Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          +5MMip1bx9kCsFYXIZQbOqaEoou75Og2PeC0fTHu5PE=
Subject key identifier:   CC:CF:8A:43:77:27:85:DF:72:56:09:C9:E6:93:67:FE:C0:05:1E:F7
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       430CDE5B57769F50C904D441EDE4C84C2B2D3125
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          042C
Signing time:             Sat 13 Jun 2026 14:40:00 +0000
Manifest this update:     Sat 13 Jun 2026 14:35:00 +0000
Manifest next update:     Sun 14 Jun 2026 17:03:00 +0000
Files and hashes:         1: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=)
                          2: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: qlvvK7Eq5/lWUhPKseppGgxaush80fH+JFg/2kEwrkU=)
                          3: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: QNXC9SGPD/RkEBzNlwqont8z/VbM8QpUxpV7TfL9ABY=)
                          4: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=)
                          5: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=)
                          6: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=)
                          7: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: p8H/GRkW5V1qWf2jewXlHEMjzNIQZUgqEqSh46nQha8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0c:de:5b:57:76:9f:50:c9:04:d4:41:ed:e4:c8:4c:2b:2d:31:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Jun 13 14:35:00 2026 GMT
            Not After : Jun 14 17:03:00 2026 GMT
        Subject: CN=CCCF8A43772785DF725609C9E69367FEC0051EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:6c:97:67:0b:28:39:2d:35:66:bb:e8:7b:
                    9c:42:5f:ec:e9:1d:e2:6a:50:bd:e2:85:70:76:0a:
                    b5:b7:3e:f5:1b:9b:2e:dc:f5:53:f4:c2:09:ff:ee:
                    4f:74:b1:9d:6b:21:de:b7:a7:e7:e3:57:90:1b:41:
                    2b:03:65:30:8f:ac:70:7b:5a:17:05:87:1a:69:33:
                    08:df:02:d3:76:3b:38:3c:4c:d1:dd:4a:0c:00:52:
                    48:db:95:9a:c0:10:e9:f0:92:82:c4:a6:4a:89:9f:
                    39:c6:9e:dc:13:64:29:55:63:c0:ba:12:10:df:5b:
                    dc:58:63:f2:1a:a5:a9:b1:2f:ce:35:1b:17:92:89:
                    15:cd:ef:a0:c7:f9:88:56:90:a5:37:26:e2:09:c0:
                    ec:bf:66:b8:80:a0:29:46:6f:00:67:06:36:04:ab:
                    c7:de:72:fe:53:eb:94:5c:3c:0a:55:37:23:b2:b0:
                    4a:da:9c:f5:db:6f:d3:db:07:1f:e9:87:d9:ee:aa:
                    78:26:e7:1a:2d:69:68:71:39:3b:0b:74:8d:d8:ed:
                    7f:dc:e6:31:9d:c8:18:f3:65:6e:94:3e:60:5b:7d:
                    7c:81:08:73:a0:ec:b0:86:f9:c8:39:69:1e:80:05:
                    61:ee:c6:6f:d9:18:5f:3f:13:1d:d2:fd:99:e6:51:
                    07:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CF:8A:43:77:27:85:DF:72:56:09:C9:E6:93:67:FE:C0:05:1E:F7
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0e:34:bf:25:aa:95:f1:8b:34:c6:27:33:8d:0f:64:f8:e1:
         a8:ca:f0:9a:44:3c:f9:e3:bb:86:8f:5b:b3:6a:06:d3:90:28:
         17:5c:d1:d3:0c:10:19:14:8b:be:48:08:3f:ef:5d:31:87:77:
         8a:27:43:18:ba:be:08:19:58:40:24:62:27:7a:11:b8:b4:d6:
         2a:a2:ab:7e:0a:f1:fa:bb:60:d1:cd:74:d9:0d:ee:2c:27:20:
         fc:59:96:bc:c2:70:ad:60:aa:f1:4b:ab:0e:c8:e1:b8:6f:cb:
         8d:77:52:87:12:64:19:09:e0:c6:a6:f0:9c:7f:d3:5c:1a:80:
         27:f8:77:c3:fa:23:c3:3e:8e:f2:d9:e0:03:10:f0:0c:1b:ca:
         ef:3c:cf:82:e9:7c:ce:b3:47:00:39:83:59:a4:64:9d:82:2f:
         ba:bf:7e:3a:b6:ab:4f:ba:fd:fa:17:1f:f8:f7:97:98:0a:76:
         e8:fd:bd:ce:95:c4:8c:d5:8d:d4:73:fa:af:f3:8a:29:8a:4f:
         6e:e1:28:a5:a0:c5:98:ba:ed:38:a9:b0:1e:be:9e:f4:61:15:
         64:8b:e1:19:ad:a7:24:b5:0a:40:93:ba:29:3d:a4:40:82:28:
         2e:d4:ed:b5:d6:89:ad:aa:b8:2c:1a:4d:0d:04:92:ad:75:08:
         b5:a6:46:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQwzeW1d2n1DJBNRB7eTITCstMSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1
QzkyRDQwQzAeFw0yNjA2MTMxNDM1MDBaFw0yNjA2MTQxNzAzMDBaMDMxMTAvBgNV
BAMTKENDQ0Y4QTQzNzcyNzg1REY3MjU2MDlDOUU2OTM2N0ZFQzAwNTFFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/2yXZwsoOS01Zrvoe5xCX+zp
HeJqUL3ihXB2CrW3PvUbmy7c9VP0wgn/7k90sZ1rId63p+fjV5AbQSsDZTCPrHB7
WhcFhxppMwjfAtN2Ozg8TNHdSgwAUkjblZrAEOnwkoLEpkqJnznGntwTZClVY8C6
EhDfW9xYY/IapamxL841GxeSiRXN76DH+YhWkKU3JuIJwOy/ZriAoClGbwBnBjYE
q8fecv5T65RcPApVNyOysEranPXbb9PbBx/ph9nuqngm5xotaWhxOTsLdI3Y7X/c
5jGdyBjzZW6UPmBbfXyBCHOg7LCG+cg5aR6ABWHuxm/ZGF8/Ex3S/ZnmUQfBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzM+KQ3cnhd9yVgnJ5pNn/sAFHvcwHwYDVR0j
BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz
NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1alAvMS9G
OTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlw40vyWqlfGLNMYnM40PZPjhqMrwmkQ8+eO7ho9bs2oG05AoF1zR0wwQGRSL
vkgIP+9dMYd3iidDGLq+CBlYQCRiJ3oRuLTWKqKrfgrx+rtg0c102Q3uLCcg/FmW
vMJwrWCq8UurDsjhuG/LjXdShxJkGQngxqbwnH/TXBqAJ/h3w/ojwz6O8tngAxDw
DBvK7zzPgul8zrNHADmDWaRknYIvur9+OrarT7r9+hcf+PeXmAp26P29zpXEjNWN
1HP6r/OKKYpPbuEopaDFmLrtOKmwHr6e9GEVZIvhGa2nJLUKQJO6KT2kQIIoLtTt
tdaJraq4LBpNDQSSrXUItaZGag==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:25 2026 by rpki-client