Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
File:                     216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft (raw, json)
Hash identifier:          rY3omTG8becNDaj9pXKWpG23Gv0nWmk36mdj1K4gh9o=
Subject key identifier:   41:E2:45:C7:36:36:D5:26:C2:26:BA:32:EF:A6:08:30:00:CD:C3:33
Authority key identifier: 21:66:46:11:7C:CC:EA:6B:81:BA:E6:31:DC:E8:8B:22:8D:51:A1:CF
Certificate issuer:       /CN=216646117CCCEA6B81BAE631DCE88B228D51A1CF
Certificate serial:       101739F6DB4827E91E3BCEDFBF892214F7F4D45E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
Manifest number:          DB
Signing time:             Sat 18 Apr 2026 04:14:55 +0000
Manifest this update:     Sat 18 Apr 2026 04:09:55 +0000
Manifest next update:     Sun 19 Apr 2026 08:10:55 +0000
Files and hashes:         1: 323830343a356635343a3a2f33322d313238203d3e20323639303932.roa (hash: ECsW8oJ1XGoMLfx1OL/+EgO7CYOVSo2+3YA5Ulpj0/4=)
                          2: 216646117CCCEA6B81BAE631DCE88B228D51A1CF.crl (hash: 3N+slbrFVFxR+OPYxktlr7UVGQjB7a+6aDMyeEoo5Jo=)
                          3: 34352e3137392e3136382e302f32322d3332203d3e20323639303932.roa (hash: fqy1yj4fqKQxeo/unqWxTyYG4rfgJw3h5Eg7k/ZI4e0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 08:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:17:39:f6:db:48:27:e9:1e:3b:ce:df:bf:89:22:14:f7:f4:d4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216646117CCCEA6B81BAE631DCE88B228D51A1CF
        Validity
            Not Before: Apr 18 04:09:55 2026 GMT
            Not After : Apr 19 08:10:55 2026 GMT
        Subject: CN=41E245C73636D526C226BA32EFA6083000CDC333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:b5:8c:cb:47:67:09:6a:ee:24:97:ca:6e:
                    02:6a:d5:d2:ef:57:4e:5b:d3:3d:03:55:9f:f9:60:
                    29:cf:24:0a:19:cc:fa:dd:a1:4d:6a:c4:67:ef:24:
                    ac:d6:50:f3:e4:cd:22:66:1a:7c:19:c5:62:0c:07:
                    71:18:aa:cc:04:0a:3b:09:3b:a2:8c:03:60:3f:48:
                    09:2e:69:54:9e:9c:64:be:f0:c3:d5:f6:96:83:cd:
                    2a:da:5e:72:22:68:b1:2c:7a:56:10:db:1f:54:05:
                    a1:64:30:01:b5:45:31:ab:58:b8:4a:40:45:8b:01:
                    01:ea:2a:ab:05:81:f4:96:b7:81:f4:de:02:20:fc:
                    65:36:da:2d:22:96:fb:35:4e:0f:b9:80:69:bb:f2:
                    39:bf:1e:0e:a5:ef:27:77:98:f2:f9:08:5d:70:76:
                    64:4a:0f:1e:7c:e6:dd:f6:cf:4a:54:6f:89:37:0f:
                    52:d4:86:94:44:58:63:5d:76:2a:9e:ff:aa:3c:0a:
                    c2:e5:c3:3e:c9:2e:04:04:e5:fc:52:37:e8:06:8e:
                    46:c7:62:7f:31:42:52:30:23:05:e0:c0:dc:a0:4b:
                    1e:cf:32:4a:9e:35:c5:0e:27:ea:04:df:78:c6:db:
                    44:60:b4:3a:60:da:e2:4b:58:e7:f8:0b:cb:4b:05:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:45:C7:36:36:D5:26:C2:26:BA:32:EF:A6:08:30:00:CD:C3:33
            X509v3 Authority Key Identifier:
                keyid:21:66:46:11:7C:CC:EA:6B:81:BA:E6:31:DC:E8:8B:22:8D:51:A1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/216646117CCCEA6B81BAE631DCE88B228D51A1CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/216646117CCCEA6B81BAE631DCE88B228D51A1CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:64:1c:70:52:13:57:1b:7e:2a:02:54:f0:e9:0b:5f:b1:42:
         84:bb:69:4f:3b:b0:ad:2f:88:4d:2f:b1:35:97:36:8b:72:3e:
         de:34:73:10:6a:c9:da:8f:4c:42:7c:23:19:1a:25:c6:de:e6:
         1e:69:b3:1c:37:38:da:57:a7:6d:e5:1e:0a:92:14:ab:08:f9:
         d4:c2:bc:79:fa:d4:5e:e0:25:ea:0d:0c:76:c4:f8:49:46:87:
         b8:3a:9e:47:8c:16:e9:df:f7:ab:9c:34:50:c6:dc:12:7f:d1:
         ee:62:43:a9:c0:fd:91:d8:e9:eb:33:ae:ab:1d:c7:dd:1d:02:
         ce:17:f2:bc:20:52:59:6e:5b:f0:75:b2:ec:e9:70:f3:81:67:
         7a:18:ec:c5:e8:b1:11:08:d9:eb:28:07:45:c4:14:5b:9f:7e:
         f2:74:6d:97:77:d4:f5:ca:dd:52:3e:2f:ef:fb:cd:ad:e4:07:
         b6:af:f2:d1:08:66:76:da:c7:2f:a1:a2:d9:1d:f2:7b:ee:ed:
         7d:eb:17:51:d9:0c:ba:9e:11:c4:f9:d1:2f:a4:e2:fc:c8:02:
         bc:c2:c5:fc:c2:a7:a6:f0:ca:80:50:2d:b6:6a:03:6e:49:a6:
         81:92:2f:7c:9f:f0:3b:3b:f1:bb:62:46:93:c1:f7:b3:0f:ab:
         e8:8a:35:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEBc59ttIJ+keO87fv4kiFPf01F4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE2NjQ2MTE3Q0NDRUE2QjgxQkFFNjMxRENFODhCMjI4
RDUxQTFDRjAeFw0yNjA0MTgwNDA5NTVaFw0yNjA0MTkwODEwNTVaMDMxMTAvBgNV
BAMTKDQxRTI0NUM3MzYzNkQ1MjZDMjI2QkEzMkVGQTYwODMwMDBDREMzMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+7WMy0dnCWruJJfKbgJq1dLv
V05b0z0DVZ/5YCnPJAoZzPrdoU1qxGfvJKzWUPPkzSJmGnwZxWIMB3EYqswECjsJ
O6KMA2A/SAkuaVSenGS+8MPV9paDzSraXnIiaLEselYQ2x9UBaFkMAG1RTGrWLhK
QEWLAQHqKqsFgfSWt4H03gIg/GU22i0ilvs1Tg+5gGm78jm/Hg6l7yd3mPL5CF1w
dmRKDx585t32z0pUb4k3D1LUhpREWGNddiqe/6o8CsLlwz7JLgQE5fxSN+gGjkbH
Yn8xQlIwIwXgwNygSx7PMkqeNcUOJ+oE33jG20RgtDpg2uJLWOf4C8tLBWk/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQeJFxzY21SbCJroy76YIMADNwzMwHwYDVR0j
BBgwFoAUIWZGEXzM6muBuuYx3OiLIo1Roc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21XdzFYcjZ1d0xjeHk4VFZjejJXaUZzRkhXa1FHZmNvRHk0d2diOFBR
NmEvMC8yMTY2NDYxMTdDQ0NFQTZCODFCQUU2MzFEQ0U4OEIyMjhENTFBMUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxNjY0NjExN0NDQ0VBNkI4
MUJBRTYzMURDRTg4QjIyOEQ1MUExQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M21XdzFYcjZ1d0xjeHk4VFZjejJXaUZzRkhXa1FHZmNvRHk0d2diOFBRNmEvMC8y
MTY2NDYxMTdDQ0NFQTZCODFCQUU2MzFEQ0U4OEIyMjhENTFBMUNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABmQccFITVxt+KgJU8OkLX7FChLtpTzuwrS+ITS+xNZc2i3I+3jRzEGrJ2o9M
QnwjGRolxt7mHmmzHDc42lenbeUeCpIUqwj51MK8efrUXuAl6g0MdsT4SUaHuDqe
R4wW6d/3q5w0UMbcEn/R7mJDqcD9kdjp6zOuqx3H3R0CzhfyvCBSWW5b8HWy7Olw
84FnehjsxeixEQjZ6ygHRcQUW59+8nRtl3fU9crdUj4v7/vNreQHtq/y0QhmdtrH
L6Gi2R3ye+7tfesXUdkMup4RxPnRL6Ti/MgCvMLF/MKnpvDKgFAttmoDbkmmgZIv
fJ/wOzvxu2JGk8H3sw+r6Io1gQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 11:32:13 2026 by rpki-client