Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
File:                     D495C627858363377EC2F78374A56D2330185EC0.mft (raw, json)
Hash identifier:          HZkTFqOrWXt8dt2iddIcQQunDMPdpSw1pgPPTSNj2/I=
Subject key identifier:   82:B5:50:27:90:9E:FA:D3:1A:93:4A:4B:EA:22:B3:9A:B3:63:02:A3
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Certificate issuer:       /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial:       0F5C5C8530E58BECB04C0822F1DA2EB3BFF61E63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
Manifest number:          03AA
Signing time:             Mon 02 Mar 2026 00:26:33 +0000
Manifest this update:     Mon 02 Mar 2026 00:21:33 +0000
Manifest next update:     Tue 03 Mar 2026 03:02:33 +0000
Files and hashes:         1: 34352e3139312e3230342e302f32322d3234203d3e20313938393439.roa (hash: aVT2T0GFqzSSSY8m3DHYS71CPNyLQRqIFGKWtTN5YL8=)
                          2: D495C627858363377EC2F78374A56D2330185EC0.crl (hash: /NKxCBiJf0SlkqCN2T8CKiGd4RtPM+PVo4AcW8vyNpg=)
                          3: 34352e3139312e3230342e302f32322d3234203d3e20323636353339.roa (hash: n8+EzPEd07ZZjhLYy39r8BsJJkB2ownRw141r7thvmE=)
                          4: 34352e3139312e3230342e302f32322d3234203d3e20323639363834.roa (hash: nTBheUAS+6O92vF139sXPvJ0d9O7IX3JwMEO40oT07s=)
                          5: 323830343a363835303a3a2f33322d3438203d3e20323639363834.roa (hash: ejxPBC/Awr6noDtJc9mM2Bd4TxWWMZhSP+M1LTd7MY8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
                          rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:5c:85:30:e5:8b:ec:b0:4c:08:22:f1:da:2e:b3:bf:f6:1e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
        Validity
            Not Before: Mar  2 00:21:33 2026 GMT
            Not After : Mar  3 03:02:33 2026 GMT
        Subject: CN=82B55027909EFAD31A934A4BEA22B39AB36302A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:ba:a3:cc:99:cc:b7:b6:5f:fd:db:42:0c:
                    68:8a:9c:0e:20:47:a2:27:09:6e:a3:94:77:5f:26:
                    6a:63:1c:67:93:3b:6e:eb:6c:2e:0e:06:5f:3e:6f:
                    07:f6:24:30:38:b3:d0:61:da:0c:fe:27:c0:45:7e:
                    1b:4e:23:ee:a4:2e:5e:00:2a:28:b7:a3:59:5a:f8:
                    f2:78:ef:52:42:c6:39:b0:8a:8b:e5:9f:82:35:8a:
                    a5:65:6f:6e:4e:86:c7:10:50:83:66:81:32:f6:93:
                    ba:74:f0:15:ea:cf:f9:6d:32:5e:b0:3d:27:8f:39:
                    60:16:cd:b7:fa:bb:c5:74:2c:b9:9e:c2:3a:82:c5:
                    96:a2:23:c6:90:ff:a5:b5:cc:29:9f:a8:cd:cd:90:
                    a8:04:c3:e2:ee:62:d7:13:08:0b:94:47:4a:5b:19:
                    48:ad:ef:98:7f:37:7d:0e:b7:f5:3c:44:53:45:fa:
                    3f:d3:26:53:f1:72:ce:c0:fd:2c:e7:c7:1e:85:fb:
                    26:66:86:28:f5:34:ee:6b:e2:cb:d8:84:20:1a:6c:
                    3d:4f:0d:1c:2d:e5:5c:ba:c1:2d:e0:f9:93:a2:63:
                    0a:83:0f:b6:63:db:89:58:fb:b0:31:18:11:20:66:
                    4f:86:0b:be:27:27:d2:e9:1f:fd:4c:35:b3:6a:2b:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B5:50:27:90:9E:FA:D3:1A:93:4A:4B:EA:22:B3:9A:B3:63:02:A3
            X509v3 Authority Key Identifier:
                keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:37:b5:af:10:02:db:1b:ce:84:f1:bc:8c:4c:9f:46:26:
         d2:36:f3:09:13:72:49:bd:19:18:64:96:8f:b3:07:eb:c9:53:
         cc:a8:73:99:67:fc:9a:31:cc:6b:a1:4f:ad:28:f0:44:4f:ae:
         69:f8:b8:49:59:14:80:8e:c9:b4:43:66:02:2a:be:f8:23:e7:
         81:4e:f9:b9:aa:92:3d:56:dd:20:87:20:84:7f:fd:cb:08:04:
         ae:7d:62:c7:92:20:dd:35:a5:fa:b1:22:23:cc:ee:be:d7:d8:
         89:5a:e7:5d:df:37:64:75:d3:63:4d:29:58:fc:9b:57:5a:7a:
         05:f3:4a:32:6f:81:cc:07:b7:26:83:fa:2d:cd:aa:a3:ef:37:
         02:9c:d1:66:f1:e5:63:17:95:cc:b9:0f:00:31:86:a9:ac:b2:
         fd:41:80:b2:4f:e8:d0:33:c4:d2:4c:14:83:80:37:70:22:3d:
         86:ec:7b:f8:e6:6e:0c:6e:df:79:4f:80:03:7c:a6:6c:55:10:
         c2:f3:9d:98:6c:86:86:8a:65:8b:05:bb:46:a2:28:82:03:eb:
         2a:a3:1c:cc:d1:a6:6e:42:44:6a:7d:41:de:ef:1b:69:1d:8d:
         1b:bf:3d:7e:1c:88:61:e1:18:fb:da:27:fe:c2:07:d7:e5:1d:
         60:50:5d:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD1xchTDli+ywTAgi8dous7/2HmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ5NUM2Mjc4NTgzNjMzNzdFQzJGNzgzNzRBNTZEMjMz
MDE4NUVDMDAeFw0yNjAzMDIwMDIxMzNaFw0yNjAzMDMwMzAyMzNaMDMxMTAvBgNV
BAMTKDgyQjU1MDI3OTA5RUZBRDMxQTkzNEE0QkVBMjJCMzlBQjM2MzAyQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFabqjzJnMt7Zf/dtCDGiKnA4g
R6InCW6jlHdfJmpjHGeTO27rbC4OBl8+bwf2JDA4s9Bh2gz+J8BFfhtOI+6kLl4A
Kii3o1la+PJ471JCxjmwiovln4I1iqVlb25OhscQUINmgTL2k7p08BXqz/ltMl6w
PSePOWAWzbf6u8V0LLmewjqCxZaiI8aQ/6W1zCmfqM3NkKgEw+LuYtcTCAuUR0pb
GUit75h/N30Ot/U8RFNF+j/TJlPxcs7A/Sznxx6F+yZmhij1NO5r4svYhCAabD1P
DRwt5Vy6wS3g+ZOiYwqDD7Zj24lY+7AxGBEgZk+GC74nJ9LpH/1MNbNqK3CHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUgrVQJ5Ce+tMak0pL6iKzmrNjAqMwHwYDVR0j
BBgwFoAU1JXGJ4WDYzd+wveDdKVtIzAYXsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1hdmZYbzhqZ3Z3c0Z5NTNrNEVMcXhHeVlhQ1hlaHA5SnpuOVFyVDJo
UzgvMS9ENDk1QzYyNzg1ODM2MzM3N0VDMkY3ODM3NEE1NkQyMzMwMTg1RUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0OTVDNjI3ODU4MzYzMzc3
RUMyRjc4Mzc0QTU2RDIzMzAxODVFQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SE1hdmZYbzhqZ3Z3c0Z5NTNrNEVMcXhHeVlhQ1hlaHA5SnpuOVFyVDJoUzgvMS9E
NDk1QzYyNzg1ODM2MzM3N0VDMkY3ODM3NEE1NkQyMzMwMTg1RUMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYaU3ta8QAtsbzoTxvIxMn0Ym0jbzCRNySb0ZGGSWj7MH68lTzKhzmWf8mjHM
a6FPrSjwRE+uafi4SVkUgI7JtENmAiq++CPngU75uaqSPVbdIIcghH/9ywgErn1i
x5Ig3TWl+rEiI8zuvtfYiVrnXd83ZHXTY00pWPybV1p6BfNKMm+BzAe3JoP6Lc2q
o+83ApzRZvHlYxeVzLkPADGGqayy/UGAsk/o0DPE0kwUg4A3cCI9hux7+OZuDG7f
eU+AA3ymbFUQwvOdmGyGhopliwW7RqIoggPrKqMczNGmbkJEan1B3u8baR2NG789
fhyIYeEY+9on/sIH1+UdYFBdfA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:48 2026 by rpki-client