Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
File:                     DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft (raw, json)
Hash identifier:          LqlchiU46R36+rqXIH0BrtPAbYS5Qi3f2qs3G3Db0B8=
Subject key identifier:   C3:C8:9B:F9:5D:D7:9F:5F:F6:AC:82:A2:3D:CA:3B:E8:C2:05:62:95
Authority key identifier: DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00
Certificate issuer:       /CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
Certificate serial:       1478845FBEEAB63B84CCAA254F3D1DE9966D5EFB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
Manifest number:          2C
Signing time:             Mon 02 Mar 2026 07:00:13 +0000
Manifest this update:     Mon 02 Mar 2026 06:55:13 +0000
Manifest next update:     Tue 03 Mar 2026 09:37:13 +0000
Files and hashes:         1: 34352e3137362e3136392e302f32342d3234203d3e20323638393539.roa (hash: y/8BRqAaFQuOd1hHfKDkNa8zh4lge8+s4X2vwi6NisM=)
                          2: 323830343a356433633a3a2f33322d3332203d3e20323638393539.roa (hash: WaksDVWMYjNiTo6Cuzom0cvyTzhnCRbPk42n42W+uO0=)
                          3: 323830343a356433633a383030303a3a2f33342d3334203d3e20323638393539.roa (hash: gVrezvi3R1Xq8aWYYGo6vEbXMg803xylwc7iIb3oy5w=)
                          4: 323830343a356433633a3a2f33332d3333203d3e20323638393539.roa (hash: CCX6Bf9Hf1ZhC5HxyJVeLoPvatx27N7gkcUWym5ML78=)
                          5: 323830343a356433633a633030303a3a2f33342d3334203d3e20323638393539.roa (hash: xuhoiNhxrTj5facSIgpGxOkz4MY1577hkMHuj9uGfOg=)
                          6: 34352e3137362e3137302e302f32342d3234203d3e20323638393539.roa (hash: b14AIGBSMBTB9au/qR9EmFbunDJJlyfHqtTdX7l7npA=)
                          7: 34352e3137362e3137302e302f32332d3233203d3e20323638393539.roa (hash: 4XEZjARH5g4zdORY2z+O6xzfRufNLG12l2/7HGy3M5A=)
                          8: DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl (hash: vlYzEFtBljmEWD2ds4ewc5w1arGqQR2wuRF8JPwyqug=)
                          9: 323830343a356433633a343030303a3a2f33342d3334203d3e20323638393539.roa (hash: oU4OEtt3Te10l6+bVJVshrHm86nEMDd7SZg9Ka+kXdI=)
                          10: 323830343a356433633a383030303a3a2f33332d3333203d3e20323638393539.roa (hash: WuRFlL+a4c1DLeCNCMJOnc5ctv3lm5OfQCWqZbKCUSA=)
                          11: 34352e3137362e3136382e302f32322d3232203d3e20323638393539.roa (hash: iZXcozE+/gB+49x4ZWBIn7/BCnO3o5hHCP9rpIx2zq0=)
                          12: 323830343a356433633a3a2f33342d3334203d3e20323638393539.roa (hash: 0sTxK5Z9tvSKGJHnMvfyviV6WLgIbb/VZPhe7msjQhU=)
                          13: 34352e3137362e3136382e302f32342d3234203d3e20323638393539.roa (hash: 60sy+bNl2jufu4lP3NSzomWrk4h/1HNpqJIrM7b1yPA=)
                          14: 34352e3137362e3136382e302f32332d3233203d3e20323638393539.roa (hash: 6qw7xC2rjIb3q9tAN2jDP7aPlpfTMwTvnZzsSxZ3ePM=)
                          15: 34352e3137362e3137312e302f32342d3234203d3e20323638393539.roa (hash: ii9pFt+RkMAk4PevpKuPOvSk/sQlA7yUiw/whIqho8A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl
                          rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:78:84:5f:be:ea:b6:3b:84:cc:aa:25:4f:3d:1d:e9:96:6d:5e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00
        Validity
            Not Before: Mar  2 06:55:13 2026 GMT
            Not After : Mar  3 09:37:13 2026 GMT
        Subject: CN=C3C89BF95DD79F5FF6AC82A23DCA3BE8C2056295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:2f:48:65:d5:9d:ed:15:fa:b3:81:01:c3:
                    ca:a8:22:64:90:7b:ef:4a:56:f9:db:49:0b:7f:a2:
                    50:be:55:ac:45:0a:ef:72:fe:fa:65:9c:d3:49:33:
                    1e:aa:8c:9c:8c:c8:a3:4b:8e:e3:53:f8:24:aa:8e:
                    2a:a7:86:a9:b6:31:11:05:4c:18:a5:b1:26:d9:5e:
                    de:7d:4f:58:3b:84:6c:64:70:25:05:74:1a:86:f7:
