Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft
File:                     D3674BC62244757D82BD45C85C9511AD511807E1.mft (raw, json)
Hash identifier:          moHPKQIPQxHjLPzYbgkFU3E1Mj6A+/sb7mTttQkT12c=
Subject key identifier:   2D:37:F5:B3:21:18:AB:4E:AD:74:CC:43:49:D0:6F:1A:86:83:BE:21
Authority key identifier: D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1
Certificate issuer:       /CN=D3674BC62244757D82BD45C85C9511AD511807E1
Certificate serial:       397DEEC6878C7F21B744154AF81B03FBAB6BB62A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft
Manifest number:          F2
Signing time:             Sat 22 Aug 2026 22:54:50 +0000
Manifest this update:     Sat 22 Aug 2026 22:49:50 +0000
Manifest next update:     Sun 23 Aug 2026 23:20:50 +0000
Files and hashes:         1: 323830343a323538303a343030303a3a2f33352d3335203d3e20323634323834.roa (hash: GiGWz4RAlG8gn91IwKmcLguCPe7y1LUADUcrHqT2oA8=)
                          2: 3133382e3132312e322e302f32342d3234203d3e20323634323834.roa (hash: Wg2kmj5y5xf9Pog157cJwxpHsj6t1C4XjOTIFMKAZ7w=)
                          3: 3133382e3132312e332e302f32342d3234203d3e20323634323834.roa (hash: 5bU25ZWGJH7FZXELTEtdk9/ZsGKTQ2EfkIlPUD3Y8tA=)
                          4: 3133382e3132312e312e302f32342d3234203d3e20323634323834.roa (hash: +uZ1ga7LCW8ionLzs77htbEizYfXLrvnQzzO+WpAhio=)
                          5: 323830343a323538303a63303a3a2f34332d3433203d3e20323634323834.roa (hash: +SDaXExXSkxRgsP0tCq6ort34HYsXAnRjQjwyg5FnbY=)
                          6: D3674BC62244757D82BD45C85C9511AD511807E1.crl (hash: 16IlswYXcJCrsE/F+qyx+fzA60qlI5JLbjeP9bySn6s=)
                          7: 323830343a323538303a38303a3a2f34382d3438203d3e20323634323834.roa (hash: 3G66sPPBvK0if21ASlIOGDQa1BV0pbDJUGTlzsqh928=)
                          8: 323830343a323538303a3a2f33352d3335203d3e20323634323834.roa (hash: VP54pApoDSMDo/PpPoSfNylmRKkjTb6L+8aYPCS35Z8=)
                          9: 3133382e3132312e302e302f32332d3233203d3e20323634323834.roa (hash: pYqgbspgiVfrwe8evrGQHoF0+dLIUiAQaTuS+NMvJZI=)
                          10: 3133382e3132312e302e302f32342d3234203d3e20323634323834.roa (hash: KrETPjlzMgOswtA5b9g8jgkIv3gTwd+CNzKF8ewH4UI=)
                          11: 323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa (hash: sRV1qMEDw9BHOBuHdo8x4TwdAKOGq6rGq2g9RR4QsyI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:ee:c6:87:8c:7f:21:b7:44:15:4a:f8:1b:03:fb:ab:6b:b6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3674BC62244757D82BD45C85C9511AD511807E1
        Validity
            Not Before: Aug 22 22:49:50 2026 GMT
            Not After : Aug 23 23:20:50 2026 GMT
        Subject: CN=2D37F5B32118AB4EAD74CC4349D06F1A8683BE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:d4:08:20:b8:e4:d5:78:1d:ab:26:ac:59:
                    f6:0d:d8:00:8e:86:12:c7:09:f2:f3:85:4d:ca:7a:
                    95:5f:d0:14:d9:f3:8c:e5:3a:03:d1:17:47:7b:20:
                    fd:e3:87:44:4c:59:46:fb:dd:48:f4:6c:d7:c0:04:
                    62:fb:ce:40:f8:81:50:f9:43:d1:62:cb:e1:3e:f0:
                    02:69:96:39:61:65:50:2b:36:c5:9a:06:16:00:d9:
                    bc:c8:60:96:fd:d2:e8:3d:d3:26:9f:d0:84:a1:6f:
                    f9:f2:46:73:2b:24:05:f7:e0:0c:32:c8:29:ce:96:
                    f9:c2:26:5d:a8:d1:1c:37:75:40:f8:ff:85:13:18:
                    7d:7c:90:b9:83:14:5e:b5:78:2d:a0:e5:fb:44:71:
                    54:50:9b:a9:4a:45:09:2c:f7:c9:7b:c4:2c:81:0c:
                    49:7d:7e:4b:cc:eb:69:e0:d3:ce:10:93:be:d2:9b:
                    ba:ef:af:47:1c:1c:2b:66:50:97:eb:54:ef:7a:d4:
                    db:12:66:d1:a9:80:ea:0f:25:60:f4:c4:bb:a6:2b:
                    45:09:9b:1c:2c:1c:66:d7:65:0a:95:4b:72:ee:e5:
                    0a:2c:f3:29:12:72:ca:f1:53:2c:c4:9a:f1:49:9b:
                    8e:7a:f5:45:7e:12:72:fe:1c:c1:76:ea:0d:41:1e:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:37:F5:B3:21:18:AB:4E:AD:74:CC:43:49:D0:6F:1A:86:83:BE:21
            X509v3 Authority Key Identifier:
                keyid:D3:67:4B:C6:22:44:75:7D:82:BD:45:C8:5C:95:11:AD:51:18:07:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3674BC62244757D82BD45C85C9511AD511807E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/D3674BC62244757D82BD45C85C9511AD511807E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:57:36:ee:8c:16:54:bd:91:3d:fc:fb:fe:1f:fc:2f:b1:
         3a:29:96:89:41:a6:7e:0c:c3:ce:e1:b5:32:ce:85:fa:4b:98:
         ce:f0:38:8c:e2:85:e0:8d:2f:68:6e:ea:44:77:70:e5:11:33:
         19:fb:c7:cf:b9:74:a3:38:54:cd:57:ed:5d:df:b2:0d:b7:7c:
         78:ef:18:73:aa:92:c4:15:49:65:e1:2f:4b:93:67:f3:d2:19:
         d7:d3:75:32:80:c4:6b:a8:0b:a9:3b:96:7c:90:18:b1:06:4d:
         11:87:b3:e7:63:08:ee:b4:a5:95:5e:09:97:16:5a:b2:79:4d:
         33:7e:a0:4f:31:e8:8e:7e:bc:a4:5d:c6:60:2b:73:bc:0a:2c:
         1b:86:16:1e:cc:65:53:a5:0d:42:a4:36:04:b9:7c:fc:ba:c6:
         92:95:84:19:cd:43:f5:68:6a:ca:b7:0b:7f:d9:e2:14:54:de:
         9a:fc:b6:1f:c5:62:4b:25:f5:ca:18:22:0b:16:c6:fb:bc:79:
         64:b7:3d:51:9d:d4:b0:47:0d:83:df:50:c9:95:c1:73:6d:0f:
         7b:be:07:90:a8:a1:51:c8:b3:97:e2:92:a5:4a:48:8a:4b:11:
         34:64:25:13:6a:4b:27:e1:0e:f8:b9:f5:ef:c8:ee:de:c1:e5:
         49:c1:e5:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOX3uxoeMfyG3RBVK+BsD+6trtiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM2NzRCQzYyMjQ0NzU3RDgyQkQ0NUM4NUM5NTExQUQ1
MTE4MDdFMTAeFw0yNjA4MjIyMjQ5NTBaFw0yNjA4MjMyMzIwNTBaMDMxMTAvBgNV
BAMTKDJEMzdGNUIzMjExOEFCNEVBRDc0Q0M0MzQ5RDA2RjFBODY4M0JFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdNQIILjk1XgdqyasWfYN2ACO
hhLHCfLzhU3KepVf0BTZ84zlOgPRF0d7IP3jh0RMWUb73Uj0bNfABGL7zkD4gVD5
Q9Fiy+E+8AJpljlhZVArNsWaBhYA2bzIYJb90ug90yaf0IShb/nyRnMrJAX34Awy
yCnOlvnCJl2o0Rw3dUD4/4UTGH18kLmDFF61eC2g5ftEcVRQm6lKRQks98l7xCyB
DEl9fkvM62ng084Qk77Sm7rvr0ccHCtmUJfrVO961NsSZtGpgOoPJWD0xLumK0UJ
mxwsHGbXZQqVS3Lu5Qos8ykScsrxUyzEmvFJm4569UV+EnL+HMF26g1BHqNJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULTf1syEYq06tdMxDSdBvGoaDviEwHwYDVR0j
BBgwFoAU02dLxiJEdX2CvUXIXJURrVEYB+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHpmUXpLamdwNDE3eXFvRWRVZENmN3FFdzlqWmlvdlhNM1hLUGlhc3ph
TFIvMC9EMzY3NEJDNjIyNDQ3NTdEODJCRDQ1Qzg1Qzk1MTFBRDUxMTgwN0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNjc0QkM2MjI0NDc1N0Q4
MkJENDVDODVDOTUxMUFENTExODA3RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHpmUXpLamdwNDE3eXFvRWRVZENmN3FFdzlqWmlvdlhNM1hLUGlhc3phTFIvMC9E
MzY3NEJDNjIyNDQ3NTdEODJCRDQ1Qzg1Qzk1MTFBRDUxMTgwN0UxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjsRXNu6MFlS9kT38+/4f/C+xOimWiUGmfgzDzuG1Ms6F+kuYzvA4jOKF4I0v
aG7qRHdw5REzGfvHz7l0ozhUzVftXd+yDbd8eO8Yc6qSxBVJZeEvS5Nn89IZ19N1
MoDEa6gLqTuWfJAYsQZNEYez52MI7rSllV4JlxZasnlNM36gTzHojn68pF3GYCtz
vAosG4YWHsxlU6UNQqQ2BLl8/LrGkpWEGc1D9WhqyrcLf9niFFTemvy2H8ViSyX1
yhgiCxbG+7x5ZLc9UZ3UsEcNg99QyZXBc20Pe74HkKihUcizl+KSpUpIiksRNGQl
E2pLJ+EO+Ln178ju3sHlScHlbw==
-----END CERTIFICATE-----