Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
File:                     4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft (raw, json)
Hash identifier:          xdjGVGjq0fomIz+qc8trtyC7pmIDXn3sHkeh2QbAqRM=
Subject key identifier:   F3:C3:4F:42:0D:26:CC:D5:41:3D:01:F0:CE:4D:43:C9:21:CC:99:3C
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       74DCBBEFF43312A8D5BC3C0BCCA77BE13B37189C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
Manifest number:          D0
Signing time:             Sun 01 Mar 2026 06:34:23 +0000
Manifest this update:     Sun 01 Mar 2026 06:29:23 +0000
Manifest next update:     Mon 02 Mar 2026 09:43:23 +0000
Files and hashes:         1: 3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (hash: q+GsFf43C3RjMx041Ip8T2ZCEk5vUsQJET3gmFBsCWs=)
                          2: 3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (hash: KTmZ1lBoJw6zx1UFcwMpoNCD3GmgB2DENnWUqm4ZmQE=)
                          3: 323830343a373138303a3a2f33332d3333203d3e20323730373933.roa (hash: l8CvQgNarwCo3pOTLpCJefQIDt7rpWTgI4spaOKDENU=)
                          4: 323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (hash: aU4U86iGV84DuEw4neEIYH1JT+mCBQZq3vEvnQq8R3A=)
                          5: 3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (hash: QfbwE60yK9ryZkWagwba1W7K9bOkT2rutzBhfujb8C8=)
                          6: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl (hash: 60DDj32xKQQhcrww45uMNgnXkEi3ySpqKTlH8mDsKLs=)
                          7: 323830343a373138303a3a2f33322d3332203d3e20323730373933.roa (hash: /Si3WIWWzJD6vNhz8lmN3DQ0Era253mkaP+0P1mG510=)
                          8: 323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (hash: lFrjvrMxzblDYDfWmfc9dFhSCZaIlMkFSc8IfPLXuBU=)
                          9: 3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (hash: SHJlGwh0aS8eq6SPGivCat3XMCYZDeEyzDUDKRyhdGo=)
                          10: 3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (hash: JeA8tNnq52g+siWz2Xjv02XBG+9YjyQg5PiUYmPSfPw=)
                          11: 3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa (hash: oEJyG8sugH7dKUAgRoHCVhg0rLV5m2ccXsKzSSaObFU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 09:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dc:bb:ef:f4:33:12:a8:d5:bc:3c:0b:cc:a7:7b:e1:3b:37:18:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Mar  1 06:29:23 2026 GMT
            Not After : Mar  2 09:43:23 2026 GMT
        Subject: CN=F3C34F420D26CCD5413D01F0CE4D43C921CC993C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:5e:ce:90:39:fd:73:e8:d7:46:da:8c:83:
                    6b:8d:1d:ca:e3:33:bf:4e:98:39:c9:18:2c:4c:d9:
                    00:ab:f8:6a:70:6b:8f:55:5f:f8:95:99:f0:12:d7:
                    8c:e1:dc:1c:10:0b:a4:56:a6:f4:3a:96:91:a3:90:
                    b4:27:a2:17:be:37:02:08:23:bc:a1:45:7e:c7:81:
                    14:e7:5d:ed:e5:3e:a2:1e:a8:01:e0:ea:48:57:0f:
                    9d:cf:d5:d8:b2:b5:0a:51:97:f1:78:47:c5:06:b9:
                    62:7b:35:da:4c:d0:13:65:e3:73:c2:bd:68:b0:63:
                    cc:ec:b7:ee:fe:ef:12:e2:de:a3:f6:ca:64:15:d5:
                    58:33:c8:38:75:07:2c:16:01:61:22:6c:cf:dc:b3:
