Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File:                     86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier:          L7Dc4sXsgw57icwYL0dyp9iaRkZW4YTYoP+aB5pdM4Q=
Subject key identifier:   D3:31:B5:B2:C5:B4:12:5C:E4:26:15:1A:0C:94:6F:E7:26:33:CC:30
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer:       /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial:       1F0297D3A854DF1547D9BC7D700C64A6A0A0A245
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number:          03A4
Signing time:             Mon 02 Mar 2026 07:36:33 +0000
Manifest this update:     Mon 02 Mar 2026 07:31:33 +0000
Manifest next update:     Tue 03 Mar 2026 10:04:33 +0000
Files and hashes:         1: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: E+Ma3InLA9r1gaEmUaTbdzlPYH5q+HVx3nCFL9qtnJY=)
                          2: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: F0RnW4wnUsb3fRz82M+GuCisAazpJ5inmhcEENvNGlw=)
                          3: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: J4hurxs3ry731dFTFoMgb7xwtvyrAEt2oytAaJZIIGU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
                          rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:97:d3:a8:54:df:15:47:d9:bc:7d:70:0c:64:a6:a0:a0:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
        Validity
            Not Before: Mar  2 07:31:33 2026 GMT
            Not After : Mar  3 10:04:33 2026 GMT
        Subject: CN=D331B5B2C5B4125CE426151A0C946FE72633CC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:d7:ae:b1:a5:1d:c4:11:23:6e:21:e7:b2:
                    8f:ab:aa:f6:6e:49:b2:d0:50:75:23:b5:c0:7d:f4:
                    04:3b:77:72:40:69:06:ec:b7:9f:c8:f3:f2:42:99:
                    c1:14:ac:a4:1d:0d:b4:60:eb:42:52:44:e8:c3:12:
                    76:b2:2a:76:6a:be:1a:6d:34:44:7f:f3:cb:b0:09:
                    e3:d2:43:9d:30:e6:33:a3:79:c2:e9:9f:4a:40:b3:
                    29:c3:f8:c6:e1:c5:ca:38:0d:b2:5f:48:b2:b2:40:
                    b8:7a:2f:50:5d:b5:0e:56:50:47:cf:5c:75:e6:c9:
                    9c:15:bf:25:a6:20:27:ac:da:4b:68:e0:c8:03:61:
                    8b:bc:9c:19:1c:b2:30:d3:c2:52:b9:84:19:41:84:
                    03:89:08:fe:ae:a6:7a:b4:f5:e8:1b:89:e2:f7:5f:
                    2d:76:55:f8:87:f6:5c:03:10:f2:d4:4a:6b:49:d7:
                    38:45:ce:c3:bf:55:9e:43:d9:34:a9:e9:cf:53:98:
                    f9:0d:a3:be:48:b7:b6:f5:a4:66:e8:13:60:fa:1b:
                    c2:c3:55:df:d8:04:7b:f7:e7:03:36:d0:19:4d:fb:
                    6e:46:5f:36:87:cb:64:5f:d6:d8:26:e5:62:01:e0:
                    c1:af:26:52:d6:e1:c8:f2:3c:9e:f1:3c:7b:be:34:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:31:B5:B2:C5:B4:12:5C:E4:26:15:1A:0C:94:6F:E7:26:33:CC:30
            X509v3 Authority Key Identifier:
                keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6d:f7:f1:0b:a0:3c:f8:da:1d:80:75:63:a8:5a:a6:57:03:
         87:9c:9b:a6:1d:dd:08:5b:c0:44:22:98:7d:1d:0c:21:66:2f:
         01:8a:11:7c:b1:41:09:fc:aa:e8:32:8f:ac:20:10:cd:fa:b3:
         8f:c7:66:34:1c:02:d4:9f:d2:d4:ce:4a:d9:ec:3c:aa:fc:c4:
         4f:d4:b1:04:e9:54:c8:19:d6:18:6e:78:6b:c0:73:74:53:58:
         20:73:d4:f3:30:c0:e0:89:0e:97:11:62:80:54:a3:4a:62:fd:
         90:db:ca:52:2e:64:d1:c0:73:53:68:e4:72:06:04:37:d0:0a:
         97:24:5d:67:82:1d:0a:c7:cc:dc:aa:62:5c:a4:31:33:b4:1f:
         24:a2:aa:55:f3:c2:ac:28:8f:9c:e0:ef:38:69:bd:97:87:d3:
         d6:b0:48:2e:e2:59:f0:6e:bf:f2:18:e3:70:de:1e:87:d3:d2:
         b5:1c:57:c5:4b:cd:74:61:92:ba:d1:9f:96:11:31:d4:74:32:
         2f:59:74:d6:3a:cb:57:02:a2:42:dd:19:e6:a4:d7:05:2d:66:
         97:3b:c2:02:a4:5d:1e:ab:f7:aa:78:1c:92:95:9f:0c:58:78:
         da:7d:9e:e0:88:e1:92:f2:ba:f5:6f:c0:b4:17:11:8e:3d:dc:
         f1:32:35:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHwKX06hU3xVH2bx9cAxkpqCgokUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5
NTFENkVCOTAeFw0yNjAzMDIwNzMxMzNaFw0yNjAzMDMxMDA0MzNaMDMxMTAvBgNV
BAMTKEQzMzFCNUIyQzVCNDEyNUNFNDI2MTUxQTBDOTQ2RkU3MjYzM0NDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrNeusaUdxBEjbiHnso+rqvZu
SbLQUHUjtcB99AQ7d3JAaQbst5/I8/JCmcEUrKQdDbRg60JSROjDEnayKnZqvhpt
NER/88uwCePSQ50w5jOjecLpn0pAsynD+Mbhxco4DbJfSLKyQLh6L1BdtQ5WUEfP
XHXmyZwVvyWmICes2kto4MgDYYu8nBkcsjDTwlK5hBlBhAOJCP6upnq09egbieL3
Xy12VfiH9lwDEPLUSmtJ1zhFzsO/VZ5D2TSp6c9TmPkNo75It7b1pGboE2D6G8LD
Vd/YBHv35wM20BlN+25GXzaHy2Rf1tgm5WIB4MGvJlLW4cjyPJ7xPHu+NBt/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0zG1ssW0ElzkJhUaDJRv5yYzzDAwHwYDVR0j
BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV
eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG
OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84
NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbm338QugPPjaHYB1Y6haplcDh5ybph3dCFvARCKYfR0MIWYvAYoRfLFBCfyq
6DKPrCAQzfqzj8dmNBwC1J/S1M5K2ew8qvzET9SxBOlUyBnWGG54a8BzdFNYIHPU
8zDA4IkOlxFigFSjSmL9kNvKUi5k0cBzU2jkcgYEN9AKlyRdZ4IdCsfM3KpiXKQx
M7QfJKKqVfPCrCiPnODvOGm9l4fT1rBILuJZ8G6/8hjjcN4eh9PStRxXxUvNdGGS
utGflhEx1HQyL1l01jrLVwKiQt0Z5qTXBS1mlzvCAqRdHqv3qngckpWfDFh42n2e
4IjhkvK69W/AtBcRjj3c8TI1bQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:26:43 2026 by rpki-client