Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
File:                     BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json)
Hash identifier:          a9K915NGnqx/nEIPViE1gH5SD9YbJs7NRaVqv9aKyVo=
Subject key identifier:   92:E7:28:A9:7E:D2:7C:BD:51:38:18:F6:1D:B5:24:58:31:1B:5A:EB
Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4
Certificate issuer:       /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
Certificate serial:       54162F79B7E2494D5DF4A6F3A1DC2D8F76F93607
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
Manifest number:          03C3
Signing time:             Fri 17 Apr 2026 14:23:29 +0000
Manifest this update:     Fri 17 Apr 2026 14:18:29 +0000
Manifest next update:     Sat 18 Apr 2026 18:22:29 +0000
Files and hashes:         1: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: 25TH8Nx19yip9EasUzX983wihZlY2EEgXhGIBNzEfyQ=)
                          2: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: zz2DJUmLpgDp8EUvrcOE8K5G0P4P8OduhpfKyK5ETIE=)
                          3: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: yNFZBHyDGRYV2QlyPSN2OtoLmiWL4FZRPAEMsVOZrB0=)
                          4: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: ayttGUuymegq6vSf98rBwELpDST1MxoqdryA36dSPQw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl
                          rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:16:2f:79:b7:e2:49:4d:5d:f4:a6:f3:a1:dc:2d:8f:76:f9:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4
        Validity
            Not Before: Apr 17 14:18:29 2026 GMT
            Not After : Apr 18 18:22:29 2026 GMT
        Subject: CN=92E728A97ED27CBD513818F61DB52458311B5AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:8d:45:f1:89:11:55:21:42:d5:c6:f6:8a:
                    53:01:1a:36:5b:8b:1c:b7:db:27:56:6c:41:a0:16:
                    00:34:31:5b:f7:f8:84:09:88:21:7d:fc:22:4e:bc:
                    3d:d5:08:a5:98:4a:79:c1:1b:77:54:63:91:58:4e:
                    23:a2:3a:69:cd:79:7a:a4:7f:8a:62:b3:7b:b6:94:
                    48:4c:63:ab:8a:e6:85:44:b8:7b:f2:7f:66:c6:1f:
                    31:f1:e8:50:de:02:54:a7:fb:3b:4b:36:81:6b:05:
                    41:91:76:93:12:51:96:f2:19:c1:ae:c6:87:52:7d:
                    87:17:e6:fb:09:ac:ab:8a:dd:d7:c4:81:2f:ac:55:
                    8f:0d:93:25:d1:28:30:85:98:e5:38:e0:84:ef:d6:
                    76:40:66:fe:20:43:17:0a:2e:5d:ac:09:03:25:63:
                    a1:34:e2:02:54:24:cd:27:c6:dc:98:f0:e2:be:13:
                    6d:18:29:42:a1:79:32:a2:e4:79:d3:4b:f1:26:f4:
                    a6:66:47:f0:3a:d3:4a:c9:74:fb:a5:3c:79:18:e1:
                    a4:f8:01:40:5b:57:e6:94:19:c5:56:11:8e:8f:a9:
                    26:a6:ce:35:25:5c:9d:c3:1f:be:b6:5a:6f:fb:5d:
                    7f:6c:6b:b6:d4:67:1e:ad:bc:0b:56:19:11:cc:a6:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E7:28:A9:7E:D2:7C:BD:51:38:18:F6:1D:B5:24:58:31:1B:5A:EB
            X509v3 Authority Key Identifier:
                keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1e:16:8f:f8:b2:6c:b1:ea:3a:d7:3a:fc:48:42:ca:16:ca:
         7a:62:37:c7:b4:9d:ca:3a:5e:47:93:9e:e7:78:ec:74:3c:cd:
         f5:cd:ea:41:90:ea:c6:97:ee:48:a0:11:d3:05:ac:2f:0e:b2:
         77:37:25:49:62:3b:53:89:c1:a6:a1:4f:b7:1c:79:d6:30:9f:
         6a:bd:7b:d9:61:ce:76:dd:ef:21:c6:07:3e:ec:65:e8:e6:87:
         df:07:17:92:fe:a4:41:e7:ad:1b:e5:a1:26:18:b6:67:80:d2:
         f3:18:63:7c:f5:7c:3a:d7:f1:cf:40:97:90:7c:d1:9f:9a:71:
         d6:70:eb:ee:25:f2:b2:3d:fd:e3:aa:ae:56:b3:7c:e4:61:7a:
         19:d8:5c:da:9c:d9:df:66:7a:61:51:db:68:30:ed:ca:0d:40:
         c1:e4:7c:4f:d5:d0:26:6e:9d:5b:7b:9a:49:7e:39:cb:fd:72:
         91:c9:6b:6b:6c:45:b4:53:95:4d:18:45:9f:cd:f8:bc:c4:ef:
         bb:59:e7:31:bb:b1:40:f1:18:5c:1f:1c:36:5b:1c:01:62:c2:
         e9:c6:08:71:ea:6d:e9:26:4a:79:d1:fb:9a:17:07:25:e7:54:
         22:9e:af:9a:e1:16:65:2f:d5:47:fc:9d:ff:eb:6d:73:66:91:
         cd:e7:10:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVBYvebfiSU1d9Kbzodwtj3b5NgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy
NTA0RkZBNDAeFw0yNjA0MTcxNDE4MjlaFw0yNjA0MTgxODIyMjlaMDMxMTAvBgNV
BAMTKDkyRTcyOEE5N0VEMjdDQkQ1MTM4MThGNjFEQjUyNDU4MzExQjVBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63Y1F8YkRVSFC1cb2ilMBGjZb
ixy32ydWbEGgFgA0MVv3+IQJiCF9/CJOvD3VCKWYSnnBG3dUY5FYTiOiOmnNeXqk
f4pis3u2lEhMY6uK5oVEuHvyf2bGHzHx6FDeAlSn+ztLNoFrBUGRdpMSUZbyGcGu
xodSfYcX5vsJrKuK3dfEgS+sVY8NkyXRKDCFmOU44ITv1nZAZv4gQxcKLl2sCQMl
Y6E04gJUJM0nxtyY8OK+E20YKUKheTKi5HnTS/Em9KZmR/A600rJdPulPHkY4aT4
AUBbV+aUGcVWEY6PqSamzjUlXJ3DH762Wm/7XX9sa7bUZx6tvAtWGRHMpg6XAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkucoqX7SfL1ROBj2HbUkWDEbWuswHwYDVR0j
BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1
UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4
MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C
REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPh4Wj/iybLHqOtc6/EhCyhbKemI3x7SdyjpeR5Oe53jsdDzN9c3qQZDqxpfu
SKAR0wWsLw6ydzclSWI7U4nBpqFPtxx51jCfar172WHOdt3vIcYHPuxl6OaH3wcX
kv6kQeetG+WhJhi2Z4DS8xhjfPV8Otfxz0CXkHzRn5px1nDr7iXysj3946quVrN8
5GF6Gdhc2pzZ32Z6YVHbaDDtyg1AweR8T9XQJm6dW3uaSX45y/1ykclra2xFtFOV
TRhFn834vMTvu1nnMbuxQPEYXB8cNlscAWLC6cYIcept6SZKedH7mhcHJedUIp6v
muEWZS/VR/yd/+ttc2aRzecQQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:52 2026 by rpki-client