Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
File:                     4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft (raw, json)
Hash identifier:          fUSAjsAsCKP1xJINoKe1a0tKbUb+0GAVPXnGCTlwvyo=
Subject key identifier:   DD:CB:06:CA:F7:D9:CB:84:5B:ED:7F:AC:10:78:DC:14:B7:20:2B:3F
Authority key identifier: 40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62
Certificate issuer:       /CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
Certificate serial:       4AE0C0F2C7ED22A5D407C12A74AD5098DFE9D9B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
Manifest number:          15
Signing time:             Tue 28 Jul 2026 11:32:41 +0000
Manifest this update:     Tue 28 Jul 2026 11:27:41 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:41 +0000
Files and hashes:         1: 4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl (hash: sJHL6s5e0fjlQT0Jptvn72FDO/izQO1S0+zkGjiHF4A=)
                          2: 34352e3138342e36302e302f32332d3233203d3e20323639333137.roa (hash: AKumIlKdxiGCjMSzgEsiHLLkQMS9sjJWYRgQk05tSQ4=)
                          3: 34352e3138342e36302e302f32322d3232203d3e20323639333137.roa (hash: RR1iqcM03gPimIlNkOlK1tM7DHNOaYc884kiTOCDbW8=)
                          4: 34352e3138342e36332e302f32342d3234203d3e20323639333137.roa (hash: qe+jcAjQjiapDQq56drYH+6UhJaYbLacEwSrunytQYs=)
                          5: 323830343a363263343a3a2f33322d3332203d3e20323639333137.roa (hash: 5Gw4og/J69cb0chh6GY3vkxBVgZbJ3LAPxEUS/RBSzY=)
                          6: 323830343a363263343a3a2f33322d313238203d3e20323639333137.roa (hash: ttfBpeV9Lq7AYqAhXoU+Ipa4IWI2zEK+25p1ofEiUGo=)
                          7: 34352e3138342e36302e302f32322d3332203d3e20323639333137.roa (hash: uHGUx6UnrFj+eBIj62d6JMEdABy2ZRwiWjeaO/25Jeo=)
                          8: 34352e3138342e36322e302f32342d3234203d3e20323639333137.roa (hash: GdHnPxb0tKoHHayUAPgDFrODQ25PkcfA9rB29R9/5yg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl
                          rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:c0:f2:c7:ed:22:a5:d4:07:c1:2a:74:ad:50:98:df:e9:d9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
        Validity
            Not Before: Jul 28 11:27:41 2026 GMT
            Not After : Jul 29 12:00:41 2026 GMT
        Subject: CN=DDCB06CAF7D9CB845BED7FAC1078DC14B7202B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:5e:23:de:12:98:2a:88:8c:a8:fe:3c:b9:
                    b7:7f:47:af:14:6e:64:35:f0:82:da:62:ee:9b:cf:
                    9f:91:55:e0:15:cf:eb:3b:aa:3e:4d:47:8e:99:99:
                    d8:46:5a:35:d5:ac:2b:9a:fc:dd:b2:a9:6f:c3:32:
                    f3:3c:ce:b8:f0:6d:0e:cd:d5:58:be:b4:99:ed:6f:
                    ef:f6:e3:43:52:ce:ab:6c:5e:d5:1d:91:02:72:b9:
                    f5:c2:d0:4f:c3:1d:9f:ad:43:75:19:f8:85:d7:30:
                    25:f2:c9:47:8d:0e:21:d4:6b:f7:e9:d9:4f:67:70:
                    68:7f:cd:77:b0:70:bb:cc:5e:40:12:22:9d:9f:2b:
                    f2:c4:e2:5d:f9:67:0d:81:5e:13:77:00:cd:ea:0c:
                    b1:4f:93:6e:f5:cc:e2:0e:4e:08:08:6a:7a:1f:2f:
                    17:4d:f3:73:fa:7c:19:0d:c9:13:8c:dd:ce:e1:b7:
                    df:df:04:0f:85:6e:81:4a:c9:85:16:c1:76:b7:82:
                    62:86:f0:94:4b:57:b0:27:d4:33:74:90:4a:33:bc:
                    86:3d:a0:49:46:47:da:04:77:d1:c6:49:d8:7a:04:
                    c4:81:8a:42:ec:67:39:af:5b:71:41:d0:a1:8f:b5:
                    de:1b:a3:59:2e:c4:cb:54:fa:9a:fb:ae:1d:91:69:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CB:06:CA:F7:D9:CB:84:5B:ED:7F:AC:10:78:DC:14:B7:20:2B:3F
            X509v3 Authority Key Identifier:
                keyid:40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:49:3b:dd:30:5f:6f:cf:e7:77:21:2f:93:c6:8f:b0:19:
         b3:6f:41:0c:54:94:fd:b0:5e:9c:10:63:fd:c4:fa:2c:f8:b8:
         6f:28:ba:23:41:e8:9e:50:11:ed:9a:e5:f7:26:03:c8:c9:44:
         02:24:46:92:e1:e7:2f:c5:82:b1:b7:83:cc:8c:db:b9:4a:15:
         82:ea:d1:1b:3f:c6:60:6f:53:8a:fb:92:8f:44:2d:59:e5:ab:
         67:6e:f4:6c:24:ba:e8:ae:8a:94:d3:9a:f0:80:36:33:df:d1:
         fe:99:38:2b:ac:26:a5:67:18:03:f4:07:08:8d:e7:f7:09:3a:
         cf:7e:33:cb:31:03:89:02:5b:b1:57:16:4d:fc:ae:e6:c6:5c:
         d3:ba:56:43:eb:87:f9:05:1f:32:29:66:0c:f3:00:08:15:57:
         60:bb:60:47:c4:7f:ff:de:34:a6:f6:b4:30:97:49:1e:69:f6:
         7c:55:aa:ca:41:b7:6b:95:ac:da:27:b2:ff:45:19:d0:b3:9d:
         ab:28:8d:bf:f0:05:91:6d:64:fb:50:c2:99:92:d0:cc:4e:47:
         74:f7:9c:6e:94:9a:39:9d:4c:6a:bd:a9:54:30:d2:25:2e:05:
         43:c3:31:b6:4c:25:75:c2:17:3f:1c:e3:62:49:4c:7a:3c:c1:
         b2:18:ad:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSuDA8sftIqXUB8EqdK1QmN/p2bYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAwOUJDQTIyN0RCRjEwMTBERjQwM0E3Q0I1MDYxRTRB
OUFDMDE2MjAeFw0yNjA3MjgxMTI3NDFaFw0yNjA3MjkxMjAwNDFaMDMxMTAvBgNV
BAMTKEREQ0IwNkNBRjdEOUNCODQ1QkVEN0ZBQzEwNzhEQzE0QjcyMDJCM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKF4j3hKYKoiMqP48ubd/R68U
bmQ18ILaYu6bz5+RVeAVz+s7qj5NR46ZmdhGWjXVrCua/N2yqW/DMvM8zrjwbQ7N
1Vi+tJntb+/240NSzqtsXtUdkQJyufXC0E/DHZ+tQ3UZ+IXXMCXyyUeNDiHUa/fp
2U9ncGh/zXewcLvMXkASIp2fK/LE4l35Zw2BXhN3AM3qDLFPk271zOIOTggIanof
LxdN83P6fBkNyROM3c7ht9/fBA+FboFKyYUWwXa3gmKG8JRLV7An1DN0kEozvIY9
oElGR9oEd9HGSdh6BMSBikLsZzmvW3FB0KGPtd4bo1kuxMtU+pr7rh2RafPvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3csGyvfZy4Rb7X+sEHjcFLcgKz8wHwYDVR0j
BBgwFoAUQAm8oifb8QEN9AOny1Bh5KmsAWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTg4bmU3cDZVdEd4akJOYnlVakxGZmkzY1NkVEV1cGU0UUVrTENtUVJh
ZnEvMC80MDA5QkNBMjI3REJGMTAxMERGNDAzQTdDQjUwNjFFNEE5QUMwMTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwMDlCQ0EyMjdEQkYxMDEw
REY0MDNBN0NCNTA2MUU0QTlBQzAxNjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTg4bmU3cDZVdEd4akJOYnlVakxGZmkzY1NkVEV1cGU0UUVrTENtUVJhZnEvMC80
MDA5QkNBMjI3REJGMTAxMERGNDAzQTdDQjUwNjFFNEE5QUMwMTYyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI1NJO90wX2/P53chL5PGj7AZs29BDFSU/bBenBBj/cT6LPi4byi6I0HonlAR
7Zrl9yYDyMlEAiRGkuHnL8WCsbeDzIzbuUoVgurRGz/GYG9TivuSj0QtWeWrZ270
bCS66K6KlNOa8IA2M9/R/pk4K6wmpWcYA/QHCI3n9wk6z34zyzEDiQJbsVcWTfyu
5sZc07pWQ+uH+QUfMilmDPMACBVXYLtgR8R//940pva0MJdJHmn2fFWqykG3a5Ws
2iey/0UZ0LOdqyiNv/AFkW1k+1DCmZLQzE5HdPecbpSaOZ1Mar2pVDDSJS4FQ8Mx
tkwldcIXPxzjYklMejzBshituQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:32 2026 by rpki-client