Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
File:                     5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft (raw, json)
Hash identifier:          NRBxU3CvWjsoeoKYqAoG7qNb+nU+iJ57ui5S4xtyGqQ=
Subject key identifier:   63:89:E4:C3:31:09:B2:24:A0:5F:98:64:02:E3:38:8D:21:9B:FF:82
Authority key identifier: 5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87
Certificate issuer:       /CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
Certificate serial:       331DD07E9CBC8F95417F9AABBB10675F822073D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
Manifest number:          39
Signing time:             Sun 01 Mar 2026 11:22:08 +0000
Manifest this update:     Sun 01 Mar 2026 11:17:08 +0000
Manifest next update:     Mon 02 Mar 2026 11:49:08 +0000
Files and hashes:         1: 3136382e302e3136362e302f32332d3233203d3e20323633343833.roa (hash: jMkRqtoEFReHbIVj0glijLpMJ6PwiTGu44jvbzjPxeI=)
                          2: 5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl (hash: XRbiewwQ8nB1dBVM56u8hKYsOaiJc/gI689EcNI3KLA=)
                          3: 3136382e302e3136342e302f32332d3233203d3e20323633343833.roa (hash: e9/O62ZEPkBCNGnDpzyARSyuYb1zB9mtqW31b7CHJP0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 11:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1d:d0:7e:9c:bc:8f:95:41:7f:9a:ab:bb:10:67:5f:82:20:73:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3F3F6E06768DE0B6EDB47D208D214BAE322A87
        Validity
            Not Before: Mar  1 11:17:08 2026 GMT
            Not After : Mar  2 11:49:08 2026 GMT
        Subject: CN=6389E4C33109B224A05F986402E3388D219BFF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:52:8f:bd:06:4f:67:59:37:e7:62:b3:4b:
                    22:10:37:64:a7:7d:c2:50:69:7c:d4:aa:f5:de:e8:
                    4e:ba:d0:c1:79:36:08:c0:8a:cd:14:73:aa:d5:fd:
                    7a:03:77:78:08:59:26:24:02:1f:f9:22:c0:ec:48:
                    38:c7:64:d1:be:d0:66:cf:b9:25:d8:50:02:04:5f:
                    0c:c7:44:07:e0:a6:03:d6:41:55:95:19:3c:ce:b3:
                    9a:3e:56:6a:41:ba:91:ff:4c:e7:26:14:08:dc:7e:
                    9b:8e:e7:01:c2:2a:5e:d7:57:13:47:60:b9:8f:58:
                    60:4b:00:06:a6:af:78:d0:85:7c:a4:aa:1a:56:23:
                    5d:e1:cd:67:c5:2e:89:b4:f2:b9:da:6c:5d:ff:da:
                    0f:61:cf:e7:1f:af:e6:87:a7:b1:9b:c4:7e:f3:80:
                    93:bd:00:76:eb:9f:84:a0:4e:33:29:e9:92:b4:d9:
                    ef:ad:84:db:5a:69:5a:c7:3d:54:dc:f9:65:c4:8f:
                    b3:8f:4a:a7:e8:65:40:57:38:85:63:a0:5b:3f:c7:
                    72:4d:a7:09:ab:6c:8c:b9:d5:88:bf:28:1a:7e:cd:
                    d9:cf:91:c5:49:d4:f7:bc:ac:de:34:da:db:c0:36:
                    79:c9:71:99:3f:ec:41:69:8e:76:ba:81:e8:29:4f:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:89:E4:C3:31:09:B2:24:A0:5F:98:64:02:E3:38:8D:21:9B:FF:82
