Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
File:                     24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft (raw, json)
Hash identifier:          gCd5GgD4UZx7bXOIY2B1tWSlUwUaeH9KEyZtkHbPSPo=
Subject key identifier:   45:D9:5F:71:39:49:6D:93:68:7C:FA:BB:29:7E:11:09:AA:26:98:D6
Authority key identifier: 24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76
Certificate issuer:       /CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
Certificate serial:       6A7AB8705DB23E109EF8445FCA41C5D7CA024929
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
Manifest number:          0177
Signing time:             Thu 16 Apr 2026 20:23:03 +0000
Manifest this update:     Thu 16 Apr 2026 20:18:03 +0000
Manifest next update:     Fri 17 Apr 2026 22:55:03 +0000
Files and hashes:         1: 323830343a363235383a3a2f33322d3334203d3e20323639323931.roa (hash: 4i35/DDK212Z4khUOosAUbxmpZ/wFg45Y7cXSY+E8/w=)
                          2: 24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl (hash: PhohFFo7DIK8BFXwGwwB5W8CycsgsstG87amTjqcdUI=)
                          3: 34352e3138332e3230382e302f32322d3234203d3e20323639323931.roa (hash: UnGbdsoU9eY8lDsUGDJ+NceLPEN91iBYZFlapSh04As=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl
                          rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 Apr 2026 22:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:7a:b8:70:5d:b2:3e:10:9e:f8:44:5f:ca:41:c5:d7:ca:02:49:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
        Validity
            Not Before: Apr 16 20:18:03 2026 GMT
            Not After : Apr 17 22:55:03 2026 GMT
        Subject: CN=45D95F7139496D93687CFABB297E1109AA2698D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:2c:22:04:8f:e3:98:01:72:d5:de:fe:cc:
                    24:28:9a:bd:83:8f:52:57:00:7d:2d:a9:1f:53:60:
                    c1:2c:20:77:fa:01:c0:bb:8c:5d:2a:c0:20:7e:5b:
                    0c:26:d1:a9:3c:fd:63:0a:45:fa:e7:0f:5c:aa:89:
                    bc:28:6e:04:26:7d:90:d6:13:84:a6:cd:2a:fb:17:
                    be:4c:bf:a8:48:ef:ff:ab:66:63:46:76:d3:b8:40:
                    e3:51:99:ec:93:62:74:0b:f9:0c:6d:82:dd:40:88:
                    7f:e2:16:29:06:34:96:94:b2:0e:3f:93:2e:a0:41:
                    55:4b:c2:7b:77:4c:78:61:ec:b1:19:6e:4c:ec:86:
                    7b:c0:54:f7:a5:b7:e6:3e:21:1a:15:0e:af:55:e4:
                    5b:9a:1d:5c:d0:c4:e0:7c:c5:94:fc:d5:33:c0:bd:
                    9f:ea:22:71:b2:68:cc:2b:80:74:07:1b:07:bf:61:
                    81:77:52:ec:37:a1:b6:53:38:b2:3e:d4:0e:55:62:
                    6f:a4:5a:cb:e8:b4:16:24:28:e0:90:5a:84:0c:30:
                    d8:5f:cb:4a:c1:78:41:3a:a0:83:73:b9:3e:26:51:
                    5b:0a:67:b9:54:4e:7f:aa:46:6c:77:3d:da:02:df:
