Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
File:                     67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft (raw, json)
Hash identifier:          pqHFjQeTuOqiIl0txpI28yJkuhT5CP18P3DRcG6Wqp0=
Subject key identifier:   C8:5C:DB:68:A7:C5:0F:8F:B6:F2:A1:C4:8C:B1:B5:D0:1A:A7:85:77
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       3ABAFF015CEDA5F996516C3804BDED68712543FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
Manifest number:          01CD
Signing time:             Thu 26 Mar 2026 19:33:15 +0000
Manifest this update:     Thu 26 Mar 2026 19:28:15 +0000
Manifest next update:     Fri 27 Mar 2026 21:43:15 +0000
Files and hashes:         1: 34352e3233342e3231322e302f32342d3234203d3e20323637333733.roa (hash: 66UTDHyS+o15o1DHofusYW90OVLhm4399N8Tex9s0yQ=)
                          2: 34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (hash: lnXQHPKU/X7ASQFPj2LdVXj2+mFZ9dfeS5ybOkm2zfE=)
                          3: 34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (hash: e1ofZhEjwwLqmwacLrvxcVJI9+LRP99uzz0yMnTvfTE=)
                          4: 323830343a346337633a3a2f33322d3332203d3e20323637333733.roa (hash: wTvI9Jk+Tyb03IMmdqeF3YHfX3R4XnfBxDHBROTaZgA=)
                          5: 34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (hash: l5aTxd5DKyHH2uZYB2e40xfS7eWg+0EyoE/es6SzOuA=)
                          6: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (hash: i+wympsFZ7DTbQCGlqvgvPRqwylAw4y3i5s6eLWj2lA=)
                          7: 34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (hash: by65odK3YD4vm40sPHb+FG8M5K4D3qP1iQC9NOQMUPY=)
                          8: 67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl (hash: iqw0OtOF77ehulC4dxG5pfrARxg4SyC2ELgB429mEKY=)
                          9: 34352e3233342e3231322e302f32322d3232203d3e20323637333733.roa (hash: e/3GWT/XTaK9QTuS4B3pURPMDqeoYXrg6QcodfjD9GA=)
                          10: 34352e3233342e3231352e302f32342d3234203d3e20323637333733.roa (hash: zSZHIHecoK4/UDBuo62YoV9QJQyUsxcVR3oif31TqEQ=)
                          11: 323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (hash: h1dDA5ZyeQXs/UC/Gdy8hngAZLXhdJ17+oiJW1xH4HU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ba:ff:01:5c:ed:a5:f9:96:51:6c:38:04:bd:ed:68:71:25:43:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:15 2026 GMT
            Not After : Mar 27 21:43:15 2026 GMT
        Subject: CN=C85CDB68A7C50F8FB6F2A1C48CB1B5D01AA78577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:40:fe:bd:4c:44:10:cb:fc:a8:0f:30:8b:
                    d9:76:37:9b:fd:1c:32:cb:af:95:59:86:bb:2e:71:
                    20:8a:42:d3:5e:e5:93:65:31:41:40:8b:1d:9d:54:
                    56:8a:ad:64:47:29:86:92:46:da:b9:c3:b0:60:4a:
                    f3:79:4e:1d:e7:b7:df:66:75:a4:a6:74:1e:fb:74:
                    82:14:df:e9:69:5b:7c:c6:d7:c0:3c:82:5a:46:e7:
                    02:6e:a6:d6:12:87:63:d4:be:c6:13:aa:0e:8e:7e:
                    76:9f:51:06:e7:45:04:bb:61:f1:50:39:60:ca:59:
                    a6:3b:f1:bd:9c:51:8d:94:a3:2e:e0:98:63:16:29:
                    14:a3:ed:36:ad:60:37:89:45:f6:8a:9c:a9:30:58:
                    9b:37:0b:3d:27:f0:94:19:15:d8:b3:b5:18:f9:01:
                    ce:68:d2:54:9f:b3:9b:85:97:bf:c7:9e:ef:99:40:
                    f2:91:54:60:7e:70:b6:b0:5e:38:1b:7d:42:2b:f5:
                    be:a1:9d:ca:ad:2a:7b:58:5b:03:80:87:5d:4d:54:
                    9c:b0:27:cb:e9:03:cb:97:6d:45:79:d9:74:87:ee:
                    32:98:cf:45:e0:0e:b9:0b:61:e7:37:fa:d5:a1:10:
                    18:bb:98:bd:73:22:22:12:d9:0d:29:18:5a:31:00:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:DB:68:A7:C5:0F:8F:B6:F2:A1:C4:8C:B1:B5:D0:1A:A7:85:77
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5e:f9:d1:5d:72:f2:68:50:9d:5f:1f:d2:2a:9c:d1:5a:8c:
         e6:40:ee:dc:7e:86:d8:fe:6f:1a:18:af:1d:77:a4:3c:25:06:
         e3:a0:6b:6e:07:3c:39:f7:44:7d:bc:0d:4c:17:bb:94:00:30:
         80:8f:35:1d:5c:fc:ff:be:a4:21:11:01:5c:d1:a8:36:63:a6:
         94:bc:99:f3:86:59:b6:17:62:d9:9a:3d:cc:3a:39:aa:d4:49:
         a1:b5:fd:c3:46:89:35:75:66:c7:44:d2:77:61:28:87:94:e6:
         04:52:ef:97:1e:a2:d9:b9:09:3b:79:5d:1b:70:10:74:3a:b1:
         ab:14:62:9f:86:03:7e:74:86:1b:97:7e:02:b9:62:61:2c:9f:
         14:85:5e:35:8f:ec:f7:26:c8:05:c5:a0:08:3e:a1:92:d7:e7:
         8f:e0:04:9c:58:2d:c5:f8:34:70:89:fb:fe:e8:58:16:db:ac:
         96:31:9c:64:88:b3:77:ae:ff:0d:f1:c0:ec:4d:93:57:52:0b:
         90:f7:b5:c2:fc:1a:91:70:58:85:72:f2:5d:47:f5:92:95:6a:
         9d:a0:e6:db:6d:ce:d5:d5:9f:c5:23:82:38:df:a1:2c:b6:93:
         86:61:4b:56:1c:57:29:9e:ee:75:29:de:5b:ea:bb:e0:a7:02:
         37:d6:63:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOrr/AVztpfmWUWw4BL3taHElQ/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFMzkwQkUzRTIyMTRDNEZCQkFERDA5MUM1NUVFQkFF
NjcxRDg4MjAeFw0yNjAzMjYxOTI4MTVaFw0yNjAzMjcyMTQzMTVaMDMxMTAvBgNV
BAMTKEM4NUNEQjY4QTdDNTBGOEZCNkYyQTFDNDhDQjFCNUQwMUFBNzg1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UkD+vUxEEMv8qA8wi9l2N5v9
HDLLr5VZhrsucSCKQtNe5ZNlMUFAix2dVFaKrWRHKYaSRtq5w7BgSvN5Th3nt99m
daSmdB77dIIU3+lpW3zG18A8glpG5wJuptYSh2PUvsYTqg6OfnafUQbnRQS7YfFQ
OWDKWaY78b2cUY2Uoy7gmGMWKRSj7TatYDeJRfaKnKkwWJs3Cz0n8JQZFdiztRj5
Ac5o0lSfs5uFl7/Hnu+ZQPKRVGB+cLawXjgbfUIr9b6hncqtKntYWwOAh11NVJyw
J8vpA8uXbUV52XSH7jKYz0XgDrkLYec3+tWhEBi7mL1zIiIS2Q0pGFoxAHKfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyFzbaKfFD4+28qHEjLG10BqnhXcwHwYDVR0j
BBgwFoAUZ+OQvj4iFMT7ut0JHFXuuuZx2IIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnBQZmZEclFNWHdEaXBYRmFiWEY5M3VuS1VLOXczZmFac3lZTGF1WWpW
d2svMC82N0UzOTBCRTNFMjIxNEM0RkJCQUREMDkxQzU1RUVCQUU2NzFEODgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RTM5MEJFM0UyMjE0QzRG
QkJBREQwOTFDNTVFRUJBRTY3MUQ4ODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnBQZmZEclFNWHdEaXBYRmFiWEY5M3VuS1VLOXczZmFac3lZTGF1WWpWd2svMC82
N0UzOTBCRTNFMjIxNEM0RkJCQUREMDkxQzU1RUVCQUU2NzFEODgyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl1750V1y8mhQnV8f0iqc0VqM5kDu3H6G2P5vGhivHXekPCUG46Brbgc8OfdE
fbwNTBe7lAAwgI81HVz8/76kIREBXNGoNmOmlLyZ84ZZthdi2Zo9zDo5qtRJobX9
w0aJNXVmx0TSd2Eoh5TmBFLvlx6i2bkJO3ldG3AQdDqxqxRin4YDfnSGG5d+Arli
YSyfFIVeNY/s9ybIBcWgCD6hktfnj+AEnFgtxfg0cIn7/uhYFtusljGcZIizd67/
DfHA7E2TV1ILkPe1wvwakXBYhXLyXUf1kpVqnaDm223O1dWfxSOCON+hLLaThmFL
VhxXKZ7udSneW+q74KcCN9Zjtg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:08 2026 by rpki-client