Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
File:                     BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft (raw, json)
Hash identifier:          pdP1IUW56MPyg4hjcNHdlkc95AJK2sMzotwEhbir/vI=
Subject key identifier:   B8:76:9D:FC:E9:B0:3A:2C:89:8B:2C:07:84:05:A6:70:46:89:C4:0B
Authority key identifier: BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37
Certificate issuer:       /CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
Certificate serial:       08BBB53CEFC10169F8517D04486C0634C58FEF85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
Manifest number:          0147
Signing time:             Fri 17 Apr 2026 11:13:29 +0000
Manifest this update:     Fri 17 Apr 2026 11:08:29 +0000
Manifest next update:     Sat 18 Apr 2026 14:23:29 +0000
Files and hashes:         1: BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl (hash: rwuvD6x897G4RxnmddMMwEAZJb+8xgLwkwLc5x6TyYw=)
                          2: 323830343a363830303a3a2f33322d3438203d3e20323639363634.roa (hash: qfb6AfqGl8bOQeHXD/A3gn8XVKh+t8Os//kVhwqFnkU=)
                          3: 34352e3139312e32302e302f32322d3234203d3e20323639363634.roa (hash: DjdMDcke6ilnD8tmmfgHtUJXmWqTF52hHf84c4Ol0mc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bb:b5:3c:ef:c1:01:69:f8:51:7d:04:48:6c:06:34:c5:8f:ef:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC70231E0F5873F65D74BA9E22BDB4A1E52E437
        Validity
            Not Before: Apr 17 11:08:29 2026 GMT
            Not After : Apr 18 14:23:29 2026 GMT
        Subject: CN=B8769DFCE9B03A2C898B2C078405A6704689C40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:29:90:b0:a4:ed:8e:df:a2:c0:df:98:50:
                    5d:94:66:70:eb:a2:48:5a:dd:e1:b2:67:31:dc:35:
                    6f:39:e2:9d:4f:1d:fa:d7:de:d7:c8:b9:fd:99:85:
                    7d:80:60:ad:89:b7:5a:70:52:27:8a:da:60:bd:66:
                    a8:4a:31:46:c0:b6:34:55:e0:76:20:19:aa:68:79:
                    01:91:80:fd:25:1b:cd:d7:1e:e1:a0:12:11:15:ad:
                    79:9d:2c:2f:d0:84:fb:fd:62:b6:8f:f1:5a:7d:08:
                    7f:e4:a1:72:b4:4c:87:17:20:c9:2c:7f:04:6b:8f:
                    d2:96:ba:0f:14:de:b8:e8:81:eb:2a:17:d9:33:09:
                    b5:6d:85:e3:b9:e2:93:90:44:df:c3:38:2c:02:ce:
                    52:a9:bb:59:07:bb:2c:3b:78:dd:54:f3:ac:b0:00:
                    6a:2f:3e:de:61:0a:d6:92:a0:f9:96:43:d7:46:5e:
                    e2:fb:cf:71:ad:9c:28:e1:de:2f:71:dd:60:b5:cc:
                    20:89:52:50:18:7d:7b:56:30:5e:4a:11:d0:63:dc:
                    57:8d:64:79:6d:17:a0:63:df:47:ed:26:d7:74:91:
                    10:04:fb:1a:f7:c4:9e:4b:a4:87:64:fa:9b:9d:8a:
                    4d:f0:a9:3b:e4:20:bf:a1:3f:3f:1f:23:28:71:2f:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:9D:FC:E9:B0:3A:2C:89:8B:2C:07:84:05:A6:70:46:89:C4:0B
