Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
File:                     B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft (raw, json)
Hash identifier:          sQneDT8uK/IjU2mif0sYSwLay2Lmkd4puXlujfPcEmc=
Subject key identifier:   7A:DF:A6:B1:D5:C2:A9:D8:57:56:C1:D4:91:6E:4F:C7:22:63:91:20
Authority key identifier: B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C
Certificate issuer:       /CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
Certificate serial:       11DEC1ECB7798E761909CEDB9E311C3A04C0AA26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
Manifest number:          0250
Signing time:             Fri 17 Apr 2026 21:12:10 +0000
Manifest this update:     Fri 17 Apr 2026 21:07:10 +0000
Manifest next update:     Sun 19 Apr 2026 00:51:10 +0000
Files and hashes:         1: B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl (hash: KERB+NysnJPOprIZcBR96j5uh26Kftlk/a9E28mPaRc=)
                          2: 3137372e33382e32342e302f32322d3234203d3e20323632393038.roa (hash: V8EvDom6uJ452/kO7Pp2jj/JJ9qWyfEUHIcgVy5xlkI=)
                          3: 3136382e3139362e35362e302f32322d3234203d3e20323632393038.roa (hash: JweRuIf2GA4L3uP5KGvTIX8SbZvA0VDQVW8hE28Y8qU=)
                          4: 3137372e39312e3133362e302f32322d3234203d3e20323632393038.roa (hash: rJ3UhUH3VuyDEwKjH3Zx9CC+l3tF/dvN8bafVTTaMsM=)
                          5: 323830343a3363383a3a2f33322d3336203d3e20323632393038.roa (hash: Svjcc7z8dn6wCXCFlWY3n5PCY/WpbhjP7pMuqzg5VL4=)
                          6: 3137372e33382e32382e302f32322d3234203d3e20323632393038.roa (hash: n34DzaeBvCex6/NEMgJno7PVg93luggIVmwXokR4qHQ=)
                          7: 3137372e35322e35362e302f32322d3234203d3e20323632393038.roa (hash: PHOr7Sz2kHQLAJeSt5sASw79lSPo+cW2oF1NL9541iU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl
                          rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:c1:ec:b7:79:8e:76:19:09:ce:db:9e:31:1c:3a:04:c0:aa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0337D2970CB09ECBA6C93B9F730526E8ABD179C
        Validity
            Not Before: Apr 17 21:07:10 2026 GMT
            Not After : Apr 19 00:51:10 2026 GMT
        Subject: CN=7ADFA6B1D5C2A9D85756C1D4916E4FC722639120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:5a:45:3e:65:bc:0a:4f:cf:67:b3:7e:c0:
                    45:e6:ac:95:c0:f1:c2:10:48:28:d5:4b:a4:a5:69:
                    cd:d1:f9:00:46:e5:1f:37:f6:86:79:0e:9a:41:41:
                    b6:8a:12:c0:d6:b5:47:94:a1:19:e1:4d:48:05:a9:
                    58:f0:5f:49:05:74:54:51:a9:6e:71:9b:dc:ab:d4:
                    11:e9:87:c2:e3:42:8d:be:3a:b8:49:b6:06:ce:f5:
                    03:c0:b6:d1:0b:29:a0:13:9e:69:af:a8:0f:a1:db:
                    d5:67:07:9f:67:4e:4b:7c:2c:83:df:a4:a4:c3:d0:
                    e8:7e:81:5f:44:e8:70:6e:e4:67:ed:45:05:40:2d:
                    8c:13:6d:2d:c8:72:20:f4:a7:66:02:ce:38:43:79:
                    d9:4d:f4:3a:62:40:0e:3a:2d:dc:4e:f8:e9:0e:d8:
                    f5:b3:50:4b:70:4c:66:fd:eb:9e:1b:4f:09:a3:02:
                    c5:16:66:fb:58:35:53:8e:96:20:35:b7:40:21:ea:
                    94:ae:1e:14:34:43:77:fa:ed:b7:c8:52:09:76:59:
                    46:88:25:68:ab:9a:07:a7:78:34:27:73:48:42:09:
                    22:7e:6b:f2:9f:a9:b2:1c:e1:cf:20:ef:3b:4b:ce:
                    be:a4:02:75:12:a0:e2:5a:c6:7d:08:fe:b0:41:af:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:A6:B1:D5:C2:A9:D8:57:56:C1:D4:91:6E:4F:C7:22:63:91:20
            X509v3 Authority Key Identifier:
                keyid:B0:33:7D:29:70:CB:09:EC:BA:6C:93:B9:F7:30:52:6E:8A:BD:17:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/B0337D2970CB09ECBA6C93B9F730526E8ABD179C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:b2:bb:ea:cb:65:75:1c:3f:91:2e:d7:1f:69:d1:6f:6b:
         4d:f6:42:56:bf:83:a1:28:62:0d:d4:65:58:8c:62:26:c0:55:
         eb:51:70:8a:0a:ab:73:3f:22:60:0b:ee:c5:40:9a:68:b5:d4:
         14:8b:30:9d:3e:f9:77:5b:a2:3f:25:64:ed:85:20:b2:64:c0:
         9b:4a:6b:1e:90:3c:d3:36:b6:fd:2e:e2:10:52:9b:64:49:e8:
         df:cf:b5:5e:5c:37:c9:5f:22:15:00:8b:43:90:94:4f:39:6c:
         bc:10:83:19:96:23:d9:19:f1:99:5a:ad:ea:ad:48:d6:e6:fb:
         fc:fe:b9:e6:7e:97:9e:68:2b:17:54:1a:fc:41:61:2b:5d:6e:
         3b:13:71:80:7b:6d:43:bd:a8:00:ba:b5:7b:38:b3:64:e4:ed:
         e0:2b:d0:3a:bd:df:3e:8f:d4:1e:9d:a6:31:0b:90:32:4b:59:
         0f:f6:43:a8:01:5f:1e:f9:ec:ed:54:35:13:b6:57:4b:44:f4:
         b3:5e:e9:80:fd:e0:5c:4e:05:12:9a:b0:5d:7e:f2:61:9a:4b:
         77:40:68:f5:1d:fe:b4:77:3f:49:94:64:74:d8:0a:4f:5d:72:
         75:27:c8:3c:3b:9b:44:b0:16:fd:77:a1:e0:f6:a8:5a:2e:d2:
         35:43:78:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEd7B7Ld5jnYZCc7bnjEcOgTAqiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAzMzdEMjk3MENCMDlFQ0JBNkM5M0I5RjczMDUyNkU4
QUJEMTc5QzAeFw0yNjA0MTcyMTA3MTBaFw0yNjA0MTkwMDUxMTBaMDMxMTAvBgNV
BAMTKDdBREZBNkIxRDVDMkE5RDg1NzU2QzFENDkxNkU0RkM3MjI2MzkxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYVpFPmW8Ck/PZ7N+wEXmrJXA
8cIQSCjVS6Slac3R+QBG5R839oZ5DppBQbaKEsDWtUeUoRnhTUgFqVjwX0kFdFRR
qW5xm9yr1BHph8LjQo2+OrhJtgbO9QPAttELKaATnmmvqA+h29VnB59nTkt8LIPf
pKTD0Oh+gV9E6HBu5GftRQVALYwTbS3IciD0p2YCzjhDedlN9DpiQA46LdxO+OkO
2PWzUEtwTGb9654bTwmjAsUWZvtYNVOOliA1t0Ah6pSuHhQ0Q3f67bfIUgl2WUaI
JWirmgeneDQnc0hCCSJ+a/KfqbIc4c8g7ztLzr6kAnUSoOJaxn0I/rBBr2WPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUet+msdXCqdhXVsHUkW5PxyJjkSAwHwYDVR0j
BBgwFoAUsDN9KXDLCey6bJO59zBSboq9F5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBr
UWUvMC9CMDMzN0QyOTcwQ0IwOUVDQkE2QzkzQjlGNzMwNTI2RThBQkQxNzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMzM3RDI5NzBDQjA5RUNC
QTZDOTNCOUY3MzA1MjZFOEFCRDE3OUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXBoN3pEWVpHOG5yQXJmS1Jjb25ZcWlMSzRxU1M5dlEzOWZWMm82UlBrUWUvMC9C
MDMzN0QyOTcwQ0IwOUVDQkE2QzkzQjlGNzMwNTI2RThBQkQxNzlDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKiuyu+rLZXUcP5Eu1x9p0W9rTfZCVr+DoShiDdRlWIxiJsBV61Fwigqrcz8i
YAvuxUCaaLXUFIswnT75d1uiPyVk7YUgsmTAm0prHpA80za2/S7iEFKbZEno38+1
Xlw3yV8iFQCLQ5CUTzlsvBCDGZYj2RnxmVqt6q1I1ub7/P655n6XnmgrF1Qa/EFh
K11uOxNxgHttQ72oALq1ezizZOTt4CvQOr3fPo/UHp2mMQuQMktZD/ZDqAFfHvns
7VQ1E7ZXS0T0s17pgP3gXE4FEpqwXX7yYZpLd0Bo9R3+tHc/SZRkdNgKT11ydSfI
PDubRLAW/Xeh4PaoWi7SNUN4oQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:25:18 2026 by rpki-client