Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
File:                     D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft (raw, json)
Hash identifier:          qhmwC2kr2HsAyEUzIELQ5k2o3A7cAJQOLZfmOVZ0AB4=
Subject key identifier:   BA:0D:23:46:AA:06:45:9A:1D:15:70:92:D0:51:40:72:93:6A:A8:EE
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       4968BB1CE58B4783C732C37E94194A49F6E7A930
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
Manifest number:          0428
Signing time:             Sat 13 Jun 2026 15:12:44 +0000
Manifest this update:     Sat 13 Jun 2026 15:07:44 +0000
Manifest next update:     Sun 14 Jun 2026 18:36:44 +0000
Files and hashes:         1: 3137372e3132342e32332e302f32342d3234203d3e203532363132.roa (hash: w43pkjnYvMvmIbr/nyq8OQaqp2nDN+cVaHxhqXqDsJs=)
                          2: 3137372e3132342e32312e302f32342d3234203d3e203532363132.roa (hash: F/4VTcXss7r6+TdHeLP0uA/1NCDPHQ8r1dYEtVwvRkY=)
                          3: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl (hash: vEFU5WBwX0rb8ShAcRiCSh7a+oH0gG8qh+sylMMUHR0=)
                          4: 3137372e3132342e32322e302f32342d3234203d3e203532363132.roa (hash: 4eGhAcMyoOCW5cPszWmOnK7sgAdXE08gXTM04Onferg=)
                          5: 323830343a323266633a3a2f33322d313238203d3e203532363132.roa (hash: Abzz5MjZDNjsOKylknymm1lROFeNR+fLAyXVbvfnd1k=)
                          6: 3137372e3132342e32302e302f32342d3234203d3e203532363132.roa (hash: RvVxfamq3PwVWZdQ2ITHCi913xvfuR72c78ZJH+Vzms=)
                          7: 3137372e3132342e32302e302f32322d3232203d3e203532363132.roa (hash: QWvPYJX33/vG3Ew1G2aazis+WR3+kPkUPLCnZNX3LXo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:68:bb:1c:e5:8b:47:83:c7:32:c3:7e:94:19:4a:49:f6:e7:a9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Jun 13 15:07:44 2026 GMT
            Not After : Jun 14 18:36:44 2026 GMT
        Subject: CN=BA0D2346AA06459A1D157092D0514072936AA8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:a1:20:21:0a:71:22:fb:71:52:60:6e:f0:
                    e1:f8:28:d6:6e:1c:e0:94:29:52:3d:b9:11:db:4d:
                    c5:10:89:06:7b:d6:0f:62:a0:a7:9f:52:5a:f9:d5:
                    33:dd:7d:30:3d:02:87:ca:1a:eb:cd:38:dc:5b:bd:
                    11:64:f5:84:4d:bb:07:7b:ee:a1:c6:06:2a:24:97:
                    75:40:e7:01:85:c4:89:86:5c:5f:13:aa:f2:98:39:
                    d8:60:4a:b3:21:01:30:24:90:ab:12:ac:13:85:af:
                    55:a6:9c:d2:c5:e5:ef:bb:c9:e2:3d:15:78:40:46:
                    0d:ac:00:cd:1b:d5:71:4d:b5:f2:7b:da:60:45:d4:
                    d2:5c:f4:fd:d6:fb:a9:56:f2:a9:77:0c:b7:e8:fc:
                    9e:51:6e:59:f2:1c:0c:d3:86:30:90:86:a3:9a:15:
                    da:3e:15:52:e7:7d:29:1b:e7:f3:86:de:1b:72:a2:
                    70:61:bc:ea:da:09:92:93:bd:7e:38:43:81:7d:4e:
                    91:e6:8f:2b:c5:4d:b8:0e:8d:10:ee:aa:9c:d9:53:
                    69:8f:09:da:fe:88:19:40:4e:84:dd:28:90:c6:37:
                    1d:b2:90:e4:aa:8a:14:4f:01:94:ab:24:a2:ae:ae:
                    b8:64:41:f7:a9:22:24:d5:ff:a7:02:fd:26:43:ec:
                    88:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:23:46:AA:06:45:9A:1D:15:70:92:D0:51:40:72:93:6A:A8:EE
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:8e:50:6a:9e:b0:a9:b3:1e:4b:bb:e4:91:d1:2d:1b:b5:
         f9:56:b5:2f:ce:da:91:12:6c:bf:f5:32:a7:75:c6:0b:92:20:
         24:74:1f:44:c4:55:ba:ef:0b:e4:7c:cd:3b:65:9f:81:15:c6:
         07:57:cc:81:f4:08:2d:4a:68:d3:a9:8e:57:78:0c:1e:dd:0f:
         29:a8:37:f2:6b:fb:bd:25:49:3a:21:ed:2b:26:b5:07:22:37:
         ac:0a:db:4d:c6:13:dc:30:65:23:39:8f:69:53:b5:98:98:9f:
         27:32:50:f4:59:ea:5f:dc:a0:b3:81:fd:f4:d9:19:cf:74:12:
         e0:df:e5:da:7b:e4:5e:7c:e7:f6:cc:2f:55:9d:a6:95:74:72:
         6e:82:6f:ec:79:ca:80:5b:40:bd:16:d1:1f:56:8b:51:23:71:
         16:31:0e:e6:10:ad:63:d9:bc:f1:27:9d:30:80:0d:95:bf:74:
         6f:8c:4e:21:ad:73:2b:d0:fd:43:58:4d:d1:c9:5b:0e:19:4a:
         72:3e:f8:4c:0b:2a:10:a7:8c:80:e4:47:25:8f:2f:2f:b8:6a:
         ae:12:3b:3a:e6:e6:10:67:2d:c8:d2:64:16:cf:80:6c:0c:56:
         05:65:bd:fa:f0:0c:3d:45:61:ce:eb:f2:e7:f1:ed:0d:68:69:
         ce:e6:77:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSWi7HOWLR4PHMsN+lBlKSfbnqTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzMzlDODZERTBDNjVGNDI5OUUwQjkyNUVERDg4RUFC
ODg2RjcyRDAeFw0yNjA2MTMxNTA3NDRaFw0yNjA2MTQxODM2NDRaMDMxMTAvBgNV
BAMTKEJBMEQyMzQ2QUEwNjQ1OUExRDE1NzA5MkQwNTE0MDcyOTM2QUE4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnqEgIQpxIvtxUmBu8OH4KNZu
HOCUKVI9uRHbTcUQiQZ71g9ioKefUlr51TPdfTA9AofKGuvNONxbvRFk9YRNuwd7
7qHGBiokl3VA5wGFxImGXF8TqvKYOdhgSrMhATAkkKsSrBOFr1WmnNLF5e+7yeI9
FXhARg2sAM0b1XFNtfJ72mBF1NJc9P3W+6lW8ql3DLfo/J5RblnyHAzThjCQhqOa
Fdo+FVLnfSkb5/OG3htyonBhvOraCZKTvX44Q4F9TpHmjyvFTbgOjRDuqpzZU2mP
Cdr+iBlAToTdKJDGNx2ykOSqihRPAZSrJKKurrhkQfepIiTV/6cC/SZD7IhtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUug0jRqoGRZodFXCS0FFAcpNqqO4wHwYDVR0j
BBgwFoAU1jOcht4MZfQpnguSXt2I6riG9y0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFF5cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZv
RWUvMC9ENjMzOUM4NkRFMEM2NUY0Mjk5RTBCOTI1RUREODhFQUI4ODZGNzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzM5Qzg2REUwQzY1RjQy
OTlFMEI5MjVFREQ4OEVBQjg4NkY3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFF5cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZvRWUvMC9E
NjMzOUM4NkRFMEM2NUY0Mjk5RTBCOTI1RUREODhFQUI4ODZGNzJELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmC2OUGqesKmzHku75JHRLRu1+Va1L87akRJsv/Uyp3XGC5IgJHQfRMRVuu8L
5HzNO2WfgRXGB1fMgfQILUpo06mOV3gMHt0PKag38mv7vSVJOiHtKya1ByI3rArb
TcYT3DBlIzmPaVO1mJifJzJQ9FnqX9ygs4H99NkZz3QS4N/l2nvkXnzn9swvVZ2m
lXRyboJv7HnKgFtAvRbRH1aLUSNxFjEO5hCtY9m88SedMIANlb90b4xOIa1zK9D9
Q1hN0clbDhlKcj74TAsqEKeMgORHJY8vL7hqrhI7OubmEGctyNJkFs+AbAxWBWW9
+vAMPUVhzuvy5/HtDWhpzuZ3cw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:41:53 2026 by rpki-client