Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
File:                     BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft (raw, json)
Hash identifier:          Fn48AfKmxsHuDTlGM59UrW9tuK1iQDK6JSsNHVPV6ww=
Subject key identifier:   14:4A:A0:F8:23:AA:D9:3F:81:00:17:FF:7A:0E:CC:93:24:4E:FB:CD
Authority key identifier: BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49
Certificate issuer:       /CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
Certificate serial:       38ED52E2A1E98B15A16BA82F6022832A5FE0CB1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
Manifest number:          90
Signing time:             Sat 13 Jun 2026 16:46:56 +0000
Manifest this update:     Sat 13 Jun 2026 16:41:56 +0000
Manifest next update:     Sun 14 Jun 2026 20:01:56 +0000
Files and hashes:         1: 3136372e3234392e3234342e302f32332d3233203d3e20323635313733.roa (hash: 8a9jBsTXNdA+SDrz+TnIOLbY6+NfBu8aR7zHnFK8wlA=)
                          2: 3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (hash: APQeuGOYT6pmdzs0b1zaFGujlKWI5aTsqYse+R+K6Yc=)
                          3: 323830343a326263303a3a2f33352d3335203d3e20323635313733.roa (hash: nwGjS9/B5qEoHLXErGUrcv/IFcutfvHnP6bx4qn7DJo=)
                          4: BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl (hash: uq2i89j11Nhse5RWsisMS8ziBgJ796MvQioaNxRSmiQ=)
                          5: 3136372e3234392e3234342e302f32342d3234203d3e20323635313733.roa (hash: RnnqFnuRTJSTCS6yQgDAL5p9xs898xsCSxUZMmK53N8=)
                          6: 323830343a326263303a3a2f33322d3332203d3e20323635313733.roa (hash: b8Wq1i8o4CPeAF9m65Zly/n5KxESsVSQEUNDFkSN5W0=)
                          7: 3136372e3234392e3234352e302f32342d3234203d3e20323635313733.roa (hash: PnXpoQlILp8ZlGXHCrTJh5VRZ4dRdsX3+HByUad9ME8=)
                          8: 3136372e3234392e3234362e302f32342d3234203d3e20323635313733.roa (hash: j9i7ueyvXacjavPPn9Wc1Dq/7mV86dMVB4jymotr/kk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ed:52:e2:a1:e9:8b:15:a1:6b:a8:2f:60:22:83:2a:5f:e0:cb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849
        Validity
            Not Before: Jun 13 16:41:56 2026 GMT
            Not After : Jun 14 20:01:56 2026 GMT
        Subject: CN=144AA0F823AAD93F810017FF7A0ECC93244EFBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:3b:a2:67:ff:59:d1:5e:ae:bd:6d:70:8d:
                    3e:59:65:50:63:bf:75:93:63:71:b9:e2:6f:ec:3e:
                    91:0a:12:be:06:fd:e1:64:d5:80:53:6f:bf:cd:f4:
                    a3:7f:ba:5d:9e:49:79:0b:62:c8:f1:70:a6:f1:a4:
                    f8:b0:d0:d4:bc:87:bc:7b:d0:a1:5f:4c:12:30:6f:
                    4f:75:3d:34:f6:09:bf:aa:50:51:66:8f:5a:93:e7:
                    06:21:e5:39:9e:3b:72:74:fb:46:b8:0b:c5:34:0f:
                    6f:92:52:bb:d2:d7:fa:51:50:4d:f0:36:4f:a2:58:
                    62:e0:35:09:f3:7b:1e:7e:6a:70:16:0a:a8:f6:e8:
                    a5:33:20:eb:ad:82:57:44:07:dd:16:da:e0:f8:84:
                    d7:46:39:7d:2b:99:37:ff:68:13:10:f3:62:b5:1c:
                    ae:ae:07:cb:41:80:4d:9b:9f:74:d9:63:10:16:44:
                    ae:15:87:b2:cf:ca:47:a6:bf:55:bf:53:e4:07:35:
                    0b:79:1d:f4:11:25:66:6b:c4:5a:59:05:dc:2f:04:
                    7c:2c:62:09:2c:45:ed:60:dd:0e:99:fb:e4:91:a0:
                    57:0c:62:42:75:e8:57:66:e2:ce:96:a4:6c:52:60:
                    a5:3c:34:1e:d4:70:dd:16:a3:47:68:a6:47:25:9f:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4A:A0:F8:23:AA:D9:3F:81:00:17:FF:7A:0E:CC:93:24:4E:FB:CD
            X509v3 Authority Key Identifier:
                keyid:BA:D4:DC:02:B3:E6:1B:B7:35:8C:5D:0C:DD:45:3B:E3:B4:0C:B8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/BAD4DC02B3E61BB7358C5D0CDD453BE3B40CB849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:54:bb:c3:42:41:23:53:1c:61:3a:a9:c3:80:57:0e:be:56:
         bb:8b:50:da:d1:59:6b:ed:80:ad:7f:ac:35:4c:0c:18:b7:7a:
         42:1f:ca:3e:5b:5b:e7:09:27:93:10:2b:ed:95:36:8f:ad:e3:
         3b:92:92:f1:3c:cc:69:40:98:db:59:27:e1:c7:2a:1e:11:1f:
         19:d5:8b:87:65:ee:eb:d0:e2:1f:cd:6b:ee:af:6c:25:ea:57:
         ce:fa:56:22:d7:08:22:3a:4a:15:80:1c:cc:bc:2c:7f:24:0f:
         ea:e3:99:d3:1d:09:7b:0f:fa:9a:b7:84:04:6c:20:52:e9:d9:
         1f:2b:73:78:03:ef:5d:e5:f0:32:3e:76:8a:38:a5:5a:cc:27:
         10:92:8a:ba:7c:4e:21:48:9b:89:64:dd:c6:16:d4:c2:56:da:
         a3:96:4f:47:1d:6e:95:34:ee:bd:49:3a:0d:83:2d:b7:f7:75:
         d0:8b:85:73:98:1a:76:0a:27:74:3c:2e:2a:83:9b:e9:fc:ca:
         c8:bc:94:e0:06:3d:8e:4f:ac:2b:b9:e3:c5:2a:a0:51:3b:bf:
         92:b0:32:87:33:a5:ee:5d:41:f6:73:cb:54:b5:25:c3:5c:7c:
         89:c8:88:cb:e7:dd:d8:60:a0:b6:bd:a0:fd:ba:b6:7b:54:bd:
         21:a2:a4:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOO1S4qHpixWha6gvYCKDKl/gyxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFENERDMDJCM0U2MUJCNzM1OEM1RDBDREQ0NTNCRTNC
NDBDQjg0OTAeFw0yNjA2MTMxNjQxNTZaFw0yNjA2MTQyMDAxNTZaMDMxMTAvBgNV
BAMTKDE0NEFBMEY4MjNBQUQ5M0Y4MTAwMTdGRjdBMEVDQzkzMjQ0RUZCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZTuiZ/9Z0V6uvW1wjT5ZZVBj
v3WTY3G54m/sPpEKEr4G/eFk1YBTb7/N9KN/ul2eSXkLYsjxcKbxpPiw0NS8h7x7
0KFfTBIwb091PTT2Cb+qUFFmj1qT5wYh5TmeO3J0+0a4C8U0D2+SUrvS1/pRUE3w
Nk+iWGLgNQnzex5+anAWCqj26KUzIOutgldEB90W2uD4hNdGOX0rmTf/aBMQ82K1
HK6uB8tBgE2bn3TZYxAWRK4Vh7LPykemv1W/U+QHNQt5HfQRJWZrxFpZBdwvBHws
YgksRe1g3Q6Z++SRoFcMYkJ16Fdm4s6WpGxSYKU8NB7UcN0Wo0dopkcln3txAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFEqg+COq2T+BABf/eg7MkyRO+80wHwYDVR0j
BBgwFoAUutTcArPmG7c1jF0M3UU747QMuEkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1
cUUvMC9CQUQ0REMwMkIzRTYxQkI3MzU4QzVEMENERDQ1M0JFM0I0MENCODQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDREQzAyQjNFNjFCQjcz
NThDNUQwQ0RENDUzQkUzQjQwQ0I4NDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1cUUvMC9C
QUQ0REMwMkIzRTYxQkI3MzU4QzVEMENERDQ1M0JFM0I0MENCODQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHVS7w0JBI1McYTqpw4BXDr5Wu4tQ2tFZa+2ArX+sNUwMGLd6Qh/KPltb5wkn
kxAr7ZU2j63jO5KS8TzMaUCY21kn4ccqHhEfGdWLh2Xu69DiH81r7q9sJepXzvpW
ItcIIjpKFYAczLwsfyQP6uOZ0x0Jew/6mreEBGwgUunZHytzeAPvXeXwMj52ijil
WswnEJKKunxOIUibiWTdxhbUwlbao5ZPRx1ulTTuvUk6DYMtt/d10IuFc5gadgon
dDwuKoOb6fzKyLyU4AY9jk+sK7njxSqgUTu/krAyhzOl7l1B9nPLVLUlw1x8iciI
y+fd2GCgtr2g/bq2e1S9IaKk7g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:28:49 2026 by rpki-client