Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
File:                     68B41BBED51EE048421EC599A4F5A1921313EE8A.mft (raw, json)
Hash identifier:          6puFXYqO3VAEdxOblaUyzuCYqWQlJj3nQ252M/r7pC4=
Subject key identifier:   B4:61:EA:13:47:34:1E:F1:03:8D:83:61:19:E0:51:BB:F2:48:4F:C2
Authority key identifier: 68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A
Certificate issuer:       /CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
Certificate serial:       61CFB10819E4E20A9CBBA83A6F5E1F7D5E0BE642
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
Manifest number:          A1
Signing time:             Sat 27 Jun 2026 03:44:19 +0000
Manifest this update:     Sat 27 Jun 2026 03:39:19 +0000
Manifest next update:     Sun 28 Jun 2026 03:54:19 +0000
Files and hashes:         1: 3134332e302e3231302e302f32342d3234203d3e20323634303732.roa (hash: r3lZ+wNjKx8dDydw8Gk3bx0YoHVTzu2J+UEDifWQZfw=)
                          2: 323830343a326136633a3a2f33322d3332203d3e20323634303732.roa (hash: wxalZ4pmCdSaD1nNXmEQteaVSjY/BuOm/g8GVOx8t0k=)
                          3: 3134332e302e3230382e302f32322d3232203d3e20323634303732.roa (hash: zM6jafO7E4+LwdVbuLQZ02WcHpaj4z7JNMvPD+59/iQ=)
                          4: 68B41BBED51EE048421EC599A4F5A1921313EE8A.crl (hash: jIyGEj83OC72N4OhvIUx4Ob7n8mOSwv8LXwo7BmWWPk=)
                          5: 3134332e302e3230392e302f32342d3234203d3e20323634303732.roa (hash: tON0s8T5pvUfZu/V5hro0iOgf1Nf6nERHxxOBV8KRtQ=)
                          6: 3134332e302e3230382e302f32342d3234203d3e20323634303732.roa (hash: Zzhw+XxTzHQ/UX9R7g24DO/SLqsavmh8vXRkUvCM5tg=)
                          7: 3134332e302e3231312e302f32342d3234203d3e20323634303732.roa (hash: b4sz9n0viOdaQJvP+/qcOXce3XtJO2fTIRsFf/k+CjE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 03:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cf:b1:08:19:e4:e2:0a:9c:bb:a8:3a:6f:5e:1f:7d:5e:0b:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
        Validity
            Not Before: Jun 27 03:39:19 2026 GMT
            Not After : Jun 28 03:54:19 2026 GMT
        Subject: CN=B461EA1347341EF1038D836119E051BBF2484FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:5b:86:87:e6:ae:a7:b5:4e:f4:74:16:54:
                    22:7c:4e:8b:bb:0a:f1:7d:10:68:fd:13:4b:12:39:
                    97:50:fb:a9:47:36:6b:25:86:3b:9e:95:66:ac:93:
                    db:22:c8:a6:2e:6f:d5:cf:eb:36:3d:ed:7d:a0:f6:
                    fa:12:7c:a5:69:20:49:a9:2c:d4:25:6e:34:bd:22:
                    68:70:a8:3a:42:c7:cc:32:8b:08:c6:a3:c0:98:3b:
                    0e:30:4e:2d:f1:65:5d:ca:51:c1:d6:f8:73:de:15:
                    57:0c:6e:31:c3:a8:5e:d5:9b:75:65:e9:c1:25:c1:
                    1e:39:a0:58:10:5d:d0:db:44:18:5e:a8:03:7e:b2:
                    64:d2:08:48:1d:d1:50:8b:44:27:d0:57:f0:e2:24:
                    c2:0d:6c:37:ae:7c:24:0f:70:30:0d:40:3f:96:29:
                    fd:96:cb:62:ba:4e:16:24:64:31:99:44:be:2c:b9:
                    ea:0e:36:c4:40:0b:c0:50:9a:cb:c7:9d:91:bc:91:
                    42:eb:1b:aa:e5:7f:87:86:ed:28:9e:2a:42:06:16:
                    0c:d2:f8:01:87:09:ad:6b:30:3b:05:af:55:35:8b:
                    0b:4b:74:0b:14:ed:41:ef:e1:4c:c4:2f:78:39:b2:
                    a4:67:04:3d:b6:b1:75:c7:fb:8d:13:a9:7c:8f:d3:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:61:EA:13:47:34:1E:F1:03:8D:83:61:19:E0:51:BB:F2:48:4F:C2
            X509v3 Authority Key Identifier:
                keyid:68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f7:26:69:c4:8a:d1:ab:2f:48:14:be:92:4c:03:9f:c2:a8:
         64:a5:0c:50:60:eb:0d:5e:d3:88:9e:63:bc:48:2e:a3:1d:05:
         63:46:c0:3f:dd:4b:2e:56:c2:e3:b7:73:ea:2e:26:80:32:e1:
         90:7b:2e:79:f3:b0:b4:f3:3c:3e:17:85:54:c0:56:f0:53:ec:
         6d:1e:dd:f7:7d:b8:10:f8:3d:bb:03:57:bf:6a:d9:cd:f3:97:
         34:56:1c:f9:6a:5c:39:31:d4:f8:fb:9a:4e:cc:7a:21:4f:8e:
         39:ed:9b:52:32:56:23:eb:ac:83:c0:69:c1:a7:76:7c:5e:de:
         01:ab:f2:04:89:d6:b6:35:0f:e8:48:69:f6:d9:14:98:7d:cb:
         ab:6a:e9:f9:7d:47:c8:6a:03:47:23:a6:46:bd:8a:c4:2e:7f:
         7c:e0:5d:24:a0:5b:ee:90:12:af:8e:0a:61:69:b4:35:45:5c:
         b6:ab:73:50:20:b4:81:4a:6c:bf:e2:ff:23:70:a1:e7:4a:bb:
         54:99:22:a8:d2:96:a0:2b:a9:86:b3:2b:cc:0d:e9:8d:82:a7:
         9a:02:3e:68:f6:ad:36:05:03:75:c0:61:a7:db:bd:6e:67:ac:
         9d:02:0c:d2:92:fa:7d:5a:26:10:b1:4e:cf:48:c8:96:38:3f:
         21:82:c2:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYc+xCBnk4gqcu6g6b14ffV4L5kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhCNDFCQkVENTFFRTA0ODQyMUVDNTk5QTRGNUExOTIx
MzEzRUU4QTAeFw0yNjA2MjcwMzM5MTlaFw0yNjA2MjgwMzU0MTlaMDMxMTAvBgNV
BAMTKEI0NjFFQTEzNDczNDFFRjEwMzhEODM2MTE5RTA1MUJCRjI0ODRGQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bluGh+aup7VO9HQWVCJ8Tou7
CvF9EGj9E0sSOZdQ+6lHNmslhjuelWask9siyKYub9XP6zY97X2g9voSfKVpIEmp
LNQlbjS9ImhwqDpCx8wyiwjGo8CYOw4wTi3xZV3KUcHW+HPeFVcMbjHDqF7Vm3Vl
6cElwR45oFgQXdDbRBheqAN+smTSCEgd0VCLRCfQV/DiJMINbDeufCQPcDANQD+W
Kf2Wy2K6ThYkZDGZRL4sueoONsRAC8BQmsvHnZG8kULrG6rlf4eG7SieKkIGFgzS
+AGHCa1rMDsFr1U1iwtLdAsU7UHv4UzEL3g5sqRnBD22sXXH+40TqXyP03JlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtGHqE0c0HvEDjYNhGeBRu/JIT8IwHwYDVR0j
BBgwFoAUaLQbvtUe4EhCHsWZpPWhkhMT7oowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzRLWFNIbzgyYmgyb3N5V2lIUW9iRE5XYzZ4RnRvSGdEMXFmVjRmMldF
dHEvMC82OEI0MUJCRUQ1MUVFMDQ4NDIxRUM1OTlBNEY1QTE5MjEzMTNFRThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4QjQxQkJFRDUxRUUwNDg0
MjFFQzU5OUE0RjVBMTkyMTMxM0VFOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RzRLWFNIbzgyYmgyb3N5V2lIUW9iRE5XYzZ4RnRvSGdEMXFmVjRmMldFdHEvMC82
OEI0MUJCRUQ1MUVFMDQ4NDIxRUM1OTlBNEY1QTE5MjEzMTNFRThBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAavcmacSK0asvSBS+kkwDn8KoZKUMUGDrDV7TiJ5jvEguox0FY0bAP91LLlbC
47dz6i4mgDLhkHsuefOwtPM8PheFVMBW8FPsbR7d9324EPg9uwNXv2rZzfOXNFYc
+WpcOTHU+PuaTsx6IU+OOe2bUjJWI+usg8Bpwad2fF7eAavyBInWtjUP6Ehp9tkU
mH3Lq2rp+X1HyGoDRyOmRr2KxC5/fOBdJKBb7pASr44KYWm0NUVctqtzUCC0gUps
v+L/I3Ch50q7VJkiqNKWoCuphrMrzA3pjYKnmgI+aPatNgUDdcBhp9u9bmesnQIM
0pL6fVomELFOz0jIljg/IYLC2w==
-----END CERTIFICATE-----
Generated at Sat Jun 27 12:16:35 2026 by rpki-client