Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
File:                     DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft (raw, json)
Hash identifier:          38Se3GYg+FHOk9nosEI+binXTNWVGy1WQH+WkZBQV7k=
Subject key identifier:   AC:54:D9:7E:D0:03:39:F9:97:4B:BE:51:0C:1A:B2:E2:C3:8D:5B:DD
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       606E11EA44BB97D8A00F307E293742703F2D2DA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
Manifest number:          0152
Signing time:             Mon 02 Mar 2026 03:27:14 +0000
Manifest this update:     Mon 02 Mar 2026 03:22:14 +0000
Manifest next update:     Tue 03 Mar 2026 05:36:14 +0000
Files and hashes:         1: 3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (hash: lCn9g+gHs8ERTTALlp2Bz3pGB0mGei0MgjIzRnNPGjA=)
                          2: 3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (hash: X/dMtnCq7hHy5mLHCd4+hYvO9B6J1kT71A40w13OW64=)
                          3: DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl (hash: 235F5LIlCya/UP1HYJYpYIgzZgmoN8cCrkiITPqNVMI=)
                          4: 3137372e33372e302e302f32302d3234203d3e20323632343632.roa (hash: gO71Pq7h7pXPcjaatV9lOXOjFJe/afb85FbEbIViapQ=)
                          5: 3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (hash: zKyV3/JzgbdojZy4O2J483O9H+dIt7u9e0m9IdWOl48=)
                          6: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (hash: nOWH+7LanFmjajZSBDi9SQxnWv6QeoP27K6K56dEIFQ=)
                          7: 3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (hash: PTlEFtexBDi/f7D/oVcn6svzP6rcJenk2E0AESTR9NQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6e:11:ea:44:bb:97:d8:a0:0f:30:7e:29:37:42:70:3f:2d:2d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Mar  2 03:22:14 2026 GMT
            Not After : Mar  3 05:36:14 2026 GMT
        Subject: CN=AC54D97ED00339F9974BBE510C1AB2E2C38D5BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:47:84:b2:92:2e:ea:fb:54:e5:f2:09:4a:
                    88:ed:61:70:18:f9:36:08:ac:db:dd:7b:e7:af:73:
                    6e:93:20:3e:46:71:2f:37:ec:4f:5d:75:df:38:d7:
                    37:d2:8a:7b:c5:52:4b:28:1a:e7:ae:53:bf:18:59:
                    92:17:3c:92:84:5f:2e:24:a9:ca:f7:23:92:41:d9:
                    a0:47:98:f1:f4:fb:54:ad:ea:3c:4e:69:78:27:5e:
                    8b:22:09:6b:23:ed:d5:3d:30:44:97:72:da:e1:32:
                    22:f2:d1:ff:ef:75:44:bf:53:da:7a:f2:5d:bd:a5:
                    80:8d:14:32:d8:7a:10:ee:73:81:f3:71:35:26:7c:
                    c4:fd:7a:bb:06:ba:6c:0d:ba:04:e2:be:99:eb:52:
                    e8:08:50:4b:d0:81:3b:83:b4:3d:91:1e:86:aa:f8:
                    9e:78:e6:68:51:00:3c:01:fb:ba:ff:65:a5:5f:df:
                    5c:12:d2:82:ef:e2:74:e0:24:f1:fd:6c:0f:f9:2f:
                    e0:c5:c6:c6:d1:8f:6d:7f:f3:fd:4e:4c:14:b1:2c:
                    e7:68:a1:f6:b8:cd:37:08:86:97:bb:63:64:8b:c6:
                    22:91:ff:1e:8f:74:f7:eb:46:6f:93:72:d1:5e:45:
                    a7:b8:3d:11:62:15:f9:ba:3a:6d:f8:b3:91:bd:0c:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:D9:7E:D0:03:39:F9:97:4B:BE:51:0C:1A:B2:E2:C3:8D:5B:DD
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:be:0e:5f:9f:c2:ea:ab:cd:4d:8f:ca:7f:7c:1c:46:44:a7:
         ef:97:76:b3:c7:b2:e9:52:b6:c0:cd:68:1b:04:bc:4a:fa:f4:
         56:28:66:b4:20:15:bd:3d:86:1d:e9:73:62:6f:80:16:29:de:
         f6:53:0e:d2:22:d5:85:cc:14:45:f4:79:09:b7:83:4b:b8:28:
         88:33:dc:b5:93:af:08:d1:ea:5c:d1:a2:79:6d:e1:e5:0b:21:
         a3:d6:6e:54:56:53:4e:eb:ab:7e:67:9a:44:13:e7:e6:d0:4e:
         94:68:c8:9d:90:08:4c:13:e8:5d:4d:84:53:9d:69:de:23:a0:
         d8:3c:4c:75:b5:00:10:2d:a8:5c:bf:48:02:86:b8:1b:07:25:
         89:ef:ec:3a:81:e5:a4:51:a2:3d:5a:0b:b6:c9:d7:39:e2:74:
         c9:fd:18:54:9d:72:d6:00:db:d0:2c:f3:45:97:5b:72:45:fb:
         9a:49:ff:de:fb:43:13:2e:94:8e:5d:87:a6:18:f3:48:d7:11:
         fd:c8:1b:90:e5:25:fd:09:3e:85:66:d1:fa:09:51:26:aa:03:
         32:a3:d4:cf:ad:bd:08:c9:e4:a3:a3:d8:54:db:dc:c8:02:70:
         f3:d1:df:4c:11:2c:04:5c:c8:18:62:16:40:cb:a3:eb:87:94:
         ef:b4:2f:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYG4R6kS7l9igDzB+KTdCcD8tLaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ1N0Y1NENEMDExNDgyM0FCQjVCNTIwM0Y5MUVGNUVF
QzI2QjA2RjAeFw0yNjAzMDIwMzIyMTRaFw0yNjAzMDMwNTM2MTRaMDMxMTAvBgNV
BAMTKEFDNTREOTdFRDAwMzM5Rjk5NzRCQkU1MTBDMUFCMkUyQzM4RDVCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCplUeEspIu6vtU5fIJSojtYXAY
+TYIrNvde+evc26TID5GcS837E9ddd841zfSinvFUksoGueuU78YWZIXPJKEXy4k
qcr3I5JB2aBHmPH0+1St6jxOaXgnXosiCWsj7dU9MESXctrhMiLy0f/vdUS/U9p6
8l29pYCNFDLYehDuc4HzcTUmfMT9ersGumwNugTivpnrUugIUEvQgTuDtD2RHoaq
+J545mhRADwB+7r/ZaVf31wS0oLv4nTgJPH9bA/5L+DFxsbRj21/8/1OTBSxLOdo
ofa4zTcIhpe7Y2SLxiKR/x6PdPfrRm+TctFeRae4PRFiFfm6Om34s5G9DKA1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrFTZftADOfmXS75RDBqy4sONW90wHwYDVR0j
BBgwFoAU3Vf1TNARSCOrtbUgP5HvXuwmsG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJu
VTQvMC9ERDU3RjU0Q0QwMTE0ODIzQUJCNUI1MjAzRjkxRUY1RUVDMjZCMDZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RENTdGNTRDRDAxMTQ4MjNB
QkI1QjUyMDNGOTFFRjVFRUMyNkIwNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJuVTQvMC9E
RDU3RjU0Q0QwMTE0ODIzQUJCNUI1MjAzRjkxRUY1RUVDMjZCMDZGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUr4OX5/C6qvNTY/Kf3wcRkSn75d2s8ey6VK2wM1oGwS8Svr0VihmtCAVvT2G
HelzYm+AFine9lMO0iLVhcwURfR5CbeDS7goiDPctZOvCNHqXNGieW3h5Qsho9Zu
VFZTTuurfmeaRBPn5tBOlGjInZAITBPoXU2EU51p3iOg2DxMdbUAEC2oXL9IAoa4
Gwclie/sOoHlpFGiPVoLtsnXOeJ0yf0YVJ1y1gDb0CzzRZdbckX7mkn/3vtDEy6U
jl2HphjzSNcR/cgbkOUl/Qk+hWbR+glRJqoDMqPUz629CMnko6PYVNvcyAJw89Hf
TBEsBFzIGGIWQMuj64eU77Qv6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:10 2026 by rpki-client