Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          lmliclK+36eU6z4XYfLgAK2MiagTD97oZjL9GEJkcSs=
Subject key identifier:   63:F2:E3:FC:AD:BC:63:03:F3:91:33:71:8E:59:CB:4D:28:44:28:C3
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       40AA597A73A263A54FC5B6EAAB45C74886485223
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          0286
Signing time:             Thu 09 Apr 2026 10:42:15 +0000
Manifest this update:     Thu 09 Apr 2026 10:37:15 +0000
Manifest next update:     Fri 10 Apr 2026 13:45:15 +0000
Files and hashes:         1: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: uLO5TLoSKSJ1ibbAmrisrwOcWSkRjyjU06VO251FdHw=)
                          2: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: nu55xWeT9yQOed/eFbtXZTB95jZKYQjcNmdN0inIWHQ=)
                          3: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: bvUq85Wh8ftDOyg/8+3jZmE0gxoPfowoMhAClMGAt2E=)
                          4: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: y69Is5luUmXcZxNE3bqqFfTIRfDYtQZ9bTwKiEy/7ps=)
                          5: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ncsphoZ09smyapKDgZA2FUw/VNkNQ4ipQW+O5b1GSMM=)
                          6: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: CyzTzT4126u5822CNIUl3acuE72zxftAppkFEtFEpFI=)
                          7: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EKqdQFIheFPrygqIVnqpg9rmQepPLJCHCnxqkhoBtbc=)
                          8: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: oPcNFkIGIexIXo9wFyuFE8wDPvx8UsqjswTKNhuf7Rs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:aa:59:7a:73:a2:63:a5:4f:c5:b6:ea:ab:45:c7:48:86:48:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Apr  9 10:37:15 2026 GMT
            Not After : Apr 10 13:45:15 2026 GMT
        Subject: CN=63F2E3FCADBC6303F39133718E59CB4D284428C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:1a:85:d6:02:7f:e1:47:7d:d5:bb:57:15:
                    90:28:5f:cc:dc:3e:0e:b8:76:d5:ab:21:21:c4:a1:
                    f7:1d:5a:35:2b:88:c7:6a:47:c4:21:40:bc:0c:73:
                    d5:bd:72:0f:a5:a2:86:40:49:98:d9:47:20:cb:43:
                    ba:52:b1:f8:51:e7:60:0d:b9:bc:5b:13:14:e8:c0:
                    01:0e:7e:a3:71:13:21:5f:1b:c8:87:2c:b3:a2:2a:
                    a3:2f:06:59:df:cd:42:a4:76:86:f1:50:70:37:a1:
                    e0:32:18:8b:55:b6:3b:44:e9:d1:a9:1b:f6:59:bb:
                    f8:e5:54:09:11:bc:93:21:26:09:3a:34:3f:15:93:
                    95:45:e8:7c:b8:48:1f:59:c4:1a:b1:97:ea:29:14:
                    b0:35:54:f2:0d:fd:e2:4d:49:68:c4:25:57:58:39:
                    b7:b3:f6:df:1f:36:67:2c:f7:2d:f8:f7:6f:88:0d:
                    da:26:3b:f1:52:b1:ff:2b:f9:fe:d6:c4:4b:e4:14:
                    3f:6a:f5:91:0a:01:86:ab:6b:d6:48:cc:07:ac:cb:
                    7f:89:8b:73:df:a6:7a:1a:d1:ec:0a:1d:8d:ad:e6:
                    9b:44:0e:17:ca:2e:df:03:f3:9b:c0:3b:7b:e1:f9:
                    2b:6f:f4:a3:1b:8e:4e:cc:00:42:65:0a:d6:d5:f5:
                    00:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:E3:FC:AD:BC:63:03:F3:91:33:71:8E:59:CB:4D:28:44:28:C3
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:13:e4:db:84:18:40:e7:e9:fc:ce:89:79:37:dc:b2:a2:
         42:fa:e4:d4:9c:75:e5:26:1f:2d:d4:2b:33:b7:a0:ba:a7:ec:
         a7:72:78:c3:d2:20:e8:8c:6f:e3:46:48:39:cb:43:d7:5d:f8:
         0d:b9:51:8e:47:1a:55:c8:1a:e7:c9:62:2e:77:8c:a9:48:b1:
         4e:e0:d4:21:fa:b8:74:6c:03:32:56:b2:b2:18:4f:72:b1:cc:
         07:dd:f5:9e:a6:94:b8:17:f1:7d:e0:4a:99:b9:08:22:34:f6:
         34:1c:70:75:61:84:50:be:0f:39:2e:e1:e3:d5:39:c8:83:ba:
         34:fe:1c:db:22:2f:b0:33:32:3b:f0:ef:0b:a7:98:c9:fe:8c:
         d8:c0:1a:9f:03:7a:4f:37:7c:e2:47:5f:49:23:c3:7b:6c:88:
         8a:02:73:5a:ae:70:b5:68:e5:bf:27:17:f1:83:72:46:00:7b:
         ed:17:1b:6d:34:15:c2:35:78:d3:1c:16:e0:01:a7:26:41:ae:
         6a:8a:ed:c9:0b:5c:6c:00:e5:ad:f9:5b:b9:3b:c9:9b:f7:d1:
         b9:02:ea:10:e4:1e:f1:ab:f8:ff:d8:0e:3b:ed:a9:d4:e5:85:
         8d:fa:0f:0f:31:1f:63:59:b7:a9:3d:fe:c0:f1:07:9f:9d:6b:
         95:3b:f8:3c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQKpZenOiY6VPxbbqq0XHSIZIUiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5
NzZCMDcxNzAeFw0yNjA0MDkxMDM3MTVaFw0yNjA0MTAxMzQ1MTVaMDMxMTAvBgNV
BAMTKDYzRjJFM0ZDQURCQzYzMDNGMzkxMzM3MThFNTlDQjREMjg0NDI4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9xqF1gJ/4Ud91btXFZAoX8zc
Pg64dtWrISHEofcdWjUriMdqR8QhQLwMc9W9cg+looZASZjZRyDLQ7pSsfhR52AN
ubxbExTowAEOfqNxEyFfG8iHLLOiKqMvBlnfzUKkdobxUHA3oeAyGItVtjtE6dGp
G/ZZu/jlVAkRvJMhJgk6ND8Vk5VF6Hy4SB9ZxBqxl+opFLA1VPIN/eJNSWjEJVdY
Obez9t8fNmcs9y3492+IDdomO/FSsf8r+f7WxEvkFD9q9ZEKAYara9ZIzAesy3+J
i3Pfpnoa0ewKHY2t5ptEDhfKLt8D85vAO3vh+Stv9KMbjk7MAEJlCtbV9QBLAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUY/Lj/K28YwPzkTNxjlnLTShEKMMwHwYDVR0j
BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl
LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF
NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2dF
V1Q4YTRHZWNzMmZZNTZxUWQ5aTFVcktUbmVkeXFMWnNSZVlqdVh3NGUvMC8zQjYw
QzAzQzA4MzQ5ODQ1NzBFNThEQjlCREU1RDNERDk3NkIwNzE3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
OlsT5NuEGEDn6fzOiXk33LKiQvrk1Jx15SYfLdQrM7eguqfsp3J4w9Ig6Ixv40ZI
OctD1134DblRjkcaVcga58liLneMqUixTuDUIfq4dGwDMlayshhPcrHMB931nqaU
uBfxfeBKmbkIIjT2NBxwdWGEUL4POS7h49U5yIO6NP4c2yIvsDMyO/DvC6eYyf6M
2MAanwN6Tzd84kdfSSPDe2yIigJzWq5wtWjlvycX8YNyRgB77RcbbTQVwjV40xwW
4AGnJkGuaortyQtcbADlrflbuTvJm/fRuQLqEOQe8av4/9gOO+2p1OWFjfoPDzEf
Y1m3qT3+wPEHn51rlTv4PA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:28:15 2026 by rpki-client