Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft
File:                     C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft (raw, json)
Hash identifier:          mDvKgVdMNb0M+PNxMk9Gl63ZPMB8St4x1J/Lq+joWIo=
Subject key identifier:   25:59:82:79:52:B6:42:CD:C0:E7:6E:D8:09:7C:2E:91:46:81:58:1E
Authority key identifier: C8:97:63:1C:E9:6A:2A:90:A3:0D:A3:39:3E:1D:10:F2:C3:AD:70:2C
Certificate issuer:       /CN=C897631CE96A2A90A30DA3393E1D10F2C3AD702C
Certificate serial:       5CF7C44A53CE5654641DC20408D19FD997DF0669
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft
Manifest number:          35
Signing time:             Sun 12 Apr 2026 16:02:36 +0000
Manifest this update:     Sun 12 Apr 2026 15:57:36 +0000
Manifest next update:     Mon 13 Apr 2026 17:39:36 +0000
Files and hashes:         1: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: c6L09K39tK9TFM4CA17IjFODMIIK6j3kSO4lggVk3ew=)
                          2: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: J0ghzD0udvKND+PktfE8lZxnvrlK2zBUdnt9VoTjrWo=)
                          3: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: 5VAnvf5Ps0GK66vhdVvQJcKf8jfoYFZccv582yGZUKs=)
                          4: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: kKU4Iu+6GpdHGkc5CFbil9ltLME8P0jwjuWd1qyY8Dk=)
                          5: C897631CE96A2A90A30DA3393E1D10F2C3AD702C.crl (hash: BeZ9vc71Ck6TiylKU7zd1s+NirH5qvANnkg2MSCtPs4=)
                          6: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: Vl1tCigg+0DwkX/6vCReEKRiKp+ZTJ6xqa/+FSEDjhw=)
                          7: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: Qmpdtjc4Un65IDikUweiiiGx/CygMAYotl8IV1QMCk8=)
                          8: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: VenOL1e6MwqNAAd+POP/SypcH0eKYQDi5bj6G/TZduU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 17:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f7:c4:4a:53:ce:56:54:64:1d:c2:04:08:d1:9f:d9:97:df:06:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C897631CE96A2A90A30DA3393E1D10F2C3AD702C
        Validity
            Not Before: Apr 12 15:57:36 2026 GMT
            Not After : Apr 13 17:39:36 2026 GMT
        Subject: CN=2559827952B642CDC0E76ED8097C2E914681581E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:5b:2f:14:98:37:5f:54:3e:61:41:3f:71:
                    d3:12:dc:84:ec:4b:82:8c:e9:de:66:5a:96:0e:96:
                    71:68:c2:43:ec:7d:df:c5:ee:93:fb:59:c7:1a:55:
                    0f:63:e5:e6:4f:fc:61:7d:4c:0d:9f:d5:b6:5e:78:
                    67:36:c9:92:ae:a0:a2:67:53:4c:a7:8f:ea:35:95:
                    c2:0a:31:fe:bf:23:62:a3:20:59:3c:38:9c:a4:6d:
                    bc:19:31:63:13:9a:e4:d8:8b:7a:21:b0:df:70:0a:
                    c5:45:aa:ec:15:9e:aa:5c:31:3f:ad:af:c9:43:11:
                    e6:4b:60:4f:38:fb:eb:2b:78:9f:b4:c9:fa:d0:c1:
                    f3:ed:5d:42:96:62:27:cc:5e:6c:bb:b2:54:8f:45:
                    9c:db:d0:c6:36:20:5c:58:10:b1:f2:d3:e8:d0:44:
                    c4:a5:ac:be:78:4e:fa:4c:61:db:8f:34:24:a5:13:
                    a0:28:4c:e3:0c:f7:e6:bb:be:93:3a:fd:99:50:b7:
                    1f:19:94:41:14:f7:45:2e:1a:04:3f:83:62:29:a0:
                    bb:ff:b4:48:68:fd:a8:48:0d:e3:bb:cf:16:dc:d3:
                    52:9b:a1:7d:c7:ab:f8:18:c2:8e:0f:d1:12:e7:12:
                    f9:a7:41:33:4c:33:85:a4:12:94:8a:f1:ec:3c:1d:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:59:82:79:52:B6:42:CD:C0:E7:6E:D8:09:7C:2E:91:46:81:58:1E
            X509v3 Authority Key Identifier:
                keyid:C8:97:63:1C:E9:6A:2A:90:A3:0D:A3:39:3E:1D:10:F2:C3:AD:70:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/C897631CE96A2A90A30DA3393E1D10F2C3AD702C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:ba:fd:8f:ca:72:e3:1b:78:14:48:fa:48:65:10:d3:2f:
         fa:ea:cf:e5:87:0d:32:5e:79:14:c0:f0:6e:04:b8:60:87:b2:
         dd:ce:df:be:ac:5e:6c:3a:3a:d9:47:94:80:92:c5:94:78:d0:
         dc:62:4d:fa:af:e2:75:e8:87:38:8e:d5:36:d5:4d:6c:97:45:
         25:11:ba:1d:0c:05:6a:02:37:f8:70:c3:73:4e:38:bf:e3:20:
         1a:4b:f1:7d:7b:7d:71:45:26:3b:f6:de:03:81:8f:63:4a:04:
         53:ee:81:01:11:e1:38:6a:7f:d0:11:e2:86:d5:f5:c7:47:f1:
         21:40:75:bb:2e:ca:c9:24:67:6e:bb:40:a6:a4:7b:cd:8a:96:
         3a:3b:e0:cd:28:e5:90:a2:fa:f1:d7:05:52:56:eb:d2:eb:69:
         f2:8b:e1:a0:c6:8c:59:6a:82:ef:a3:25:64:39:8e:fc:46:0c:
         5a:ea:32:3f:b2:7d:9b:61:3d:60:41:36:2d:aa:02:cd:66:ec:
         cc:c6:0d:01:e4:b1:32:3c:e1:b9:62:45:3f:64:46:9b:6b:fd:
         3b:e3:63:81:48:8e:3b:17:ba:c2:36:6a:4a:c1:00:c6:9e:ba:
         c8:31:f7:65:ac:2d:44:6d:57:aa:35:f9:98:c6:97:cb:b3:43:
         b1:9e:aa:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXPfESlPOVlRkHcIECNGf2ZffBmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5NzYzMUNFOTZBMkE5MEEzMERBMzM5M0UxRDEwRjJD
M0FENzAyQzAeFw0yNjA0MTIxNTU3MzZaFw0yNjA0MTMxNzM5MzZaMDMxMTAvBgNV
BAMTKDI1NTk4Mjc5NTJCNjQyQ0RDMEU3NkVEODA5N0MyRTkxNDY4MTU4MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC011svFJg3X1Q+YUE/cdMS3ITs
S4KM6d5mWpYOlnFowkPsfd/F7pP7WccaVQ9j5eZP/GF9TA2f1bZeeGc2yZKuoKJn
U0ynj+o1lcIKMf6/I2KjIFk8OJykbbwZMWMTmuTYi3ohsN9wCsVFquwVnqpcMT+t
r8lDEeZLYE84++sreJ+0yfrQwfPtXUKWYifMXmy7slSPRZzb0MY2IFxYELHy0+jQ
RMSlrL54TvpMYduPNCSlE6AoTOMM9+a7vpM6/ZlQtx8ZlEEU90UuGgQ/g2IpoLv/
tEho/ahIDeO7zxbc01KboX3Hq/gYwo4P0RLnEvmnQTNMM4WkEpSK8ew8HVOfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJVmCeVK2Qs3A527YCXwukUaBWB4wHwYDVR0j
BBgwFoAUyJdjHOlqKpCjDaM5Ph0Q8sOtcCwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3
c3ovMC9DODk3NjMxQ0U5NkEyQTkwQTMwREEzMzkzRTFEMTBGMkMzQUQ3MDJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OTc2MzFDRTk2QTJBOTBB
MzBEQTMzOTNFMUQxMEYyQzNBRDcwMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3c3ovMC9D
ODk3NjMxQ0U5NkEyQTkwQTMwREEzMzkzRTFEMTBGMkMzQUQ3MDJDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADLq6/Y/KcuMbeBRI+khlENMv+urP5YcNMl55FMDwbgS4YIey3c7fvqxebDo6
2UeUgJLFlHjQ3GJN+q/ideiHOI7VNtVNbJdFJRG6HQwFagI3+HDDc044v+MgGkvx
fXt9cUUmO/beA4GPY0oEU+6BARHhOGp/0BHihtX1x0fxIUB1uy7KySRnbrtApqR7
zYqWOjvgzSjlkKL68dcFUlbr0utp8ovhoMaMWWqC76MlZDmO/EYMWuoyP7J9m2E9
YEE2LaoCzWbszMYNAeSxMjzhuWJFP2RGm2v9O+NjgUiOOxe6wjZqSsEAxp66yDH3
ZawtRG1XqjX5mMaXy7NDsZ6qXw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 00:34:49 2026 by rpki-client