Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
File:                     B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft (raw, json)
Hash identifier:          wXqP/QypR5J8AAWzTdd1r70BfYktBgsh3GolKc3neI8=
Subject key identifier:   47:B3:CA:09:52:0A:95:81:CB:7A:DA:46:2D:DC:AE:F2:39:18:EB:5C
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Certificate issuer:       /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial:       22DBC0C8FA1A53A22CF50882C44D99ED0ED764EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
Manifest number:          0291
Signing time:             Tue 20 Oct 2026 10:31:16 +0000
Manifest this update:     Tue 20 Oct 2026 10:26:16 +0000
Manifest next update:     Wed 21 Oct 2026 11:49:16 +0000
Files and hashes:         1: 323830343a386562383a3a2f33322d3332203d3e20323733343434.roa (hash: xKaTef/blVXQ3xfnFHtzVNfv0/jFZN7i88Zus+5Wa4s=)
                          2: 323830343a386562383a633030303a3a2f33342d3334203d3e20323733343434.roa (hash: KPb+jPiZU3WAM5qtDYVKHuCrcYphWlXHWPLff0KsoHk=)
                          3: 323830343a386562383a383030303a3a2f33342d3334203d3e20323733343434.roa (hash: 7PkC3k/GU5TpUevKqatc6S2dQJB5GHnIrVIswPwz8A0=)
                          4: 323830343a386562383a3a2f33342d3334203d3e20323733343434.roa (hash: H78XsCwOcMmHQQ/eyowDcaGoANDVYiUCuJTtBP2TxTA=)
                          5: B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl (hash: qP8os6xvpowCLDNGTjNo5SquUelBBC/mWMBvaOVBG4k=)
                          6: 323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa (hash: T3AGCL5xdSb6X9ER06oeMb7T3jhdK7Du31kHl5K2XJw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
                          rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 11:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:db:c0:c8:fa:1a:53:a2:2c:f5:08:82:c4:4d:99:ed:0e:d7:64:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Validity
            Not Before: Oct 20 10:26:16 2026 GMT
            Not After : Oct 21 11:49:16 2026 GMT
        Subject: CN=47B3CA09520A9581CB7ADA462DDCAEF23918EB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:71:21:9a:3b:56:89:86:d4:0e:97:a6:b1:
                    65:86:aa:82:81:df:1b:2f:86:2a:ac:bc:1f:20:16:
                    01:97:bd:b4:95:81:15:98:d0:ad:04:91:4a:59:ce:
                    da:31:40:9e:18:1b:dc:26:68:f0:c0:ac:9f:54:f9:
                    24:ad:08:7c:ee:fe:cf:92:44:f9:bd:f6:f6:e4:e9:
                    b1:9d:6c:e7:43:90:85:8e:6b:ae:1c:15:09:f5:f0:
                    25:08:e6:41:fa:38:9b:e6:58:00:ef:29:90:ac:f5:
                    b2:bc:dd:26:ee:f3:13:e6:38:67:88:fe:25:25:0d:
                    6a:6a:73:53:64:8e:19:8f:c2:17:2c:d2:a7:54:ff:
                    84:b0:02:a7:4d:6b:2a:25:35:b4:e0:3c:7e:5f:87:
                    ed:1e:9f:0b:09:42:07:6b:12:07:1e:fb:fc:3b:70:
                    7f:e4:93:ca:12:c5:7c:a6:3a:6f:04:eb:34:7f:d8:
                    42:e6:32:24:e8:09:12:5a:2f:42:e4:60:a2:16:b4:
                    20:5e:5c:12:e6:64:57:80:d1:99:eb:35:c3:a4:b3:
                    62:15:03:b2:09:23:1a:d6:58:a2:23:52:fe:5b:9e:
                    68:bd:99:be:1a:6b:f9:b7:05:ce:7d:50:58:2a:05:
                    3e:0f:e7:1c:65:9b:3e:8e:89:fe:b5:96:be:15:cc:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B3:CA:09:52:0A:95:81:CB:7A:DA:46:2D:DC:AE:F2:39:18:EB:5C
            X509v3 Authority Key Identifier:
                keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:94:9c:b8:83:a6:73:80:5d:5a:e6:ef:af:6e:49:b2:e0:ef:
         d7:d5:76:7c:1f:ff:e7:41:62:de:19:f2:8a:34:d7:46:50:83:
         ef:dd:2d:7f:8c:67:71:fa:04:0b:2a:10:4d:9e:10:52:7d:cd:
         c6:20:77:27:f4:74:f4:82:51:f7:10:c9:ba:d9:c6:42:1e:fc:
         36:e8:a0:ae:e4:b5:c6:a9:31:04:03:3f:96:40:9e:36:58:7d:
         9d:1c:cf:f0:11:f3:09:41:62:c1:b2:4e:ec:0e:a7:b6:6a:a8:
         b9:b3:60:cf:bd:53:b5:74:99:38:9c:f9:5a:3e:2d:4c:57:57:
         9a:49:62:12:73:8e:07:27:80:f5:35:ed:66:55:c7:ad:d3:42:
         7c:e5:fc:13:12:5b:5a:34:b8:f3:d5:b9:05:a7:ee:24:38:47:
         ab:c7:29:c0:6f:38:33:4c:21:f2:11:89:56:ed:18:01:44:92:
         6e:6d:4a:40:c8:70:19:91:eb:12:fd:0a:86:3e:fd:cd:27:a4:
         a9:dc:87:b7:bf:92:e2:70:c5:08:30:f6:23:ae:27:03:05:d3:
         32:a9:7b:7c:b8:c2:d0:ab:de:f5:23:75:b1:b8:29:f4:b0:84:
         30:93:db:af:51:e3:87:17:d8:22:48:20:99:c5:c6:93:ee:83:
         39:f1:43:35
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUItvAyPoaU6Is9QiCxE2Z7Q7XZOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY5MkE3RTFDMzBBOTdFNDJEOUU4NENFMEZDNEU3RTkw
NzE5MTMwRjAeFw0yNjEwMjAxMDI2MTZaFw0yNjEwMjExMTQ5MTZaMDMxMTAvBgNV
BAMTKDQ3QjNDQTA5NTIwQTk1ODFDQjdBREE0NjJERENBRUYyMzkxOEVCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/23EhmjtWiYbUDpemsWWGqoKB
3xsvhiqsvB8gFgGXvbSVgRWY0K0EkUpZztoxQJ4YG9wmaPDArJ9U+SStCHzu/s+S
RPm99vbk6bGdbOdDkIWOa64cFQn18CUI5kH6OJvmWADvKZCs9bK83Sbu8xPmOGeI
/iUlDWpqc1NkjhmPwhcs0qdU/4SwAqdNayolNbTgPH5fh+0enwsJQgdrEgce+/w7
cH/kk8oSxXymOm8E6zR/2ELmMiToCRJaL0LkYKIWtCBeXBLmZFeA0ZnrNcOks2IV
A7IJIxrWWKIjUv5bnmi9mb4aa/m3Bc59UFgqBT4P5xxlmz6Oif61lr4VzBZvAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUR7PKCVIKlYHLetpGLdyu8jkY61wwHwYDVR0j
BBgwFoAUtpKn4cMKl+QtnoTOD8Tn6QcZEw8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9UenlOcWFEcVgzaFRmRlQ5a2RLVXRoUFFxTFFUVGVyZkJNQlB5cmhzeXFL
LzAvQjY5MkE3RTFDMzBBOTdFNDJEOUU4NENFMEZDNEU3RTkwNzE5MTMwRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjkyQTdFMUMzMEE5N0U0MkQ5
RTg0Q0UwRkM0RTdFOTA3MTkxMzBGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1R6
eU5xYURxWDNoVGZGVDlrZEtVdGhQUXFMUVRUZXJmQk1CUHlyaHN5cUsvMC9CNjky
QTdFMUMzMEE5N0U0MkQ5RTg0Q0UwRkM0RTdFOTA3MTkxMzBGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
oJScuIOmc4BdWubvr25JsuDv19V2fB//50Fi3hnyijTXRlCD790tf4xncfoECyoQ
TZ4QUn3NxiB3J/R09IJR9xDJutnGQh78NuigruS1xqkxBAM/lkCeNlh9nRzP8BHz
CUFiwbJO7A6ntmqoubNgz71TtXSZOJz5Wj4tTFdXmkliEnOOByeA9TXtZlXHrdNC
fOX8ExJbWjS489W5BafuJDhHq8cpwG84M0wh8hGJVu0YAUSSbm1KQMhwGZHrEv0K
hj79zSekqdyHt7+S4nDFCDD2I64nAwXTMql7fLjC0Kve9SN1sbgp9LCEMJPbr1Hj
hxfYIkggmcXGk+6DOfFDNQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 19:21:11 2026 by rpki-client