                    ec:60:c0:cd:07:6c:ac:b7:5a:c9:8d:7d:e7:13:15:
                    86:80:6e:41:33:c7:d1:8d:6b:52:d5:7c:cc:76:00:
                    18:66:45:17:db:5a:c2:bc:59:a6:31:24:04:c9:d0:
                    b5:74:50:7a:5f:79:6d:13:0c:11:9f:72:e3:ca:c5:
                    d3:31:76:40:79:6b:01:de:ca:5c:c9:c2:43:5c:e6:
                    93:ca:cc:11:ca:c6:e2:59:61:be:0c:8d:2f:0f:14:
                    b0:e1:7d:88:c4:33:38:4b:ff:be:a3:cc:b6:f3:60:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C3:4F:42:0D:26:CC:D5:41:3D:01:F0:CE:4D:43:C9:21:CC:99:3C
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:97:51:ca:cc:83:33:d6:3f:69:fe:9f:8e:16:0f:76:bb:5e:
         32:e7:18:8f:fe:97:2f:38:58:60:93:37:57:44:f4:c8:2b:88:
         56:fa:d4:fb:c4:fc:91:22:bc:59:77:76:59:9b:69:f4:fb:95:
         37:4b:c8:9e:08:cd:0e:74:87:11:82:88:c4:59:1c:57:8d:96:
         5f:0b:11:e2:c8:ab:e6:bb:81:c4:f6:39:17:40:47:bf:df:48:
         af:99:21:c3:83:01:b2:63:f2:fd:12:3e:b4:8a:a0:7d:08:8d:
         16:bc:52:60:2c:b5:9c:92:b2:20:02:fe:ab:64:36:62:09:b6:
         37:9b:57:c4:b9:c9:22:0e:e0:30:bf:6e:16:6c:09:03:1d:61:
         12:8e:98:f4:d5:5b:8d:22:db:eb:e0:99:f6:ed:d3:26:cc:d8:
         53:26:ee:8c:3f:a6:c5:bb:bb:4d:02:d9:88:44:0d:bf:e9:e3:
         e9:89:0f:f5:81:5e:6b:9f:42:6a:c6:fc:17:fc:9f:fe:fa:aa:
         30:bb:27:06:43:0d:f5:7a:e3:38:d7:a6:a8:14:12:87:9d:c7:
         ab:5b:c7:25:d7:35:ec:2e:0b:83:2c:2f:a9:aa:da:60:a7:c7:
         ce:f8:aa:91:73:00:f0:f5:3c:20:55:b5:86:7a:62:65:a5:98:
         fa:5b:0b:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdNy77/QzEqjVvDwLzKd74Ts3GJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ5QUJFNDkwQzQ3RENDNjYzOTkyQkJBMjRCRDVBMEZC
N0MxMDA5QTAeFw0yNjAzMDEwNjI5MjNaFw0yNjAzMDIwOTQzMjNaMDMxMTAvBgNV
BAMTKEYzQzM0RjQyMEQyNkNDRDU0MTNEMDFGMENFNEQ0M0M5MjFDQzk5M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pF7OkDn9c+jXRtqMg2uNHcrj
M79OmDnJGCxM2QCr+Gpwa49VX/iVmfAS14zh3BwQC6RWpvQ6lpGjkLQnohe+NwII
I7yhRX7HgRTnXe3lPqIeqAHg6khXD53P1diytQpRl/F4R8UGuWJ7NdpM0BNl43PC
vWiwY8zst+7+7xLi3qP2ymQV1VgzyDh1BywWAWEibM/cs+xgwM0HbKy3WsmNfecT
FYaAbkEzx9GNa1LVfMx2ABhmRRfbWsK8WaYxJATJ0LV0UHpfeW0TDBGfcuPKxdMx
dkB5awHeylzJwkNc5pPKzBHKxuJZYb4MjS8PFLDhfYjEMzhL/76jzLbzYCJLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU88NPQg0mzNVBPQHwzk1DySHMmTwwHwYDVR0j
BBgwFoAUTZq+SQxH3MZjmSu6JL1aD7fBAJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC80RDlBQkU0OTBDNDdEQ0M2NjM5OTJCQkEyNEJENUEwRkI3QzEwMDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREOUFCRTQ5MEM0N0RDQzY2
Mzk5MkJCQTI0QkQ1QTBGQjdDMTAwOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1bzMvMC80
RDlBQkU0OTBDNDdEQ0M2NjM5OTJCQkEyNEJENUEwRkI3QzEwMDlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABZdRysyDM9Y/af6fjhYPdrteMucYj/6XLzhYYJM3V0T0yCuIVvrU+8T8kSK8
WXd2WZtp9PuVN0vIngjNDnSHEYKIxFkcV42WXwsR4sir5ruBxPY5F0BHv99Ir5kh
w4MBsmPy/RI+tIqgfQiNFrxSYCy1nJKyIAL+q2Q2Ygm2N5tXxLnJIg7gML9uFmwJ
Ax1hEo6Y9NVbjSLb6+CZ9u3TJszYUybujD+mxbu7TQLZiEQNv+nj6YkP9YFea59C
asb8F/yf/vqqMLsnBkMN9XrjONemqBQSh53Hq1vHJdc17C4LgywvqaraYKfHzviq
kXMA8PU8IFW1hnpiZaWY+lsLew==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:06 2026 by rpki-client