Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          vmNeDlVDatkX9fv9qce8gGk36ltCrzsWx+rEfT4Nt6Q=
Subject key identifier:   33:15:78:93:E2:06:4B:AA:0F:D6:4A:C2:46:7F:46:0B:CA:36:63:58
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       5C3F42A9617A77507ECE20F5DD32A26EE835795E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          0426
Signing time:             Sat 13 Jun 2026 18:00:03 +0000
Manifest this update:     Sat 13 Jun 2026 17:55:03 +0000
Manifest next update:     Sun 14 Jun 2026 18:06:03 +0000
Files and hashes:         1: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
                          2: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
                          3: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
                          4: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: MMiiqL5hHMsuuz/XNTlZwos9SDGXF+3YgasfEU3DyLY=)
                          5: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
                          6: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
                          7: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
                          8: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3f:42:a9:61:7a:77:50:7e:ce:20:f5:dd:32:a2:6e:e8:35:79:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Jun 13 17:55:03 2026 GMT
            Not After : Jun 14 18:06:03 2026 GMT
        Subject: CN=33157893E2064BAA0FD64AC2467F460BCA366358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:b1:12:a2:d6:72:21:fc:05:8a:4b:1c:f2:
                    a4:d2:ba:90:87:41:ca:4c:04:40:35:78:4c:1c:36:
                    a0:05:63:49:54:80:39:63:7c:8e:b2:15:fd:ea:fc:
                    0d:ea:1c:ae:07:d2:61:69:2e:e9:64:7f:73:ab:e3:
                    ad:21:20:ba:46:b2:15:96:89:47:bb:50:e5:24:87:
                    59:84:32:49:9d:d4:06:0c:81:b1:e1:7f:b2:27:d7:
                    fc:d5:d8:c7:63:15:61:27:91:75:bb:b3:d2:37:55:
                    9c:88:ee:fa:81:f6:a7:6d:d0:bb:73:49:fd:5d:55:
                    01:d5:42:73:17:bc:69:07:03:43:68:43:1e:94:5f:
                    bb:82:6e:c6:27:a9:c1:cf:af:49:c8:4d:7c:e7:d7:
                    88:37:ba:cd:29:61:a5:28:fa:6f:b1:03:c4:de:68:
                    d4:94:86:b5:d8:ca:11:56:d8:3b:c7:a6:10:69:3e:
                    11:1b:be:e1:93:1d:af:7f:11:cf:63:22:1e:4e:56:
                    5e:31:6f:01:a4:93:f7:70:e4:dc:db:da:db:72:5a:
                    f8:39:c1:84:d6:80:54:55:67:15:30:23:cc:12:d8:
                    95:5e:d1:23:f2:41:74:3e:45:38:b0:ee:d7:06:69:
                    b5:48:7b:9a:0c:e5:69:7d:96:de:a1:2b:e5:cc:5e:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:15:78:93:E2:06:4B:AA:0F:D6:4A:C2:46:7F:46:0B:CA:36:63:58
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:99:cb:b0:cf:5f:43:19:4c:9e:90:5e:a6:b6:51:97:bd:48:
         07:22:28:8d:7c:38:4a:d1:77:c5:1a:1f:95:1b:ce:53:fb:9f:
         48:56:dc:07:ee:0f:00:82:5b:e2:d3:88:cd:44:fc:d7:a0:28:
         b7:ec:1d:fb:db:f3:59:a1:d0:3c:35:a3:00:68:27:46:96:77:
         33:57:98:de:bf:2b:d6:e8:94:0f:03:d6:53:7b:d2:51:45:55:
         87:80:de:b4:28:b8:eb:0c:b3:7b:02:e6:5d:42:35:9f:fd:dd:
         24:ce:3a:f3:be:65:67:57:67:86:b8:ef:52:4b:ac:9b:98:03:
         3d:61:6b:de:8d:86:a0:fb:64:12:80:18:9b:5a:17:af:f0:94:
         73:d4:f3:60:a6:42:98:da:73:4b:35:0c:76:8d:e0:53:af:f3:
         88:56:20:59:e0:93:2f:c5:17:91:cf:17:9d:7a:cf:31:37:1c:
         0e:ce:c7:ce:3b:fb:fc:1d:51:d0:e2:55:01:73:2c:24:16:f6:
         a3:71:96:1f:20:ac:5a:74:7f:58:7e:8e:62:04:5e:86:a1:74:
         0b:e9:4e:00:fd:01:c3:6e:6d:81:30:58:c1:4e:8b:e1:78:0d:
         f5:b0:16:27:2e:a5:4a:29:56:81:32:6c:2d:94:2a:fc:81:c1:
         77:1b:30:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXD9CqWF6d1B+ziD13TKibug1eV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx
QTJGRjRFRjAeFw0yNjA2MTMxNzU1MDNaFw0yNjA2MTQxODA2MDNaMDMxMTAvBgNV
BAMTKDMzMTU3ODkzRTIwNjRCQUEwRkQ2NEFDMjQ2N0Y0NjBCQ0EzNjYzNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQrESotZyIfwFiksc8qTSupCH
QcpMBEA1eEwcNqAFY0lUgDljfI6yFf3q/A3qHK4H0mFpLulkf3Or460hILpGshWW
iUe7UOUkh1mEMkmd1AYMgbHhf7In1/zV2MdjFWEnkXW7s9I3VZyI7vqB9qdt0Ltz
Sf1dVQHVQnMXvGkHA0NoQx6UX7uCbsYnqcHPr0nITXzn14g3us0pYaUo+m+xA8Te
aNSUhrXYyhFW2DvHphBpPhEbvuGTHa9/Ec9jIh5OVl4xbwGkk/dw5Nzb2ttyWvg5
wYTWgFRVZxUwI8wS2JVe0SPyQXQ+RTiw7tcGabVIe5oM5Wl9lt6hK+XMXrJ5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMxV4k+IGS6oP1krCRn9GC8o2Y1gwHwYDVR0j
BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy
a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG
QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E
RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUJnLsM9fQxlMnpBeprZRl71IByIojXw4StF3xRoflRvOU/ufSFbcB+4PAIJb
4tOIzUT816Aot+wd+9vzWaHQPDWjAGgnRpZ3M1eY3r8r1uiUDwPWU3vSUUVVh4De
tCi46wyzewLmXUI1n/3dJM46875lZ1dnhrjvUkusm5gDPWFr3o2GoPtkEoAYm1oX
r/CUc9TzYKZCmNpzSzUMdo3gU6/ziFYgWeCTL8UXkc8XnXrPMTccDs7Hzjv7/B1R
0OJVAXMsJBb2o3GWHyCsWnR/WH6OYgRehqF0C+lOAP0Bw25tgTBYwU6L4XgN9bAW
Jy6lSilWgTJsLZQq/IHBdxswBg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:44 2026 by rpki-client