Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
File:                     450D2460BB579B573599E83A5DA3018696A0F8F6.mft (raw, json)
Hash identifier:          QinsO4sAc8W0HPIbn4IURfRvW3R7Z0uQeyMLpxApp88=
Subject key identifier:   61:3C:52:FA:17:D3:1B:19:1F:03:5A:D0:38:4A:7B:95:73:E7:12:A7
Authority key identifier: 45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6
Certificate issuer:       /CN=450D2460BB579B573599E83A5DA3018696A0F8F6
Certificate serial:       4BDA7A07CF2A3CE23DDA06B841D16985692AD844
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
Manifest number:          0389
Signing time:             Mon 02 Mar 2026 10:29:42 +0000
Manifest this update:     Mon 02 Mar 2026 10:24:42 +0000
Manifest next update:     Tue 03 Mar 2026 12:54:42 +0000
Files and hashes:         1: 450D2460BB579B573599E83A5DA3018696A0F8F6.crl (hash: f4/kKCSu0BdpbeEId2999J9gNs1a/kIENdHS90qMT3g=)
                          2: 34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa (hash: tB4qmyoEC4lhy6HogYrvDUbTd4LhkIOyGFqDnc3vh9M=)
                          3: 323830343a376539303a3a2f33322d3332203d3e20323731363332.roa (hash: 6ndzO9TXLBYlKyQaJ9NSMgtV58vadj+h/xitsv+UAs8=)
                          4: 34352e3137322e3139322e302f32332d3233203d3e20323731363332.roa (hash: QYyGAoIP1b4aKftxySjr/NtaBgyJZBITpRjhdOoW2K4=)
                          5: 34352e3137322e3139352e302f32342d3234203d3e20323731363332.roa (hash: B7bkMTVvvMJbLRKotv0XjIUWl82PDZM6ex6/kWMOKJM=)
                          6: 34352e3137322e3139342e302f32342d3234203d3e20323731363332.roa (hash: a4oEzaxdTLW6/w+pVXGa+b8EKiS7pXCM7m9qz/AWnVM=)
                          7: 323830343a376539303a3a2f33382d3338203d3e20323731363332.roa (hash: 7fmHmEgI9ziJAwXlcULPBrG6Z/QS2m+ykszMpY6ICvQ=)
                          8: 34352e3137322e3139322e302f32342d3234203d3e20323731363332.roa (hash: NK2FVhuJtm1ZP2czUAXn/3YbfOpP1cH5Id4RQLnuufQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:da:7a:07:cf:2a:3c:e2:3d:da:06:b8:41:d1:69:85:69:2a:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450D2460BB579B573599E83A5DA3018696A0F8F6
        Validity
            Not Before: Mar  2 10:24:42 2026 GMT
            Not After : Mar  3 12:54:42 2026 GMT
        Subject: CN=613C52FA17D31B191F035AD0384A7B9573E712A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:36:3e:67:82:98:42:97:19:b5:c9:08:dc:
                    3a:e6:6b:a0:b7:3e:be:74:f5:68:df:43:17:c2:86:
                    bc:7d:78:96:70:f0:79:ef:dd:48:93:06:ce:97:81:
                    1d:f9:ab:0c:a6:a4:94:c1:e9:15:d8:1a:7b:ba:b7:
                    27:ca:ed:b5:13:71:72:97:67:ed:28:c0:fd:59:41:
                    7f:86:3c:9f:1a:0e:3c:49:e3:67:27:e5:fa:c5:a3:
                    2d:ec:a3:f9:1e:f2:ef:4d:ac:4f:94:f2:2a:84:52:
                    0a:60:62:54:4c:31:71:2a:29:0b:d0:80:a0:2d:18:
                    31:71:7c:eb:a6:4a:76:2a:a7:19:b9:91:32:4f:71:
                    21:a6:b9:f2:94:d8:2b:fa:e5:b1:8b:f1:0e:5e:5a:
                    39:a9:86:87:9b:4e:d9:fa:20:ca:c6:b2:80:da:8f:
                    f2:85:dd:51:44:15:0c:23:ee:fa:35:f5:13:8a:0c:
                    8a:7c:12:ff:fd:9d:f5:07:b3:12:d2:77:66:9c:0c:
                    60:1a:81:aa:e5:82:a6:7f:ed:7a:44:0f:d1:87:a5:
                    90:a2:2a:a8:57:b0:a3:11:11:93:83:08:4e:52:3b:
                    25:fa:6e:02:c9:a4:dd:67:6c:36:bf:e8:04:0d:2d:
                    7b:1e:26:da:30:0e:f7:83:ad:90:5a:72:85:71:95:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3C:52:FA:17:D3:1B:19:1F:03:5A:D0:38:4A:7B:95:73:E7:12:A7
            X509v3 Authority Key Identifier:
                keyid:45:0D:24:60:BB:57:9B:57:35:99:E8:3A:5D:A3:01:86:96:A0:F8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450D2460BB579B573599E83A5DA3018696A0F8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/1/450D2460BB579B573599E83A5DA3018696A0F8F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:48:37:16:f6:94:6e:3a:88:62:7c:ae:15:ea:e7:53:ba:
         37:30:e7:ee:d9:f8:48:21:08:0e:87:e1:25:da:a8:61:1d:55:
         23:f0:d8:3d:ca:2b:68:86:54:be:bc:b0:18:0d:83:5f:33:2b:
         1c:97:48:e9:11:4e:61:a4:d9:6f:c6:e8:37:c5:f0:ab:5c:2a:
         9c:87:36:18:08:1e:51:ec:ac:9f:08:8a:1a:9c:d1:91:07:c1:
         57:9e:d9:99:12:07:09:99:c0:be:9b:1e:3e:39:e4:97:9b:ac:
         53:98:72:c3:77:aa:18:89:e9:ae:d3:ef:d6:79:54:ea:49:d2:
         74:7b:4e:c5:a6:c0:a6:4d:80:c9:85:15:de:e1:e4:92:c1:23:
         dc:76:45:36:2f:4e:d7:78:4b:17:33:4e:cd:05:fc:7b:d8:2b:
         05:4c:43:87:0d:80:88:12:77:d2:30:32:4b:ae:f5:b7:ce:da:
         eb:83:f4:7a:88:d2:e7:00:d1:35:51:f6:a6:2c:98:32:9a:1d:
         1f:97:1d:05:e3:32:ad:59:10:c9:41:12:e9:10:e6:27:e9:34:
         aa:81:ad:d1:e0:7e:3c:d7:62:f8:18:43:8b:28:e1:b5:35:44:
         fc:26:bd:aa:28:0a:a2:47:ee:6c:72:ad:f9:c1:a5:52:2c:7d:
         5d:11:07:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS9p6B88qPOI92ga4QdFphWkq2EQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwRDI0NjBCQjU3OUI1NzM1OTlFODNBNURBMzAxODY5
NkEwRjhGNjAeFw0yNjAzMDIxMDI0NDJaFw0yNjAzMDMxMjU0NDJaMDMxMTAvBgNV
BAMTKDYxM0M1MkZBMTdEMzFCMTkxRjAzNUFEMDM4NEE3Qjk1NzNFNzEyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvjY+Z4KYQpcZtckI3Drma6C3
Pr509WjfQxfChrx9eJZw8Hnv3UiTBs6XgR35qwympJTB6RXYGnu6tyfK7bUTcXKX
Z+0owP1ZQX+GPJ8aDjxJ42cn5frFoy3so/ke8u9NrE+U8iqEUgpgYlRMMXEqKQvQ
gKAtGDFxfOumSnYqpxm5kTJPcSGmufKU2Cv65bGL8Q5eWjmphoebTtn6IMrGsoDa
j/KF3VFEFQwj7vo19ROKDIp8Ev/9nfUHsxLSd2acDGAagarlgqZ/7XpED9GHpZCi
KqhXsKMREZODCE5SOyX6bgLJpN1nbDa/6AQNLXseJtowDveDrZBacoVxlZk7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYTxS+hfTGxkfA1rQOEp7lXPnEqcwHwYDVR0j
BBgwFoAURQ0kYLtXm1c1meg6XaMBhpag+PYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGh2TjdnVTdtYnJlbjYxcFVFU1IyTHdTaHZSRWE2ZTU1Mk1uUUFhajJX
WDgvMS80NTBEMjQ2MEJCNTc5QjU3MzU5OUU4M0E1REEzMDE4Njk2QTBGOEY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1MEQyNDYwQkI1NzlCNTcz
NTk5RTgzQTVEQTMwMTg2OTZBMEY4RjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGh2TjdnVTdtYnJlbjYxcFVFU1IyTHdTaHZSRWE2ZTU1Mk1uUUFhajJXWDgvMS80
NTBEMjQ2MEJCNTc5QjU3MzU5OUU4M0E1REEzMDE4Njk2QTBGOEY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeMtINxb2lG46iGJ8rhXq51O6NzDn7tn4SCEIDofhJdqoYR1VI/DYPcoraIZU
vrywGA2DXzMrHJdI6RFOYaTZb8boN8Xwq1wqnIc2GAgeUeysnwiKGpzRkQfBV57Z
mRIHCZnAvpsePjnkl5usU5hyw3eqGInprtPv1nlU6knSdHtOxabApk2AyYUV3uHk
ksEj3HZFNi9O13hLFzNOzQX8e9grBUxDhw2AiBJ30jAyS671t87a64P0eojS5wDR
NVH2piyYMpodH5cdBeMyrVkQyUES6RDmJ+k0qoGt0eB+PNdi+BhDiyjhtTVE/Ca9
qigKokfubHKt+cGlUix9XREH+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:14:44 2026 by rpki-client