                    69:5f:85:6f:91:1a:61:01:71:e0:90:05:3d:57:d5:
                    c0:e5:96:59:1b:49:5c:da:90:5d:e2:91:37:e2:52:
                    58:02:31:c7:2d:e4:da:7a:5d:ed:28:0c:2f:67:47:
                    ce:be:8d:dd:d0:15:2e:c1:27:47:bd:aa:da:62:86:
                    5b:e8:6e:39:41:a4:48:9c:3c:cd:1e:0c:bf:8e:8f:
                    d7:b1:0c:76:ab:21:bb:8b:8f:25:be:20:15:95:7b:
                    bc:99:ca:a0:bc:8b:b4:6c:f0:bf:4c:2d:98:95:6e:
                    c6:98:a9:ac:be:f8:81:3f:3b:b3:aa:2a:2d:82:53:
                    bb:af:a3:51:0b:5f:dd:ac:d6:42:f3:89:a7:6d:a8:
                    bf:f1:dc:2b:83:a6:ea:bf:be:b1:04:83:a9:e6:90:
                    4c:13:84:12:71:55:fa:ac:d9:4f:29:f0:0b:87:d7:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:9B:F9:5D:D7:9F:5F:F6:AC:82:A2:3D:CA:3B:E8:C2:05:62:95
            X509v3 Authority Key Identifier:
                keyid:DA:F0:AA:5C:D3:B0:FF:53:39:F0:5C:AC:F8:F0:66:5F:94:15:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5FR2c9sDTbDnQrhcksuz7Aqvz87NeL5DkgwpyosZmJVy/0/DAF0AA5CD3B0FF5339F05CACF8F0665F94154B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:34:c1:c7:fa:23:77:f2:d4:1d:31:01:2c:a7:f7:9f:ab:
         8e:59:b6:36:9d:72:db:da:d1:e5:a8:b8:3c:49:98:a2:b7:dc:
         46:93:ec:94:86:5c:dd:f1:30:12:e4:eb:67:be:bf:2d:df:71:
         5b:42:5e:e9:47:9a:38:02:03:b9:48:b7:ee:1a:8e:4a:79:dc:
         a3:4e:b9:39:fe:23:24:e5:20:24:31:93:9e:f5:ed:62:28:ab:
         b5:5d:70:bd:78:83:04:35:84:a6:3b:fc:db:5f:b8:48:02:95:
         5c:9a:2d:e0:49:c5:e9:24:28:34:21:26:d3:53:82:03:b2:10:
         6f:e9:d9:5d:3a:ac:f8:f8:f7:4e:da:f7:74:d9:1b:c8:69:d2:
         6f:3a:42:ca:d2:3c:c6:af:f4:b5:cf:2a:ec:56:f5:82:b9:55:
         73:28:5b:1f:5c:e2:c0:9b:a7:18:35:37:20:d9:1f:b9:b7:65:
         b3:5a:08:bc:fa:04:23:63:73:67:c9:f2:83:dd:6a:89:82:1c:
         b5:ba:6e:11:49:a6:4c:a6:38:56:5a:5b:ae:56:65:ba:53:59:
         47:08:73:15:9f:67:a0:68:d7:79:1d:d0:48:da:2e:33:12:32:
         9f:ec:0a:2a:d9:37:f4:b9:d1:ae:70:da:ab:8e:76:ff:b6:e7:
         f9:8e:7f:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFHiEX77qtjuEzKolTz0d6ZZtXvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREFGMEFBNUNEM0IwRkY1MzM5RjA1Q0FDRjhGMDY2NUY5
NDE1NEIwMDAeFw0yNjAzMDIwNjU1MTNaFw0yNjAzMDMwOTM3MTNaMDMxMTAvBgNV
BAMTKEMzQzg5QkY5NURENzlGNUZGNkFDODJBMjNEQ0EzQkU4QzIwNTYyOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLdS9IZdWd7RX6s4EBw8qoImSQ
e+9KVvnbSQt/olC+VaxFCu9y/vplnNNJMx6qjJyMyKNLjuNT+CSqjiqnhqm2MREF
TBilsSbZXt59T1g7hGxkcCUFdBqG92lfhW+RGmEBceCQBT1X1cDlllkbSVzakF3i
kTfiUlgCMcct5Np6Xe0oDC9nR86+jd3QFS7BJ0e9qtpihlvobjlBpEicPM0eDL+O
j9exDHarIbuLjyW+IBWVe7yZyqC8i7Rs8L9MLZiVbsaYqay++IE/O7OqKi2CU7uv
o1ELX92s1kLziadtqL/x3CuDpuq/vrEEg6nmkEwThBJxVfqs2U8p8AuH1xMlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUw8ib+V3Xn1/2rIKiPco76MIFYpUwHwYDVR0j
BBgwFoAU2vCqXNOw/1M58Fys+PBmX5QVSwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUZSMmM5c0RUYkRuUXJoY2tzdXo3QXF2ejg3TmVMNURrZ3dweW9zWm1K
VnkvMC9EQUYwQUE1Q0QzQjBGRjUzMzlGMDVDQUNGOEYwNjY1Rjk0MTU0QjAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBRjBBQTVDRDNCMEZGNTMz
OUYwNUNBQ0Y4RjA2NjVGOTQxNTRCMDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NUZSMmM5c0RUYkRuUXJoY2tzdXo3QXF2ejg3TmVMNURrZ3dweW9zWm1KVnkvMC9E
QUYwQUE1Q0QzQjBGRjUzMzlGMDVDQUNGOEYwNjY1Rjk0MTU0QjAwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYmo0wcf6I3fy1B0xASyn95+rjlm2Np1y29rR5ai4PEmYorfcRpPslIZc3fEw
EuTrZ76/Ld9xW0Je6UeaOAIDuUi37hqOSnnco065Of4jJOUgJDGTnvXtYiirtV1w
vXiDBDWEpjv821+4SAKVXJot4EnF6SQoNCEm01OCA7IQb+nZXTqs+Pj3Ttr3dNkb
yGnSbzpCytI8xq/0tc8q7Fb1grlVcyhbH1ziwJunGDU3INkfubdls1oIvPoEI2Nz
Z8nyg91qiYIctbpuEUmmTKY4VlpbrlZlulNZRwhzFZ9noGjXeR3QSNouMxIyn+wK
Ktk39LnRrnDaq452/7bn+Y5/QQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:05:57 2026 by rpki-client