8KXC1FACJhbCtaQ5opQjsyE5+
YiqmK5FXtjtyAvA+rZPUMZvTcw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 12:52:22 2026 by rpki-client