Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.mft
File:                     830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.mft (raw, json)
Hash identifier:          IiuMDReaSXfw5KXTYIaY2Di+Q3RhGnxy2+NcWL4lq54=
Subject key identifier:   2B:2D:14:E6:F3:E6:C0:92:0A:2E:1D:78:55:2A:3D:82:F9:78:3F:B5
Authority key identifier: 83:0A:17:93:F8:C0:2B:4A:5B:BE:74:2B:5E:59:3E:B4:AF:DB:4A:44
Certificate issuer:       /CN=830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44
Certificate serial:       689AFCC86922BA1770AC07EE167F6BD44054BF79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.mft
Manifest number:          4C
Signing time:             Fri 17 Apr 2026 12:36:11 +0000
Manifest this update:     Fri 17 Apr 2026 12:31:11 +0000
Manifest next update:     Sat 18 Apr 2026 12:38:11 +0000
Files and hashes:         1: 34352e3233372e3231322e302f32322d3332203d3e20323638333033.roa (hash: bvylbYU33m9Hb+tAq7pt0LrK25ybiitSGNrrAS2QOHM=)
                          2: 830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.crl (hash: HOnotgGJRwF5BLz6Oi3vd/zU8wMs5gb4pdzv+M0pIHU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.crl
                          rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9a:fc:c8:69:22:ba:17:70:ac:07:ee:16:7f:6b:d4:40:54:bf:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44
        Validity
            Not Before: Apr 17 12:31:11 2026 GMT
            Not After : Apr 18 12:38:11 2026 GMT
        Subject: CN=2B2D14E6F3E6C0920A2E1D78552A3D82F9783FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:cd:f9:fd:e2:09:81:3e:d4:5a:b0:a7:54:
                    b2:6e:b7:fb:aa:66:63:ad:36:c7:1d:a3:65:63:9b:
                    65:6d:34:47:df:38:74:b9:30:a2:47:51:53:a7:48:
                    15:2e:8f:f7:21:42:69:b5:b2:fd:27:38:d3:85:3d:
                    0b:33:3a:28:15:b6:63:db:1b:46:14:53:7d:12:2c:
                    0b:1e:a3:eb:4a:38:9c:d9:7e:b0:09:e3:e4:d2:ec:
                    cd:80:be:4c:62:d8:7e:a8:78:ce:b7:c3:e1:60:8a:
                    3d:93:1d:fc:e9:d1:19:12:4b:ce:1a:6b:7d:fe:5d:
                    52:f1:9c:09:7a:2a:ac:07:0f:7e:b1:7b:b6:22:a6:
                    a9:1d:63:a8:ca:91:b2:86:a7:ca:26:83:24:5d:4f:
                    81:fd:41:7e:2c:98:35:ed:3d:d0:9e:65:00:3c:0d:
                    fe:c3:87:44:47:96:a8:3b:9e:48:3c:8c:6b:be:cb:
                    51:68:86:dd:41:6a:70:e0:5c:ef:5d:b0:ea:b3:c8:
                    69:00:50:cf:68:b4:7f:88:ba:d0:7e:75:62:3a:4b:
                    60:4e:29:da:fe:81:ec:e0:72:f6:dc:99:63:65:d6:
                    d7:d9:c6:5c:2c:ba:b1:75:8e:5f:73:e9:bc:72:cf:
                    2c:40:10:85:e3:71:e4:35:fa:90:5e:69:78:0e:2d:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2D:14:E6:F3:E6:C0:92:0A:2E:1D:78:55:2A:3D:82:F9:78:3F:B5
            X509v3 Authority Key Identifier:
                keyid:83:0A:17:93:F8:C0:2B:4A:5B:BE:74:2B:5E:59:3E:B4:AF:DB:4A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/830A1793F8C02B4A5BBE742B5E593EB4AFDB4A44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:1a:37:87:dd:90:f3:86:4d:a2:c9:98:95:25:91:db:dc:
         81:2a:6e:0b:df:0f:77:51:db:92:b7:df:f4:28:ca:d3:56:07:
         c9:6c:e8:76:fd:06:1c:06:5c:7d:17:cc:d1:29:aa:5b:20:57:
         08:4e:ad:21:37:03:e3:4f:b3:ab:e1:39:d0:03:98:a5:05:82:
         36:1a:b6:17:b1:24:8e:c3:f1:4b:87:fa:21:c5:8c:75:49:f4:
         d2:cd:7a:89:ba:ae:af:32:1b:4f:6e:3b:35:d3:44:22:b7:18:
         23:13:9f:49:dd:50:be:54:ff:80:82:b9:05:2d:1e:62:e9:09:
         10:41:52:3b:8d:cf:ee:23:3b:6c:48:c8:31:15:bc:c7:cb:7b:
         7c:76:75:fb:2d:d0:c0:b5:d8:d3:63:30:53:cb:36:49:f6:ed:
         e1:45:e4:ca:d7:85:12:f4:2b:a9:af:f7:af:11:5e:61:0d:a4:
         24:7c:c3:90:e5:cd:92:99:81:e5:22:ff:87:81:2d:a2:b5:30:
         b6:c8:ff:47:c5:cb:2c:8d:9e:d8:ae:1f:56:e4:ea:d1:8a:84:
         b2:fa:81:8c:09:d8:7a:0f:4d:97:3e:a9:77:9e:4b:5b:d1:ea:
         09:81:63:d7:af:a4:21:6b:dc:e9:05:24:00:89:26:98:cf:5c:
         0c:6c:6a:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaJr8yGkiuhdwrAfuFn9r1EBUv3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwQTE3OTNGOEMwMkI0QTVCQkU3NDJCNUU1OTNFQjRB
RkRCNEE0NDAeFw0yNjA0MTcxMjMxMTFaFw0yNjA0MTgxMjM4MTFaMDMxMTAvBgNV
BAMTKDJCMkQxNEU2RjNFNkMwOTIwQTJFMUQ3ODU1MkEzRDgyRjk3ODNGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/835/eIJgT7UWrCnVLJut/uq
ZmOtNscdo2Vjm2VtNEffOHS5MKJHUVOnSBUuj/chQmm1sv0nONOFPQszOigVtmPb
G0YUU30SLAseo+tKOJzZfrAJ4+TS7M2Avkxi2H6oeM63w+Fgij2THfzp0RkSS84a
a33+XVLxnAl6KqwHD36xe7YipqkdY6jKkbKGp8omgyRdT4H9QX4smDXtPdCeZQA8
Df7Dh0RHlqg7nkg8jGu+y1Foht1BanDgXO9dsOqzyGkAUM9otH+IutB+dWI6S2BO
Kdr+gezgcvbcmWNl1tfZxlwsurF1jl9z6bxyzyxAEIXjceQ1+pBeaXgOLW+1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKy0U5vPmwJIKLh14VSo9gvl4P7UwHwYDVR0j
BBgwFoAUgwoXk/jAK0pbvnQrXlk+tK/bSkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhHNU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQ
a2IvMC84MzBBMTc5M0Y4QzAyQjRBNUJCRTc0MkI1RTU5M0VCNEFGREI0QTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzMEExNzkzRjhDMDJCNEE1
QkJFNzQyQjVFNTkzRUI0QUZEQjRBNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUhHNU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQa2IvMC84
MzBBMTc5M0Y4QzAyQjRBNUJCRTc0MkI1RTU5M0VCNEFGREI0QTQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfo8aN4fdkPOGTaLJmJUlkdvcgSpuC98Pd1Hbkrff9CjK01YHyWzodv0GHAZc
fRfM0SmqWyBXCE6tITcD40+zq+E50AOYpQWCNhq2F7EkjsPxS4f6IcWMdUn00s16
ibqurzIbT247NdNEIrcYIxOfSd1QvlT/gIK5BS0eYukJEEFSO43P7iM7bEjIMRW8
x8t7fHZ1+y3QwLXY02MwU8s2Sfbt4UXkyteFEvQrqa/3rxFeYQ2kJHzDkOXNkpmB
5SL/h4EtorUwtsj/R8XLLI2e2K4fVuTq0YqEsvqBjAnYeg9Nlz6pd55LW9HqCYFj
16+kIWvc6QUkAIkmmM9cDGxqRw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:58 2026 by rpki-client