Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
File:                     314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft (raw, json)
Hash identifier:          mWpuUDZTEFIZhFLdrn+ZY+9XAECgZlytcdVXjaTIawc=
Subject key identifier:   EF:24:90:04:CB:70:3F:35:B7:9A:A2:0E:86:3D:97:23:4F:BB:AB:D1
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       17705FA25A24FC78FD8B908873711595B6701FB8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
Manifest number:          04C0
Signing time:             Wed 14 Oct 2026 09:03:11 +0000
Manifest this update:     Wed 14 Oct 2026 08:58:11 +0000
Manifest next update:     Thu 15 Oct 2026 10:39:11 +0000
Files and hashes:         1: 3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (hash: HoUvLIl8HePEcrX2UoRuuKDWB/IjHNUJTu4b4dsaoGY=)
                          2: 323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (hash: AKP3mmNxQyjhPK33iWfjsbRvSG6or5dFMmjwhwRG0rg=)
                          3: 3137372e35352e3230382e302f32302d3234203d3e20323632353331.roa (hash: QrPEgq8qf94IetiMlwxL37bJ0aAndHB4MPgf10k40/A=)
                          4: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl (hash: 7wbkAZCT+09RYA7YNMhCQksfiNYIjmVRE6SO8V+MLk4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:70:5f:a2:5a:24:fc:78:fd:8b:90:88:73:71:15:95:b6:70:1f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Oct 14 08:58:11 2026 GMT
            Not After : Oct 15 10:39:11 2026 GMT
        Subject: CN=EF249004CB703F35B79AA20E863D97234FBBABD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:63:4a:f5:ea:ff:73:13:6a:96:1e:68:4d:
                    b2:2a:74:3b:4c:d3:11:03:db:c8:7c:64:96:42:0a:
                    b8:a0:99:d2:1b:58:38:2f:86:5a:47:bf:8c:e1:b8:
                    bd:2d:7c:3e:e0:24:13:50:7e:9f:ed:5a:76:f1:56:
                    17:7e:15:97:4e:83:ce:71:6b:31:8e:28:cb:d1:cf:
                    52:27:8f:c3:34:8e:59:3a:d5:18:46:4e:4f:e0:e5:
                    a1:5a:e8:ac:f0:04:53:f6:34:53:69:f5:7e:07:ec:
                    26:8d:2d:63:96:d9:48:ab:57:ea:2f:c2:77:25:3f:
                    09:6a:56:af:54:7b:38:92:85:6c:ad:c7:20:be:df:
                    eb:ed:95:dc:74:ed:46:d1:34:5a:b8:c7:4e:b1:da:
                    b1:16:de:a3:5b:e2:ef:b3:cc:1d:78:99:2e:1a:b3:
                    6c:fe:5e:7e:dc:a5:00:fa:c0:f4:2d:bb:81:67:40:
                    78:49:39:5a:3d:ef:c5:37:f4:07:68:4f:3e:b0:34:
                    e8:87:9a:01:98:4f:50:a0:35:ee:1f:7d:19:3b:00:
                    16:ad:3c:53:a4:cf:71:95:b6:c5:3e:67:0b:7f:d7:
                    3a:e8:bd:f1:b2:14:3a:d9:b7:be:40:4e:6f:33:df:
                    6a:cb:f7:b6:74:96:88:53:e8:a2:a8:17:0e:80:b7:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:90:04:CB:70:3F:35:B7:9A:A2:0E:86:3D:97:23:4F:BB:AB:D1
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:aa:0d:d3:2e:e2:6c:55:4c:32:16:56:e3:e7:08:a1:9b:
         98:48:55:4b:29:09:aa:a4:8d:ac:6f:ac:05:95:9e:92:2f:0a:
         5b:ce:d9:70:d0:79:12:e6:08:50:c3:54:5f:1f:6a:80:ac:d7:
         94:64:a9:8f:0d:15:26:c8:58:ff:75:0e:5d:2a:fc:80:0d:df:
         d8:47:92:1b:85:94:5c:58:7b:b7:22:2b:59:db:85:09:55:7c:
         f2:3a:dc:20:bc:54:2b:08:01:4e:b5:3a:a5:d6:13:e7:49:30:
         68:a2:90:a5:a7:1d:9c:58:ab:f8:2e:43:3e:15:62:ff:6b:b9:
         47:d6:2f:fb:6f:2e:48:d6:93:1f:b5:ed:37:41:7a:66:7a:10:
         21:d1:75:43:2d:3a:70:03:dc:78:34:50:75:4e:1d:bb:e7:fa:
         d7:63:d1:43:0c:c6:32:ea:6f:75:d4:94:15:21:c9:4a:be:d6:
         19:23:25:76:f0:4c:4d:e9:01:7e:7e:53:b2:02:b8:45:40:4a:
         bb:81:a8:83:79:9d:35:f0:0a:81:4c:aa:3d:89:1e:62:28:0d:
         cc:e3:53:86:80:89:12:f8:97:a8:0c:35:bc:36:43:45:78:54:
         e3:12:08:eb:bd:a3:af:c4:fb:df:84:1e:12:9d:dd:67:05:82:
         d7:e2:0a:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF3Bfolok/Hj9i5CIc3EVlbZwH7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE0QTg2MDkzNTRDMkUzQzE3MjU4OTNENTIxRDM1Q0M1
RkM0QUZEQjAeFw0yNjEwMTQwODU4MTFaFw0yNjEwMTUxMDM5MTFaMDMxMTAvBgNV
BAMTKEVGMjQ5MDA0Q0I3MDNGMzVCNzlBQTIwRTg2M0Q5NzIzNEZCQkFCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sWNK9er/cxNqlh5oTbIqdDtM
0xED28h8ZJZCCrigmdIbWDgvhlpHv4zhuL0tfD7gJBNQfp/tWnbxVhd+FZdOg85x
azGOKMvRz1Inj8M0jlk61RhGTk/g5aFa6KzwBFP2NFNp9X4H7CaNLWOW2UirV+ov
wnclPwlqVq9UeziShWytxyC+3+vtldx07UbRNFq4x06x2rEW3qNb4u+zzB14mS4a
s2z+Xn7cpQD6wPQtu4FnQHhJOVo978U39AdoTz6wNOiHmgGYT1CgNe4ffRk7ABat
PFOkz3GVtsU+Zwt/1zrovfGyFDrZt75ATm8z32rL97Z0lohT6KKoFw6AtwgRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7ySQBMtwPzW3mqIOhj2XI0+7q9EwHwYDVR0j
BBgwFoAUMUqGCTVMLjwXJYk9Uh01zF/Er9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxY
S20vMS8zMTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNEE4NjA5MzU0QzJFM0Mx
NzI1ODkzRDUyMUQzNUNDNUZDNEFGREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxYS20vMS8z
MTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEJ+qDdMu4mxVTDIWVuPnCKGbmEhVSykJqqSNrG+sBZWeki8KW87ZcNB5EuYI
UMNUXx9qgKzXlGSpjw0VJshY/3UOXSr8gA3f2EeSG4WUXFh7tyIrWduFCVV88jrc
ILxUKwgBTrU6pdYT50kwaKKQpacdnFir+C5DPhVi/2u5R9Yv+28uSNaTH7XtN0F6
ZnoQIdF1Qy06cAPceDRQdU4du+f612PRQwzGMupvddSUFSHJSr7WGSMldvBMTekB
fn5TsgK4RUBKu4Gog3mdNfAKgUyqPYkeYigNzONThoCJEviXqAw1vDZDRXhU4xII
672jr8T734QeEp3dZwWC1+IKhA==
-----END CERTIFICATE-----