Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
File:                     33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json)
Hash identifier:          t+NdFz/a9y0Y8IK1n8YNPPFBGAqR7O6KEJUCD2r+Izw=
Subject key identifier:   48:67:18:30:15:C5:AC:8F:84:8F:F4:94:77:4D:EE:4E:62:F9:83:E8
Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC
Certificate issuer:       /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
Certificate serial:       7122CAA788552C6C89A857D32C8E08929E3F38CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
Manifest number:          CD
Signing time:             Sat 13 Jun 2026 18:16:21 +0000
Manifest this update:     Sat 13 Jun 2026 18:11:21 +0000
Manifest next update:     Sun 14 Jun 2026 21:59:21 +0000
Files and hashes:         1: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=)
                          2: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: vcfddFhU+JpbOySjjmbb6QCpb4zJJtk50WMuWLhfcv8=)
                          3: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=)
                          4: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl
                          rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:22:ca:a7:88:55:2c:6c:89:a8:57:d3:2c:8e:08:92:9e:3f:38:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC
        Validity
            Not Before: Jun 13 18:11:21 2026 GMT
            Not After : Jun 14 21:59:21 2026 GMT
        Subject: CN=4867183015C5AC8F848FF494774DEE4E62F983E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:c3:63:25:b9:eb:96:1b:82:af:0c:d2:ad:
                    d0:f9:91:26:53:b8:eb:fd:3f:b6:66:60:b9:19:01:
                    d6:68:01:b1:b1:e6:9f:c7:b5:04:1a:c1:32:d5:46:
                    9a:44:33:4f:03:a7:25:bf:43:2d:7e:42:7b:ea:3e:
                    fd:4e:7b:e7:26:3b:4b:21:1f:30:24:f1:bd:82:d8:
                    ba:a9:5d:44:de:89:ea:6a:97:6d:44:36:0b:52:e0:
                    95:8b:a7:f6:0a:a4:f4:79:b6:bc:4e:df:cf:b6:39:
                    01:a7:98:fb:b1:6a:55:90:a3:6c:47:c8:94:56:3b:
                    62:0a:a1:87:55:cf:df:f8:5d:eb:db:28:15:90:c6:
                    a5:b7:15:a4:51:2c:74:35:92:20:9d:e8:ef:12:50:
                    d6:eb:1f:4f:d0:ee:2e:37:23:e3:08:05:5f:b9:11:
                    72:e4:08:da:1c:5b:fc:64:8a:1f:eb:99:07:22:26:
                    01:e7:25:77:ad:0b:71:8e:0c:fc:2d:8f:91:2d:dc:
                    cc:46:e9:90:a9:dc:df:e9:8b:fd:95:50:bb:03:b0:
                    ae:f3:0d:37:54:ce:1d:66:2e:4c:b7:80:98:18:9b:
                    78:aa:e5:6f:8c:56:9c:a4:5f:7b:ec:1e:d3:2f:a5:
                    77:06:f1:d8:d1:92:0e:b6:35:61:59:6c:cb:c2:83:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:18:30:15:C5:AC:8F:84:8F:F4:94:77:4D:EE:4E:62:F9:83:E8
            X509v3 Authority Key Identifier:
                keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d6:ed:2a:e0:6a:51:02:a0:35:e2:0d:f0:48:02:27:00:f5:
         78:83:93:fc:23:32:e6:81:62:aa:d2:52:93:43:e5:4a:5f:82:
         d1:ad:6f:73:8b:e2:88:ce:85:43:f9:b5:46:2a:e2:98:8c:4a:
         c9:cd:3e:21:dc:70:f3:d1:fa:57:14:17:4b:72:b3:26:73:b2:
         de:c0:aa:c9:3e:dd:10:35:a8:2b:18:23:27:27:8f:f0:c5:50:
         69:ab:58:09:65:bd:84:bb:a0:ca:b8:d2:e4:b3:88:25:29:3b:
         f3:1b:29:d9:93:da:0f:9a:d4:9c:cd:30:a8:20:be:d0:7d:f9:
         4f:62:0f:ff:d8:f5:07:db:9c:10:87:eb:2c:b4:ad:1e:c5:aa:
         7b:b6:62:80:d2:1f:d2:13:73:63:d4:69:fb:26:8c:8e:49:da:
         91:9f:e4:a5:cd:19:8f:ce:d2:f5:55:69:82:0a:06:8f:44:7c:
         47:b5:44:40:c3:7a:36:15:d2:52:ca:fc:e6:14:4a:6d:b4:33:
         67:32:05:56:f6:94:3a:ab:37:7a:ae:1c:dd:4d:94:ad:0c:e6:
         e2:95:d4:a8:73:52:19:44:95:94:7a:eb:04:1c:cd:14:54:0b:
         cc:16:ed:2d:0f:7a:98:f4:11:19:af:78:70:b8:b9:7a:a5:c5:
         48:91:88:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcSLKp4hVLGyJqFfTLI4Ikp4/OMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw
QkU1RTFFQzAeFw0yNjA2MTMxODExMjFaFw0yNjA2MTQyMTU5MjFaMDMxMTAvBgNV
BAMTKDQ4NjcxODMwMTVDNUFDOEY4NDhGRjQ5NDc3NERFRTRFNjJGOTgzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww8NjJbnrlhuCrwzSrdD5kSZT
uOv9P7ZmYLkZAdZoAbGx5p/HtQQawTLVRppEM08DpyW/Qy1+QnvqPv1Oe+cmO0sh
HzAk8b2C2LqpXUTeiepql21ENgtS4JWLp/YKpPR5trxO38+2OQGnmPuxalWQo2xH
yJRWO2IKoYdVz9/4XevbKBWQxqW3FaRRLHQ1kiCd6O8SUNbrH0/Q7i43I+MIBV+5
EXLkCNocW/xkih/rmQciJgHnJXetC3GODPwtj5Et3MxG6ZCp3N/pi/2VULsDsK7z
DTdUzh1mLky3gJgYm3iq5W+MVpykX3vsHtMvpXcG8djRkg62NWFZbMvCg5CrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSGcYMBXFrI+Ej/SUd03uTmL5g+gwHwYDVR0j
BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq
ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD
ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z
MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGNbtKuBqUQKgNeIN8EgCJwD1eIOT/CMy5oFiqtJSk0PlSl+C0a1vc4viiM6F
Q/m1RirimIxKyc0+Idxw89H6VxQXS3KzJnOy3sCqyT7dEDWoKxgjJyeP8MVQaatY
CWW9hLugyrjS5LOIJSk78xsp2ZPaD5rUnM0wqCC+0H35T2IP/9j1B9ucEIfrLLSt
HsWqe7ZigNIf0hNzY9Rp+yaMjknakZ/kpc0Zj87S9VVpggoGj0R8R7VEQMN6NhXS
Usr85hRKbbQzZzIFVvaUOqs3eq4c3U2UrQzm4pXUqHNSGUSVlHrrBBzNFFQLzBbt
LQ96mPQRGa94cLi5eqXFSJGI6w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:56:15 2026 by rpki-client