            X509v3 Authority Key Identifier:
                keyid:5F:3F:3F:6E:06:76:8D:E0:B6:ED:B4:7D:20:8D:21:4B:AE:32:2A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5F3F3F6E06768DE0B6EDB47D208D214BAE322A87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bd:fb:58:10:75:5d:14:84:13:17:e6:23:b1:b3:88:72:38:
         d5:2e:ef:b8:fe:cf:d0:43:00:13:88:e0:5c:87:18:64:01:fa:
         57:46:9a:db:f3:3e:cf:9c:f1:97:51:0f:3e:80:73:e2:38:f0:
         71:32:e6:da:c4:5a:ea:99:4f:f9:14:c3:48:49:53:ac:b2:e4:
         ee:a4:b2:f6:ea:94:ea:c9:ff:75:22:c9:62:49:23:32:83:4b:
         cc:04:1c:70:5e:9e:12:a4:09:75:f8:bd:16:6d:6a:1a:e6:ad:
         48:d4:70:85:f7:c5:bd:e4:ba:80:73:97:c7:56:03:23:0f:92:
         73:a8:ea:d9:79:b4:54:8b:f0:a3:2a:86:12:52:7b:28:6b:8e:
         59:dc:58:eb:ee:ea:31:62:04:3d:1c:9b:7b:02:47:73:31:ea:
         3a:9e:ef:1c:0a:8b:02:1a:18:0a:64:f2:f1:1f:7e:07:e3:f2:
         e9:f9:cd:0f:09:d9:ca:ad:ba:3c:34:76:5a:12:c8:58:66:e3:
         35:05:22:5f:db:d2:39:ea:1a:e4:f3:76:5b:ef:b1:98:83:7c:
         c4:d0:05:ba:76:35:66:b0:f0:94:aa:cb:86:64:01:05:08:e9:
         e9:aa:a7:01:c2:33:47:c1:f3:3a:d1:5a:50:b0:c3:44:5d:f9:
         cf:7f:90:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMx3Qfpy8j5VBf5qruxBnX4Igc9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYzRjNGNkUwNjc2OERFMEI2RURCNDdEMjA4RDIxNEJB
RTMyMkE4NzAeFw0yNjAzMDExMTE3MDhaFw0yNjAzMDIxMTQ5MDhaMDMxMTAvBgNV
BAMTKDYzODlFNEMzMzEwOUIyMjRBMDVGOTg2NDAyRTMzODhEMjE5QkZGODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjq1KPvQZPZ1k352KzSyIQN2Sn
fcJQaXzUqvXe6E660MF5NgjAis0Uc6rV/XoDd3gIWSYkAh/5IsDsSDjHZNG+0GbP
uSXYUAIEXwzHRAfgpgPWQVWVGTzOs5o+VmpBupH/TOcmFAjcfpuO5wHCKl7XVxNH
YLmPWGBLAAamr3jQhXykqhpWI13hzWfFLom08rnabF3/2g9hz+cfr+aHp7GbxH7z
gJO9AHbrn4SgTjMp6ZK02e+thNtaaVrHPVTc+WXEj7OPSqfoZUBXOIVjoFs/x3JN
pwmrbIy51Yi/KBp+zdnPkcVJ1Pe8rN402tvANnnJcZk/7EFpjna6gegpT8CtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUY4nkwzEJsiSgX5hkAuM4jSGb/4IwHwYDVR0j
BBgwFoAUXz8/bgZ2jeC27bR9II0hS64yKocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB
VXAvMC81RjNGM0Y2RTA2NzY4REUwQjZFREI0N0QyMDhEMjE0QkFFMzIyQTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGM0YzRjZFMDY3NjhERTBC
NkVEQjQ3RDIwOEQyMTRCQUUzMjJBODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVBVXAvMC81
RjNGM0Y2RTA2NzY4REUwQjZFREI0N0QyMDhEMjE0QkFFMzIyQTg3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu737WBB1XRSEExfmI7GziHI41S7vuP7P0EMAE4jgXIcYZAH6V0aa2/M+z5zx
l1EPPoBz4jjwcTLm2sRa6plP+RTDSElTrLLk7qSy9uqU6sn/dSLJYkkjMoNLzAQc
cF6eEqQJdfi9Fm1qGuatSNRwhffFveS6gHOXx1YDIw+Sc6jq2Xm0VIvwoyqGElJ7
KGuOWdxY6+7qMWIEPRybewJHczHqOp7vHAqLAhoYCmTy8R9+B+Py6fnNDwnZyq26
PDR2WhLIWGbjNQUiX9vSOeoa5PN2W++xmIN8xNAFunY1ZrDwlKrLhmQBBQjp6aqn
AcIzR8HzOtFaULDDRF35z3+Q5w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:39 2026 by rpki-client