                    19:11:69:22:da:06:e3:c2:a2:25:b9:dd:cd:bc:36:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D9:5F:71:39:49:6D:93:68:7C:FA:BB:29:7E:11:09:AA:26:98:D6
            X509v3 Authority Key Identifier:
                keyid:24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:97:0b:c9:90:ea:63:79:e5:b2:c8:b8:52:f9:20:b7:e6:2b:
         50:2b:91:57:d8:55:dd:57:77:f2:ca:d0:ac:17:f7:03:c6:ec:
         6e:d4:5d:b3:30:32:33:a3:f1:fc:04:64:63:d5:ce:2d:dd:f1:
         a5:f2:d7:1b:aa:d8:32:e2:e0:a7:4c:d1:a1:37:0f:b6:d9:24:
         5c:e6:ff:9a:61:36:00:e9:ca:8e:4f:f4:53:a3:8d:2e:02:3d:
         57:f5:3f:39:be:82:ce:ef:ae:f1:08:9e:2d:08:1f:89:f3:2b:
         6e:11:8b:53:20:62:a8:75:84:d6:1c:fb:c8:05:50:b2:de:08:
         1a:0c:33:2d:9f:cb:40:d2:85:02:c1:90:a7:c9:69:18:44:5a:
         58:8b:ee:5a:d2:c7:05:ea:b9:b5:41:8c:f8:d9:b8:3f:6f:b2:
         f2:61:58:2a:0a:87:82:5e:ea:9f:49:cc:a8:e6:84:56:2a:54:
         65:35:cd:3d:79:57:e3:e9:d6:41:3e:b0:10:bc:8e:0b:a1:0b:
         73:8a:d5:65:87:0c:ce:b6:2a:0f:35:88:4d:31:0d:b2:b0:d1:
         d7:8d:3d:58:89:b1:ef:f4:d5:d9:53:3b:f0:45:73:b6:f3:33:
         84:1b:79:8f:7a:aa:09:a5:f3:5d:67:4c:57:9d:1d:58:0e:09:
         53:e5:5e:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUanq4cF2yPhCe+ERfykHF18oCSSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRERjkzODMyRkY3MUY3NkM1M0Q2M0RDRkRGM0I1QkI2
ODc5RUQ3NjAeFw0yNjA0MTYyMDE4MDNaFw0yNjA0MTcyMjU1MDNaMDMxMTAvBgNV
BAMTKDQ1RDk1RjcxMzk0OTZEOTM2ODdDRkFCQjI5N0UxMTA5QUEyNjk4RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QCwiBI/jmAFy1d7+zCQomr2D
j1JXAH0tqR9TYMEsIHf6AcC7jF0qwCB+Wwwm0ak8/WMKRfrnD1yqibwobgQmfZDW
E4SmzSr7F75Mv6hI7/+rZmNGdtO4QONRmeyTYnQL+Qxtgt1AiH/iFikGNJaUsg4/
ky6gQVVLwnt3THhh7LEZbkzshnvAVPelt+Y+IRoVDq9V5FuaHVzQxOB8xZT81TPA
vZ/qInGyaMwrgHQHGwe/YYF3Uuw3obZTOLI+1A5VYm+kWsvotBYkKOCQWoQMMNhf
y0rBeEE6oINzuT4mUVsKZ7lUTn+qRmx3PdoC3xkRaSLaBuPCoiW53c28NktHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURdlfcTlJbZNofPq7KX4RCaommNYwHwYDVR0j
BBgwFoAUJN+Tgy/3H3bFPWPc/fO1u2h57XYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUI0ZDdHSEhWcEx3YW5icE13RlJ4cFRzcmJCSnZOb3UyYThaZWJxWERw
WlcvMC8yNERGOTM4MzJGRjcxRjc2QzUzRDYzRENGREYzQjVCQjY4NzlFRDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0REY5MzgzMkZGNzFGNzZD
NTNENjNEQ0ZERjNCNUJCNjg3OUVENzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUI0ZDdHSEhWcEx3YW5icE13RlJ4cFRzcmJCSnZOb3UyYThaZWJxWERwWlcvMC8y
NERGOTM4MzJGRjcxRjc2QzUzRDYzRENGREYzQjVCQjY4NzlFRDc2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFpcLyZDqY3nlssi4Uvkgt+YrUCuRV9hV3Vd38srQrBf3A8bsbtRdszAyM6Px
/ARkY9XOLd3xpfLXG6rYMuLgp0zRoTcPttkkXOb/mmE2AOnKjk/0U6ONLgI9V/U/
Ob6Czu+u8QieLQgfifMrbhGLUyBiqHWE1hz7yAVQst4IGgwzLZ/LQNKFAsGQp8lp
GERaWIvuWtLHBeq5tUGM+Nm4P2+y8mFYKgqHgl7qn0nMqOaEVipUZTXNPXlX4+nW
QT6wELyOC6ELc4rVZYcMzrYqDzWITTENsrDR1409WImx7/TV2VM78EVztvMzhBt5
j3qqCaXzXWdMV50dWA4JU+VeiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:56 2026 by rpki-client