Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
File:                     C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json)
Hash identifier:          LjCE08yBD5wTAIeUSvPmuzR9LkeUxBX4pkJul7z578Q=
Subject key identifier:   A6:15:77:A9:66:55:DE:DF:DE:64:B7:16:4C:E9:88:33:0F:C0:65:B4
Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC
Certificate issuer:       /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
Certificate serial:       42F7E2F39E9197CDFF9F70B98B5805E587D10074
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
Manifest number:          FB
Signing time:             Mon 02 Mar 2026 09:07:50 +0000
Manifest this update:     Mon 02 Mar 2026 09:02:50 +0000
Manifest next update:     Tue 03 Mar 2026 11:02:50 +0000
Files and hashes:         1: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=)
                          2: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=)
                          3: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: 0MXvR/+8iytRPKO0/rVtvYY4mjE0CT10SoIrdKyg97E=)
                          4: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl
                          rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f7:e2:f3:9e:91:97:cd:ff:9f:70:b9:8b:58:05:e5:87:d1:00:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC
        Validity
            Not Before: Mar  2 09:02:50 2026 GMT
            Not After : Mar  3 11:02:50 2026 GMT
        Subject: CN=A61577A96655DEDFDE64B7164CE988330FC065B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:44:57:89:78:57:22:2e:64:f8:55:c1:a7:
                    8e:93:30:37:7d:25:5d:cd:b2:e5:75:e6:da:12:3c:
                    1f:80:0e:3e:2e:a2:b4:1c:ad:9e:7b:8b:ce:bf:5c:
                    7e:79:b1:de:9a:09:2f:79:d1:48:a9:75:10:2d:e0:
                    c6:2d:3b:f9:34:be:47:ea:e5:16:3b:6f:49:3d:08:
                    a4:9d:bb:b7:e3:0c:03:85:29:af:db:9e:42:de:44:
                    37:76:99:23:63:50:4f:7c:03:e7:2f:2f:57:cd:88:
                    01:f8:88:65:a2:18:ef:01:62:ed:17:6d:5a:7d:26:
                    e6:46:50:8f:67:54:da:93:24:b7:51:7a:3e:70:5a:
                    77:8f:49:10:4d:19:96:7b:07:89:3b:19:67:2c:bf:
                    31:11:0e:fc:73:d2:c9:d2:c0:d0:0a:07:ec:d9:a8:
                    84:94:59:61:e5:07:41:b6:57:1e:92:83:e8:13:37:
                    c3:d3:d3:f5:76:77:0c:92:7d:b0:92:3a:88:66:c2:
                    9f:e7:b7:c9:ce:88:06:47:4c:67:5e:aa:ee:24:8f:
                    5b:27:b8:e8:e1:62:c1:8d:f7:30:d0:f7:22:2c:56:
                    f5:ee:67:7b:67:19:6f:b5:d1:70:bb:3f:c7:99:a7:
                    38:e5:bd:89:67:94:81:6f:ea:ba:15:5a:b2:a5:65:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:77:A9:66:55:DE:DF:DE:64:B7:16:4C:E9:88:33:0F:C0:65:B4
            X509v3 Authority Key Identifier:
                keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6b:fd:d4:ea:66:04:65:83:4d:35:0f:9a:e4:59:36:45:c8:
         ce:07:f0:14:3f:3e:e9:d7:19:92:7a:2d:f6:61:d1:c0:9e:f2:
         f8:b3:b9:2e:63:8d:ed:bd:1c:36:e4:9e:d5:dd:92:b7:fc:cc:
         06:ce:99:fa:d3:68:8e:55:a8:0c:c7:0f:4d:c0:34:6d:d3:ec:
         37:d6:f1:50:65:96:8f:0c:d0:a4:54:65:1e:87:65:a6:56:36:
         d3:0f:a7:ab:73:ee:37:ae:ea:77:3e:12:49:6f:c5:04:d7:f4:
         07:18:d7:97:b3:07:6d:e4:ed:38:ab:89:97:01:bf:3c:7f:14:
         ef:3b:c5:1c:56:6a:7a:5d:75:d6:49:24:1c:b3:22:3f:a8:d0:
         d4:53:27:5b:48:cd:cf:cc:31:3b:70:fb:70:51:db:36:67:ca:
         15:54:8b:cc:94:87:07:f4:c1:14:0a:1e:75:86:aa:ee:48:bd:
         9f:54:ec:64:9a:4a:33:10:8d:de:ef:44:cd:5e:5a:8e:02:00:
         af:e3:9d:e2:5f:cf:59:75:97:2a:b3:72:39:a6:b2:d3:78:3c:
         ab:49:ea:09:1b:2e:34:80:db:d3:dd:da:26:53:10:2a:04:88:
         49:bb:d9:0c:c9:be:41:93:20:78:81:fa:d3:7a:ee:72:a9:e2:
         3d:65:f5:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQvfi856Rl83/n3C5i1gF5YfRAHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCNDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0Qy
OEQyMkVBQzAeFw0yNjAzMDIwOTAyNTBaFw0yNjAzMDMxMTAyNTBaMDMxMTAvBgNV
BAMTKEE2MTU3N0E5NjY1NURFREZERTY0QjcxNjRDRTk4ODMzMEZDMDY1QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTq0RXiXhXIi5k+FXBp46TMDd9
JV3NsuV15toSPB+ADj4uorQcrZ57i86/XH55sd6aCS950UipdRAt4MYtO/k0vkfq
5RY7b0k9CKSdu7fjDAOFKa/bnkLeRDd2mSNjUE98A+cvL1fNiAH4iGWiGO8BYu0X
bVp9JuZGUI9nVNqTJLdRej5wWnePSRBNGZZ7B4k7GWcsvzERDvxz0snSwNAKB+zZ
qISUWWHlB0G2Vx6Sg+gTN8PT0/V2dwySfbCSOohmwp/nt8nOiAZHTGdequ4kj1sn
uOjhYsGN9zDQ9yIsVvXuZ3tnGW+10XC7P8eZpzjlvYlnlIFv6roVWrKlZVkHAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUphV3qWZV3t/eZLcWTOmIMw/AZbQwHwYDVR0j
BBgwFoAUybRMQs4hlM8q7V8/HF+efSjSLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4
VHEvMC9DOUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjQ0QzQyQ0UyMTk0Q0Yy
QUVENUYzRjFDNUY5RTdEMjhEMjJFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC9D
OUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO2v91OpmBGWDTTUPmuRZNkXIzgfwFD8+6dcZknot9mHRwJ7y+LO5LmON7b0c
NuSe1d2St/zMBs6Z+tNojlWoDMcPTcA0bdPsN9bxUGWWjwzQpFRlHodlplY20w+n
q3PuN67qdz4SSW/FBNf0BxjXl7MHbeTtOKuJlwG/PH8U7zvFHFZqel111kkkHLMi
P6jQ1FMnW0jNz8wxO3D7cFHbNmfKFVSLzJSHB/TBFAoedYaq7ki9n1TsZJpKMxCN
3u9EzV5ajgIAr+Od4l/PWXWXKrNyOaay03g8q0nqCRsuNIDb093aJlMQKgSISbvZ
DMm+QZMgeIH603rucqniPWX1wg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:40 2026 by rpki-client