Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          78M1wCaPNJu3fT3wiSKPE596vS3buL/Y+k86YXCjrsw=
Subject key identifier:   29:2A:DD:E1:69:B9:79:CF:6D:3F:E7:71:B8:2C:8B:33:EC:FB:47:3B
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       293DC7F29D349DF05A956D63C84D6ED63169D284
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          010A
Signing time:             Wed 25 Mar 2026 17:34:13 +0000
Manifest this update:     Wed 25 Mar 2026 17:29:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:36:13 +0000
Files and hashes:         1: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: N+XUMWcII3BAqNP4TTCzSCeQwh2jC9OmWVd+xl4z8DY=)
                          2: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: xwfWr/KahAC1gv7zvEFnWH+9sJgXZCfYU4PKD09Hy3k=)
                          3: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=)
                          4: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: /vSap4te8guh+qAqqLmYZImHb8QA8jgej13kbYH5e3Y=)
                          5: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=)
                          6: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: efCaDnSNHaCNsUZJZ2BRsQIelnrquDotvL3pslOlzNQ=)
                          7: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: LyeM55h+f+yfzNTGWUrTsVrUxrvRTN+/Fl74HTUvAlM=)
                          8: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 20:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3d:c7:f2:9d:34:9d:f0:5a:95:6d:63:c8:4d:6e:d6:31:69:d2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Mar 25 17:29:13 2026 GMT
            Not After : Mar 26 20:36:13 2026 GMT
        Subject: CN=292ADDE169B979CF6D3FE771B82C8B33ECFB473B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:58:ec:81:38:60:3b:78:bc:f8:16:a3:5b:
                    6e:01:ee:db:65:05:9b:b9:5c:b2:33:f6:29:9b:8f:
                    c8:31:57:d2:65:9b:82:ae:52:94:be:63:a3:41:87:
                    ea:cc:6e:b3:fa:cf:fb:a3:34:81:b0:ce:78:38:a7:
                    13:1c:e1:32:ac:ee:9a:be:fe:67:f7:3e:9b:f1:bd:
                    46:2a:3d:e5:7e:43:b6:5a:2b:a9:d2:f4:59:97:49:
                    18:fd:e2:7c:81:36:52:e0:97:9c:d4:d1:00:94:cd:
                    7a:35:4e:0d:bf:12:51:b8:47:d0:78:b2:18:14:68:
                    52:d5:6f:17:79:87:34:1f:3c:d6:9e:25:50:d1:1c:
                    01:05:a3:5d:86:ce:39:ef:06:c1:2f:4a:4e:1a:9c:
                    b4:33:bd:e6:cc:78:bc:52:80:57:b6:8f:90:cb:39:
                    dd:04:7a:e2:02:08:45:65:d0:9d:91:54:05:85:e8:
                    3b:22:43:9b:45:52:3a:82:33:d3:df:06:9c:80:1c:
                    6a:dc:42:6f:f8:21:03:63:ed:75:a3:0f:04:49:41:
                    0a:3a:af:93:93:b3:d0:8e:75:96:27:80:3f:2a:63:
                    4a:01:a2:8c:30:c3:cb:02:e8:8f:bd:35:15:74:9d:
                    46:42:75:f1:26:26:2d:23:14:b5:59:3b:0b:49:a8:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2A:DD:E1:69:B9:79:CF:6D:3F:E7:71:B8:2C:8B:33:EC:FB:47:3B
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:47:e5:a1:55:3a:6a:e1:cc:6f:99:75:71:b1:1f:14:e2:b2:
         d6:bd:36:0d:3a:f4:06:33:f9:ab:88:9f:52:85:45:53:45:b1:
         da:f8:5a:a8:c6:3f:cf:89:c0:a9:d7:fc:78:90:ae:04:b9:1e:
         8e:38:fa:c2:47:11:de:f6:53:b8:d1:20:41:d1:34:f7:7e:0f:
         c9:db:15:72:95:d9:b9:b9:f4:53:ea:13:9a:63:29:16:68:69:
         32:f5:59:52:0b:6e:4a:53:17:5a:1f:8f:b3:34:36:1a:b4:06:
         ed:75:14:25:b1:e5:01:f5:05:6d:36:3a:3d:83:5a:e3:ee:f1:
         54:7f:64:7b:39:0e:4b:9f:0a:e2:f7:00:b0:1e:da:36:49:09:
         25:1a:9f:e3:c4:e5:12:c0:65:c5:2e:96:19:8c:6c:fc:43:1a:
         d8:60:be:10:3e:7c:3f:47:4d:50:d2:68:39:91:d7:a3:d4:b6:
         00:52:a1:53:e3:78:05:4e:af:9c:28:86:e7:15:8c:ff:f7:09:
         1c:bd:ed:cf:a5:84:70:7a:13:dd:10:bb:0d:63:df:cd:53:60:
         f9:58:63:27:a6:91:54:22:95:35:55:6c:d5:25:bc:c9:60:f8:
         ea:b6:ee:a7:76:eb:65:2b:d6:85:71:87:fd:ad:bc:5d:0d:bf:
         ec:9b:2f:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKT3H8p00nfBalW1jyE1u1jFp0oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NzIwN0VBNDNFOUNFRkRCQTc0QUQyQ0Q2NkY4OUNF
NkFGOTgxNzAeFw0yNjAzMjUxNzI5MTNaFw0yNjAzMjYyMDM2MTNaMDMxMTAvBgNV
BAMTKDI5MkFEREUxNjlCOTc5Q0Y2RDNGRTc3MUI4MkM4QjMzRUNGQjQ3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiVjsgThgO3i8+BajW24B7ttl
BZu5XLIz9imbj8gxV9Jlm4KuUpS+Y6NBh+rMbrP6z/ujNIGwzng4pxMc4TKs7pq+
/mf3PpvxvUYqPeV+Q7ZaK6nS9FmXSRj94nyBNlLgl5zU0QCUzXo1Tg2/ElG4R9B4
shgUaFLVbxd5hzQfPNaeJVDRHAEFo12GzjnvBsEvSk4anLQzvebMeLxSgFe2j5DL
Od0EeuICCEVl0J2RVAWF6DsiQ5tFUjqCM9PfBpyAHGrcQm/4IQNj7XWjDwRJQQo6
r5OTs9COdZYngD8qY0oBoowww8sC6I+9NRV0nUZCdfEmJi0jFLVZOwtJqNGLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKSrd4Wm5ec9tP+dxuCyLM+z7RzswHwYDVR0j
BBgwFoAUdEcgfqQ+nO/bp0rSzWb4nOavmBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3Zj
OUUvMC83NDQ3MjA3RUE0M0U5Q0VGREJBNzRBRDJDRDY2Rjg5Q0U2QUY5ODE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NDcyMDdFQTQzRTlDRUZE
QkE3NEFEMkNENjZGODlDRTZBRjk4MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3ZjOUUvMC83
NDQ3MjA3RUE0M0U5Q0VGREJBNzRBRDJDRDY2Rjg5Q0U2QUY5ODE3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATkfloVU6auHMb5l1cbEfFOKy1r02DTr0BjP5q4ifUoVFU0Wx2vhaqMY/z4nA
qdf8eJCuBLkejjj6wkcR3vZTuNEgQdE0934PydsVcpXZubn0U+oTmmMpFmhpMvVZ
UgtuSlMXWh+PszQ2GrQG7XUUJbHlAfUFbTY6PYNa4+7xVH9kezkOS58K4vcAsB7a
NkkJJRqf48TlEsBlxS6WGYxs/EMa2GC+ED58P0dNUNJoOZHXo9S2AFKhU+N4BU6v
nCiG5xWM//cJHL3tz6WEcHoT3RC7DWPfzVNg+VhjJ6aRVCKVNVVs1SW8yWD46rbu
p3brZSvWhXGH/a28XQ2/7JsvmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:30 2026 by rpki-client