Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
File:                     573658E4241F21CAB22CB9FC150BF6FB898271EA.mft (raw, json)
Hash identifier:          qShXXtUo3s2BAiq3SJExrnf8jWdKG7QyC4w60XJ7FKQ=
Subject key identifier:   08:D9:88:54:13:7B:CB:BE:40:52:A3:BC:34:D9:D8:46:36:DE:11:59
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       11F0F34C987C43287F4E8C6D2790B08C2475DDA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
Manifest number:          0258
Signing time:             Mon 02 Mar 2026 11:17:37 +0000
Manifest this update:     Mon 02 Mar 2026 11:12:37 +0000
Manifest next update:     Tue 03 Mar 2026 13:43:37 +0000
Files and hashes:         1: 3133312e302e3139342e302f32332d3233203d3e203631373139.roa (hash: xdViVKMxPhfsKQ4gYhMDyQnJ0PkhdTyC0d9OW5EGJ2s=)
                          2: 3133312e302e3139352e302f32342d3234203d3e203631373139.roa (hash: hc6y61YjMWtSpsBZdnNHYdSCJM03eQWH5Lb9v/vUI+o=)
                          3: 3133312e302e3139332e302f32342d3234203d3e203631373139.roa (hash: 7rWSUSc2rl/nhNBle24TV3aLulYR2xvkmS85DjS0Cs8=)
                          4: 573658E4241F21CAB22CB9FC150BF6FB898271EA.crl (hash: xReADQqEbAj0W4F+CfOjbYIhl4mPltnZIrvSOwysMYI=)
                          5: 3133312e302e3139322e302f32332d3233203d3e203631373139.roa (hash: vG3ot6XwVMX9beiWJuzDu1mFYzOPs2vj6m8E7hD4MWk=)
                          6: 3133312e302e3139322e302f32342d3234203d3e203631373139.roa (hash: 8qfBdtsJyYSTjqrWCaiNUk+FHci/CT1AR4vRn+TOLsA=)
                          7: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (hash: Ycq4mEat3XWjb6Q+A1UxR8cO6DRraHovU7WhwmRl7o4=)
                          8: 3133312e302e3139342e302f32342d3234203d3e203631373139.roa (hash: 1w6AqyeLc7mY5JDexYoHByQ3nVFlmwPx5yO2U0wllDo=)
                          9: 323830343a316235303a3a2f33322d3332203d3e203631373139.roa (hash: JCGKNh2zielIIrf9ulKaYtvN2tVdCIgLSaBh9sptFYw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f0:f3:4c:98:7c:43:28:7f:4e:8c:6d:27:90:b0:8c:24:75:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Mar  2 11:12:37 2026 GMT
            Not After : Mar  3 13:43:37 2026 GMT
        Subject: CN=08D98854137BCBBE4052A3BC34D9D84636DE1159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:3a:8e:b6:a7:cc:1e:67:19:15:00:61:93:
                    d1:96:be:82:3d:80:c5:8d:a8:2d:32:2f:77:0d:25:
                    a2:12:f2:36:f1:04:31:f0:91:c6:21:0d:eb:d2:e0:
                    9f:4e:f7:3a:89:2b:84:fa:95:d3:8e:ed:41:25:99:
                    21:2d:48:a7:ab:2d:12:c2:c6:72:b4:e7:9c:7c:0e:
                    0c:48:26:34:a6:df:4f:bd:29:ef:5c:9e:fe:3b:c2:
                    97:04:9c:51:03:64:fc:40:88:00:ed:69:87:a8:1b:
                    b1:fb:37:ae:b7:8b:21:69:1b:5c:0e:83:c2:be:9d:
                    fe:c7:29:24:18:b1:45:9e:76:a7:04:2a:f4:ea:63:
                    fe:9e:77:b1:29:3d:9f:2b:55:dd:31:1c:38:16:d9:
                    1a:2a:f5:73:82:df:c4:0d:a0:18:25:6a:09:5b:32:
                    0c:cd:05:90:3f:13:64:55:82:10:08:45:29:d9:ce:
                    56:9b:ea:35:e9:6f:b1:2a:1a:cb:0c:b0:7d:9f:82:
                    ac:36:59:b3:44:85:e8:ec:c3:e5:be:8f:19:fa:77:
                    a6:5f:d6:b8:86:c9:4e:00:38:3d:79:0a:92:92:9e:
                    9f:d6:d9:62:c2:12:d5:70:7d:91:97:a3:67:d0:ea:
                    3b:3b:ec:fb:7e:09:6c:ef:5a:99:82:84:dd:e5:bb:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D9:88:54:13:7B:CB:BE:40:52:A3:BC:34:D9:D8:46:36:DE:11:59
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:7e:29:d2:62:43:21:6a:b6:44:85:21:e2:da:30:3f:a4:
         bc:d8:89:2b:65:0c:3d:c7:fe:d5:90:d5:5e:04:a4:e4:e4:0a:
         ef:0d:69:c1:ad:cf:3c:a2:84:60:b9:bd:9d:a2:77:5d:5e:a4:
         9a:0e:51:84:1a:01:05:29:69:5c:52:b4:fb:21:09:cd:c6:46:
         ab:c8:9d:26:4b:dd:b2:86:ab:40:9f:c4:be:d0:d5:cd:26:d6:
         72:e5:53:7f:b4:71:c8:66:af:d8:d2:b1:68:5c:44:43:bb:3a:
         2f:cc:fb:45:0a:6a:11:31:6e:8c:ab:4c:a8:8c:5a:6d:31:f1:
         fd:94:80:66:36:12:05:3b:18:6c:bd:d2:71:ab:69:71:7c:68:
         3e:7c:4d:5b:b7:6c:29:f2:91:11:bd:78:de:23:bd:0c:d2:bd:
         ed:35:fd:5b:6d:e3:f4:21:68:76:c4:39:43:3a:da:40:49:fd:
         3c:9d:70:75:d5:08:06:f8:1f:b7:75:93:05:90:9b:9b:30:f2:
         95:e8:fc:07:bf:be:7f:41:0d:ec:63:9f:d8:8e:71:cb:fb:2b:
         1a:c5:50:1e:a9:4f:64:b0:39:2d:20:10:d4:26:ca:b3:d9:b0:
         6e:36:5e:83:b9:40:da:4a:27:2e:3e:cb:cf:6b:8c:ff:89:6b:
         07:28:f5:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEfDzTJh8Qyh/ToxtJ5CwjCR13aAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTczNjU4RTQyNDFGMjFDQUIyMkNCOUZDMTUwQkY2RkI4
OTgyNzFFQTAeFw0yNjAzMDIxMTEyMzdaFw0yNjAzMDMxMzQzMzdaMDMxMTAvBgNV
BAMTKDA4RDk4ODU0MTM3QkNCQkU0MDUyQTNCQzM0RDlEODQ2MzZERTExNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ujqOtqfMHmcZFQBhk9GWvoI9
gMWNqC0yL3cNJaIS8jbxBDHwkcYhDevS4J9O9zqJK4T6ldOO7UElmSEtSKerLRLC
xnK055x8DgxIJjSm30+9Ke9cnv47wpcEnFEDZPxAiADtaYeoG7H7N663iyFpG1wO
g8K+nf7HKSQYsUWedqcEKvTqY/6ed7EpPZ8rVd0xHDgW2Roq9XOC38QNoBglaglb
MgzNBZA/E2RVghAIRSnZzlab6jXpb7EqGssMsH2fgqw2WbNEhejsw+W+jxn6d6Zf
1riGyU4AOD15CpKSnp/W2WLCEtVwfZGXo2fQ6js77Pt+CWzvWpmChN3lu7jlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCNmIVBN7y75AUqO8NNnYRjbeEVkwHwYDVR0j
BBgwFoAUVzZY5CQfIcqyLLn8FQv2+4mCceowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK
M1MvMC81NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MzY1OEU0MjQxRjIxQ0FC
MjJDQjlGQzE1MEJGNkZCODk4MjcxRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhKM1MvMC81
NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOdd+KdJiQyFqtkSFIeLaMD+kvNiJK2UMPcf+1ZDVXgSk5OQK7w1pwa3PPKKE
YLm9naJ3XV6kmg5RhBoBBSlpXFK0+yEJzcZGq8idJkvdsoarQJ/EvtDVzSbWcuVT
f7RxyGav2NKxaFxEQ7s6L8z7RQpqETFujKtMqIxabTHx/ZSAZjYSBTsYbL3Scatp
cXxoPnxNW7dsKfKREb143iO9DNK97TX9W23j9CFodsQ5QzraQEn9PJ1wddUIBvgf
t3WTBZCbmzDylej8B7++f0EN7GOf2I5xy/srGsVQHqlPZLA5LSAQ1CbKs9mwbjZe
g7lA2konLj7Lz2uM/4lrByj1Sw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:40:58 2026 by rpki-client