Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
File:                     67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft (raw, json)
Hash identifier:          OlG8B1icTFLKRs6cWYN/pyPl3yWqi6micntTUWiukZA=
Subject key identifier:   B9:00:30:62:56:BE:67:43:A5:23:81:4E:EF:77:54:83:80:59:DF:94
Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
Certificate issuer:       /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Certificate serial:       3581923029617146CD70670291F40932BCC4B942
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
Manifest number:          2C
Signing time:             Fri 17 Apr 2026 05:23:03 +0000
Manifest this update:     Fri 17 Apr 2026 05:18:03 +0000
Manifest next update:     Sat 18 Apr 2026 06:54:03 +0000
Files and hashes:         1: 34352e3137302e3133382e302f32342d3234203d3e20323734343631.roa (hash: Wdxg47LRUm5TFstfbBqAIVXUclGkCk8iroEbPkc1O7o=)
                          2: 323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa (hash: RjVQmAXS1Jvi0ifDxtizKk45kZS/G85DZHRMfune5R0=)
                          3: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl (hash: l9CQEUHXNBAS95QGrwG1Zc4M3zJFnMgB70bxoEr3Jvs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
                          rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 06:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:92:30:29:61:71:46:cd:70:67:02:91:f4:09:32:bc:c4:b9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
        Validity
            Not Before: Apr 17 05:18:03 2026 GMT
            Not After : Apr 18 06:54:03 2026 GMT
        Subject: CN=B900306256BE6743A523814EEF7754838059DF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:20:b2:a4:64:04:c6:55:4b:cb:0e:ea:1c:
                    b9:87:7d:0b:52:7c:b7:2a:72:64:f6:84:5a:ed:b2:
                    b8:ee:b7:a8:97:aa:4c:94:e6:de:fe:04:64:dc:04:
                    48:ed:c4:8b:cf:35:5e:b9:e6:81:b4:06:3a:e8:a3:
                    73:e1:f1:01:be:12:d2:59:55:f2:13:84:20:5f:77:
                    67:2d:d1:16:76:7b:17:cc:36:26:cd:5f:65:c3:e5:
                    31:b3:2d:82:87:d2:d0:a5:b9:65:56:d2:89:f5:10:
                    17:57:41:d6:86:d6:2d:47:02:10:64:f7:b3:de:8d:
                    d1:f3:02:c8:61:e5:2e:09:54:da:ac:e4:f6:d5:a0:
                    cf:ad:77:28:f9:0a:d3:99:14:da:40:b8:88:ff:50:
                    24:8a:ce:ec:be:97:40:cf:c9:fe:4e:cc:25:61:91:
                    79:b9:05:75:4a:56:c2:a4:91:a0:4f:10:e6:2a:dd:
                    c4:a6:6d:e8:35:b3:39:02:9f:cc:97:01:83:13:d0:
                    95:68:7c:03:f9:f1:6a:64:33:48:65:d1:dd:f5:3d:
                    45:14:51:87:80:0e:ef:af:6e:b9:60:05:f9:9e:6a:
                    7f:10:18:ea:e8:f3:9b:bc:93:19:c4:b7:38:45:bf:
                    02:00:aa:24:91:2b:54:7d:9b:82:52:00:40:71:e3:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:00:30:62:56:BE:67:43:A5:23:81:4E:EF:77:54:83:80:59:DF:94
            X509v3 Authority Key Identifier:
                keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:1c:c9:f9:29:83:71:b2:9e:f6:f4:cc:5d:2a:2a:a0:43:
         59:2f:f4:50:71:29:57:d3:bb:c6:a6:7b:60:cf:86:1f:ac:f4:
         5f:3c:eb:50:4b:fe:98:b8:b4:90:74:9b:23:d6:83:f0:b9:87:
         c1:c7:3b:ef:fb:2c:1a:ca:af:01:ed:84:4c:b3:ae:bf:56:4a:
         8f:74:70:7a:90:f3:71:36:0c:d0:df:3e:36:3d:4d:cd:43:8d:
         ed:6b:b4:9c:4e:5b:90:ea:0f:e9:0e:21:bf:93:16:e3:09:10:
         f0:da:d5:b6:8a:26:53:e5:23:7a:77:ef:9c:21:f8:16:2a:99:
         87:6b:06:f0:5b:67:cf:ec:c3:04:9e:27:a5:58:69:b4:d5:80:
         60:6c:b3:aa:1f:01:6a:22:80:f3:25:f6:55:b1:5d:4d:67:be:
         b2:dc:b2:3c:14:3e:3b:a7:e9:b7:01:e5:a4:64:1a:98:4f:a1:
         33:5c:2b:26:1f:5b:fc:bb:80:58:de:ca:76:99:67:b7:bc:27:
         7c:57:93:77:79:55:f0:7e:13:dc:5b:70:11:cb:6d:b7:a8:15:
         87:d1:67:8d:d5:b1:1e:85:fe:70:25:63:e3:68:47:a4:be:6c:
         f0:6b:a3:a0:44:90:35:57:cf:cf:53:74:1d:cf:23:ff:1a:51:
         4d:db:3a:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNYGSMClhcUbNcGcCkfQJMrzEuUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdCMkEzMzMzNjI1MjVDOUVDRDVBRTQ3QjFCRDEyRTFF
MkZDQkM1MzAeFw0yNjA0MTcwNTE4MDNaFw0yNjA0MTgwNjU0MDNaMDMxMTAvBgNV
BAMTKEI5MDAzMDYyNTZCRTY3NDNBNTIzODE0RUVGNzc1NDgzODA1OURGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LyCypGQExlVLyw7qHLmHfQtS
fLcqcmT2hFrtsrjut6iXqkyU5t7+BGTcBEjtxIvPNV655oG0Bjroo3Ph8QG+EtJZ
VfIThCBfd2ct0RZ2exfMNibNX2XD5TGzLYKH0tCluWVW0on1EBdXQdaG1i1HAhBk
97PejdHzAshh5S4JVNqs5PbVoM+tdyj5CtOZFNpAuIj/UCSKzuy+l0DPyf5OzCVh
kXm5BXVKVsKkkaBPEOYq3cSmbeg1szkCn8yXAYMT0JVofAP58WpkM0hl0d31PUUU
UYeADu+vbrlgBfmean8QGOro85u8kxnEtzhFvwIAqiSRK1R9m4JSAEBx48w3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuQAwYla+Z0OlI4FO73dUg4BZ35QwHwYDVR0j
BBgwFoAUZ7KjMzYlJcns1a5Hsb0S4eL8vFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25H
Q3kvMC82N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QjJBMzMzMzYyNTI1QzlF
Q0Q1QUU0N0IxQkQxMkUxRTJGQ0JDNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25HQ3kvMC82
N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR9Ycyfkpg3Gynvb0zF0qKqBDWS/0UHEpV9O7xqZ7YM+GH6z0XzzrUEv+mLi0
kHSbI9aD8LmHwcc77/ssGsqvAe2ETLOuv1ZKj3RwepDzcTYM0N8+Nj1NzUON7Wu0
nE5bkOoP6Q4hv5MW4wkQ8NrVtoomU+UjenfvnCH4FiqZh2sG8Ftnz+zDBJ4npVhp
tNWAYGyzqh8BaiKA8yX2VbFdTWe+styyPBQ+O6fptwHlpGQamE+hM1wrJh9b/LuA
WN7Kdplnt7wnfFeTd3lV8H4T3FtwEcttt6gVh9FnjdWxHoX+cCVj42hHpL5s8Guj
oESQNVfPz1N0Hc8j/xpRTds6iA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:27:47 2026 by rpki-client