Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.mft
File:                     4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.mft (raw, json)
Hash identifier:          nhueECWPFE0lJFK9kYcOmWtJ3Bisv85bJy81F04s918=
Subject key identifier:   6A:58:5E:17:14:C2:73:FC:77:0A:5B:2B:CC:0F:BB:52:43:B4:69:2C
Authority key identifier: 4A:5A:F6:B6:D5:DD:49:02:5A:24:F4:0F:BF:8E:AD:7A:5E:FE:0F:07
Certificate issuer:       /CN=4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07
Certificate serial:       7D25CC5176CAE9AD25AC93D2F02EA26E5ABD3A5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.mft
Manifest number:          1F
Signing time:             Mon 02 Mar 2026 02:19:41 +0000
Manifest this update:     Mon 02 Mar 2026 02:14:41 +0000
Manifest next update:     Tue 03 Mar 2026 04:21:41 +0000
Files and hashes:         1: 34352e3233302e3233362e302f32342d3234203d3e20323637313736.roa (hash: y/Vd4Ah5oWW87bChMmzOhRhSWMGYeXOhVWS4clXM5os=)
                          2: 34352e3233302e3233382e302f32342d3234203d3e20323637313736.roa (hash: OZOaSsnZ1GBkZ7JagaU17vG0iTFugpuU0jXt3lg8530=)
                          3: 323830343a343934633a3a2f33322d3332203d3e20323637313736.roa (hash: oxeNcmGyVv1/DlV4wIEL/GneFt9diEkRC4vEUwRnHYc=)
                          4: 4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.crl (hash: O6eMwh0yw+Lsly2dwhuBSh3g2zDkgFBdLeoPqpTElZg=)
                          5: 34352e3233302e3233392e302f32342d3234203d3e20323637313736.roa (hash: MUh2zPng5d5P/Gb5uuDkfKseBRNwnMlWxdjAouWRaMA=)
                          6: 34352e3233302e3233362e302f32322d3232203d3e20323637313736.roa (hash: CBQRsFpNgpDgBkwCr8Hq8TfzprL8BhqVEG2MxCJFUeQ=)
                          7: 34352e3233302e3233372e302f32342d3234203d3e20323637313736.roa (hash: Sqjw16vLHwGwXf1btkLv6bYBDWKjNsDWYZ+INIiz06E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.crl
                          rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:25:cc:51:76:ca:e9:ad:25:ac:93:d2:f0:2e:a2:6e:5a:bd:3a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07
        Validity
            Not Before: Mar  2 02:14:41 2026 GMT
            Not After : Mar  3 04:21:41 2026 GMT
        Subject: CN=6A585E1714C273FC770A5B2BCC0FBB5243B4692C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:eb:b9:ec:11:ad:8b:b8:55:8a:b5:dd:79:
                    98:bf:61:4a:5d:ee:50:bf:ed:40:09:3a:cb:a5:f7:
                    28:8e:bb:a4:29:06:5b:e4:fb:a8:c0:1c:19:1a:de:
                    15:b8:bf:66:8e:56:70:d5:6f:71:ee:33:1b:6c:4e:
                    55:1f:4c:f1:0a:9b:07:16:26:4a:89:65:bb:16:ee:
                    c6:68:98:9b:d8:a6:bd:4c:95:fd:23:95:88:50:14:
                    3a:05:0a:7f:08:a7:24:70:6d:ea:30:47:28:d3:6a:
                    0c:06:0a:98:b9:13:3f:eb:15:b3:95:65:64:ff:44:
                    5c:b5:a5:b0:80:5a:16:19:3a:f6:5d:8c:ef:7a:ad:
                    ca:fc:f1:8e:b2:f2:7e:35:cc:d0:3a:b9:98:7b:d2:
                    a2:d6:34:71:68:01:1b:e1:05:29:94:ad:76:7e:76:
                    dc:0c:47:c6:c3:86:d0:4e:b0:84:2d:89:11:c4:46:
                    94:af:02:64:e9:1f:3f:79:ff:b4:c6:aa:16:15:11:
                    b7:86:04:bd:29:49:6f:06:0e:f6:d1:89:3f:d3:e9:
                    4b:99:8a:08:09:61:de:0c:d3:78:6d:09:68:6a:1f:
                    14:91:7a:13:04:a3:d4:5b:36:c5:a1:ff:3d:f6:30:
                    09:d8:77:7d:c4:34:99:ae:1f:ca:a1:aa:df:62:4c:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:5E:17:14:C2:73:FC:77:0A:5B:2B:CC:0F:BB:52:43:B4:69:2C
            X509v3 Authority Key Identifier:
                keyid:4A:5A:F6:B6:D5:DD:49:02:5A:24:F4:0F:BF:8E:AD:7A:5E:FE:0F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Di6qh2pnxgfM5QeVxT9szpQBY6zVa3PUSmD34cqvANiD/0/4A5AF6B6D5DD49025A24F40FBF8EAD7A5EFE0F07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:08:fa:42:f7:be:2c:5b:33:7d:b6:88:a8:aa:33:26:53:8e:
         cc:ca:15:01:6d:16:ed:d4:19:31:55:df:3e:4c:d6:37:28:24:
         40:c0:ee:2c:95:ab:21:9f:ce:be:e3:a3:8a:3c:94:b7:ed:c6:
         d7:ff:a2:0e:5c:11:30:f7:a6:0e:5b:6c:ae:31:47:e7:46:6f:
         6b:c2:71:0b:3f:9a:cf:f3:6c:96:91:1d:cb:f3:05:68:9f:55:
         ad:11:74:fc:42:bc:a6:c7:88:1a:a8:c9:c7:66:38:1e:c9:1e:
         73:f1:54:b6:12:52:c7:2a:48:6e:2a:ea:d3:50:57:a2:db:20:
         16:20:a6:fd:77:13:0e:bb:f4:ee:cf:51:1f:be:c6:b9:94:83:
         8d:92:6c:41:8a:f6:ea:f2:08:39:72:eb:dc:7d:c8:d3:f0:93:
         47:7f:11:8d:10:87:6f:e6:90:47:dc:63:72:74:27:42:a3:d3:
         16:48:98:4f:24:3f:0f:37:44:98:ab:b7:e0:9e:45:4f:75:4e:
         d9:bb:bd:13:09:bb:2e:83:2c:69:99:e9:47:d2:e1:a7:a2:22:
         d4:a6:ef:63:b3:14:8c:a8:c6:f5:a3:c5:34:54:46:0e:81:10:
         59:ee:ba:d9:8f:6e:7c:ee:6e:60:ae:f9:8d:63:fb:16:f9:8f:
         17:fc:20:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfSXMUXbK6a0lrJPS8C6iblq9Ol8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE1QUY2QjZENURENDkwMjVBMjRGNDBGQkY4RUFEN0E1
RUZFMEYwNzAeFw0yNjAzMDIwMjE0NDFaFw0yNjAzMDMwNDIxNDFaMDMxMTAvBgNV
BAMTKDZBNTg1RTE3MTRDMjczRkM3NzBBNUIyQkNDMEZCQjUyNDNCNDY5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94+u57BGti7hVirXdeZi/YUpd
7lC/7UAJOsul9yiOu6QpBlvk+6jAHBka3hW4v2aOVnDVb3HuMxtsTlUfTPEKmwcW
JkqJZbsW7sZomJvYpr1Mlf0jlYhQFDoFCn8IpyRwbeowRyjTagwGCpi5Ez/rFbOV
ZWT/RFy1pbCAWhYZOvZdjO96rcr88Y6y8n41zNA6uZh70qLWNHFoARvhBSmUrXZ+
dtwMR8bDhtBOsIQtiRHERpSvAmTpHz95/7TGqhYVEbeGBL0pSW8GDvbRiT/T6UuZ
iggJYd4M03htCWhqHxSRehMEo9RbNsWh/z32MAnYd33ENJmuH8qhqt9iTNEnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUalheFxTCc/x3ClsrzA+7UkO0aSwwHwYDVR0j
BBgwFoAUSlr2ttXdSQJaJPQPv46tel7+DwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGk2cWgycG54Z2ZNNVFlVnhUOXN6cFFCWTZ6VmEzUFVTbUQzNGNxdkFO
aUQvMC80QTVBRjZCNkQ1REQ0OTAyNUEyNEY0MEZCRjhFQUQ3QTVFRkUwRjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNUFGNkI2RDVERDQ5MDI1
QTI0RjQwRkJGOEVBRDdBNUVGRTBGMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGk2cWgycG54Z2ZNNVFlVnhUOXN6cFFCWTZ6VmEzUFVTbUQzNGNxdkFOaUQvMC80
QTVBRjZCNkQ1REQ0OTAyNUEyNEY0MEZCRjhFQUQ3QTVFRkUwRjA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWAj6Qve+LFszfbaIqKozJlOOzMoVAW0W7dQZMVXfPkzWNygkQMDuLJWrIZ/O
vuOjijyUt+3G1/+iDlwRMPemDltsrjFH50Zva8JxCz+az/NslpEdy/MFaJ9VrRF0
/EK8pseIGqjJx2Y4Hskec/FUthJSxypIbirq01BXotsgFiCm/XcTDrv07s9RH77G
uZSDjZJsQYr26vIIOXLr3H3I0/CTR38RjRCHb+aQR9xjcnQnQqPTFkiYTyQ/DzdE
mKu34J5FT3VO2bu9Ewm7LoMsaZnpR9Lhp6Ii1KbvY7MUjKjG9aPFNFRGDoEQWe66
2Y9ufO5uYK75jWP7FvmPF/wgEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:23:24 2026 by rpki-client