            X509v3 Authority Key Identifier:
                keyid:BC:C7:02:31:E0:F5:87:3F:65:D7:4B:A9:E2:2B:DB:4A:1E:52:E4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BCC70231E0F5873F65D74BA9E22BDB4A1E52E437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:75:20:6e:d4:df:71:ea:7d:bd:a2:42:9d:e5:e3:40:b0:e0:
         a4:58:cb:d9:5e:1a:5b:48:6b:77:3d:9f:d2:18:2e:e8:63:4b:
         9a:0f:fd:c7:bf:8d:06:b6:db:73:51:c5:92:0d:0b:06:27:b6:
         7a:cb:a4:dc:a1:3d:f0:79:c6:19:57:d4:55:26:72:c8:a1:fe:
         c1:6e:cd:9d:e9:aa:74:28:d0:38:be:0f:23:c9:2d:88:76:99:
         a5:fd:03:6b:af:2e:37:89:dd:99:f2:9b:53:06:f3:a3:9f:55:
         4b:dd:5f:6b:3b:1d:6d:30:86:3f:76:a5:6d:83:1e:18:3d:3a:
         2d:37:97:b5:13:0d:be:18:45:f0:bf:2f:5a:2a:88:53:1c:4a:
         6a:32:58:92:34:d9:cd:de:57:3d:1c:c2:7f:39:83:eb:ff:31:
         3c:60:e1:4a:9e:74:e5:f4:6b:0c:24:00:38:76:10:7b:a6:fb:
         61:45:1d:3a:27:51:04:42:5f:96:d0:89:cd:97:b3:65:23:55:
         4f:f4:60:b6:39:a1:fd:89:38:41:2a:46:f7:4a:4b:a7:2e:bd:
         5a:16:3b:c8:3d:d8:4a:08:b7:b9:a2:93:4c:3c:7a:dd:3f:3f:
         e6:30:70:00:53:16:8b:d6:82:92:cf:55:c2:0a:57:76:f9:26:
         11:82:d4:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCLu1PO/BAWn4UX0ESGwGNMWP74UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDNzAyMzFFMEY1ODczRjY1RDc0QkE5RTIyQkRCNEEx
RTUyRTQzNzAeFw0yNjA0MTcxMTA4MjlaFw0yNjA0MTgxNDIzMjlaMDMxMTAvBgNV
BAMTKEI4NzY5REZDRTlCMDNBMkM4OThCMkMwNzg0MDVBNjcwNDY4OUM0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vymQsKTtjt+iwN+YUF2UZnDr
okha3eGyZzHcNW854p1PHfrX3tfIuf2ZhX2AYK2Jt1pwUieK2mC9ZqhKMUbAtjRV
4HYgGapoeQGRgP0lG83XHuGgEhEVrXmdLC/QhPv9YraP8Vp9CH/koXK0TIcXIMks
fwRrj9KWug8U3rjogesqF9kzCbVtheO54pOQRN/DOCwCzlKpu1kHuyw7eN1U86yw
AGovPt5hCtaSoPmWQ9dGXuL7z3GtnCjh3i9x3WC1zCCJUlAYfXtWMF5KEdBj3FeN
ZHltF6Bj30ftJtd0kRAE+xr3xJ5LpIdk+pudik3wqTvkIL+hPz8fIyhxL68tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuHad/OmwOiyJiywHhAWmcEaJxAswHwYDVR0j
BBgwFoAUvMcCMeD1hz9l10up4ivbSh5S5DcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1
NzQvMC9CQ0M3MDIzMUUwRjU4NzNGNjVENzRCQTlFMjJCREI0QTFFNTJFNDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDQzcwMjMxRTBGNTg3M0Y2
NUQ3NEJBOUUyMkJEQjRBMUU1MkU0MzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1NzQvMC9C
Q0M3MDIzMUUwRjU4NzNGNjVENzRCQTlFMjJCREI0QTFFNTJFNDM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEnUgbtTfcep9vaJCneXjQLDgpFjL2V4aW0hrdz2f0hgu6GNLmg/9x7+NBrbb
c1HFkg0LBie2esuk3KE98HnGGVfUVSZyyKH+wW7NnemqdCjQOL4PI8ktiHaZpf0D
a68uN4ndmfKbUwbzo59VS91fazsdbTCGP3albYMeGD06LTeXtRMNvhhF8L8vWiqI
UxxKajJYkjTZzd5XPRzCfzmD6/8xPGDhSp505fRrDCQAOHYQe6b7YUUdOidRBEJf
ltCJzZezZSNVT/Rgtjmh/Yk4QSpG90pLpy69WhY7yD3YSgi3uaKTTDx63T8/5jBw
AFMWi9aCks9VwgpXdvkmEYLUYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:37:16 2026 by rpki-client