Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          Az38rFaQplP0g+W8WXBj3j10Jg/Bb9njLt48/lFpOro=
Subject key identifier:   FB:7D:73:0B:C7:23:21:34:84:37:B1:BF:AC:1E:D1:44:DE:34:70:BB
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       53D070653746A4047B67636FB61D889A2E895384
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          0231
Signing time:             Thu 26 Mar 2026 08:59:19 +0000
Manifest this update:     Thu 26 Mar 2026 08:54:19 +0000
Manifest next update:     Fri 27 Mar 2026 11:41:19 +0000
Files and hashes:         1: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: wyjeP42GAADqzHNfIzI5a5x5Sw50ReH1GH2te99vsJM=)
                          2: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: dFZ0LGf9VUQmelCd2T2ZnwoXRmTaX8jDdO8dHAjtnkk=)
                          3: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: p+UFfhkBAnWncsui85kUuhM0+jqknevxzdqYB/fmK3s=)
                          4: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=)
                          5: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM=)
                          6: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: il53B7Q73jNFlH7g51wKgGiNgid+xMbJfds7WZ0O2Bg=)
                          7: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d0:70:65:37:46:a4:04:7b:67:63:6f:b6:1d:88:9a:2e:89:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Mar 26 08:54:19 2026 GMT
            Not After : Mar 27 11:41:19 2026 GMT
        Subject: CN=FB7D730BC72321348437B1BFAC1ED144DE3470BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:4a:83:ef:f3:09:6e:0a:9d:7b:65:68:69:
                    ae:31:1f:89:40:b9:f5:26:83:46:c2:bf:25:e4:c9:
                    71:49:a8:c6:5b:3e:8a:72:45:76:36:dc:27:cf:81:
                    90:4e:39:7e:65:83:3e:51:4c:f4:2f:cf:3e:db:28:
                    81:76:50:a3:f7:45:fc:61:27:9c:41:30:60:26:15:
                    ff:8e:92:9d:b6:8b:c2:c5:e7:60:e9:74:f6:9a:af:
                    3a:c2:df:ee:68:48:23:ae:a9:5a:c4:00:ca:c1:81:
                    ff:2c:3b:47:e0:e4:a6:92:c0:a4:f2:da:ca:d6:e8:
                    ba:b3:3f:c8:f4:c7:c7:13:f9:47:2a:04:d3:20:00:
                    25:78:fa:47:97:b6:37:cd:5f:3b:cb:da:e4:22:db:
                    7a:39:4c:d6:32:c4:34:26:e4:26:b0:4d:c4:af:54:
                    12:03:f3:d4:b2:19:e7:c8:9d:d0:60:f2:ae:ae:92:
                    3d:b5:92:2a:90:e8:70:c1:80:3e:9b:d3:ce:dd:78:
                    3e:c5:f3:4d:dc:85:cb:ec:77:3a:8b:13:1a:7f:cb:
                    c3:7e:3b:78:89:0d:eb:d0:0f:21:99:88:e6:96:08:
                    58:9f:e8:dd:d0:a8:75:eb:28:09:fb:72:3e:cf:a0:
                    7b:1d:28:d7:b9:81:44:58:84:6f:c7:69:62:7b:cb:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:73:0B:C7:23:21:34:84:37:B1:BF:AC:1E:D1:44:DE:34:70:BB
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:b4:c1:6e:1a:4a:e5:75:c5:c0:90:13:07:95:fd:94:46:
         86:07:da:be:b9:37:20:3a:00:1b:7f:e5:a6:ff:4b:1f:3d:64:
         c3:32:bb:1d:1a:20:d1:23:c7:20:e4:c3:41:c8:81:d1:7f:94:
         1b:4c:86:02:8e:a5:56:9d:e8:84:5c:d2:30:e4:b2:1d:3b:c6:
         98:f5:00:b9:c5:8e:53:b2:a7:62:e6:88:33:3b:f9:dc:dc:42:
         7a:fb:8b:8f:32:da:30:d6:c3:0a:d4:21:e0:45:4b:05:ca:8e:
         6c:8c:32:7f:3b:02:92:1a:7a:50:89:c8:e7:3b:00:0e:f2:66:
         97:cb:f5:0b:2a:d9:ec:c2:2d:ff:95:c7:c9:a3:76:c0:7f:e6:
         7a:e4:78:34:b3:55:dc:a6:28:3b:d0:b5:49:2d:18:ff:e6:5b:
         16:20:92:08:66:59:61:d5:73:70:05:08:82:4d:2f:fc:4a:ea:
         48:15:52:0b:9f:c3:c4:2b:03:c3:34:69:e0:67:81:0c:bf:97:
         9d:df:f1:6f:de:ac:24:37:11:c9:37:24:9f:cb:da:9e:54:e4:
         74:a4:24:b5:fc:a5:b7:86:b3:70:db:7e:2d:bc:ba:1a:c4:da:
         cd:c5:e0:81:79:d8:fa:92:da:a4:0e:ad:77:42:15:6c:b3:d7:
         2a:3d:a8:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUU9BwZTdGpAR7Z2Nvth2Imi6JU4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxMEUwNEYyNzUxMEZGRjFFODM2MjA1MjA3MDQxMkM5
MDNGRkQ4QjAeFw0yNjAzMjYwODU0MTlaFw0yNjAzMjcxMTQxMTlaMDMxMTAvBgNV
BAMTKEZCN0Q3MzBCQzcyMzIxMzQ4NDM3QjFCRkFDMUVEMTQ0REUzNDcwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHEqD7/MJbgqde2Voaa4xH4lA
ufUmg0bCvyXkyXFJqMZbPopyRXY23CfPgZBOOX5lgz5RTPQvzz7bKIF2UKP3Rfxh
J5xBMGAmFf+Okp22i8LF52DpdPaarzrC3+5oSCOuqVrEAMrBgf8sO0fg5KaSwKTy
2srW6LqzP8j0x8cT+UcqBNMgACV4+keXtjfNXzvL2uQi23o5TNYyxDQm5CawTcSv
VBID89SyGefIndBg8q6ukj21kiqQ6HDBgD6b087deD7F803chcvsdzqLExp/y8N+
O3iJDevQDyGZiOaWCFif6N3QqHXrKAn7cj7PoHsdKNe5gURYhG/HaWJ7y/INAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU+31zC8cjITSEN7G/rB7RRN40cLswHwYDVR0j
BBgwFoAUqRDgTydRD/8eg2IFIHBBLJA//YswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC9BOTEwRTA0RjI3NTEwRkZGMUU4MzYyMDUyMDcwNDEyQzkwM0ZGRDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MTBFMDRGMjc1MTBGRkYx
RTgzNjIwNTIwNzA0MTJDOTAzRkZEOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNFQWkvMC9B
OTEwRTA0RjI3NTEwRkZGMUU4MzYyMDUyMDcwNDEyQzkwM0ZGRDhCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFW0wW4aSuV1xcCQEweV/ZRGhgfavrk3IDoAG3/lpv9LHz1kwzK7HRog0SPH
IOTDQciB0X+UG0yGAo6lVp3ohFzSMOSyHTvGmPUAucWOU7KnYuaIMzv53NxCevuL
jzLaMNbDCtQh4EVLBcqObIwyfzsCkhp6UInI5zsADvJml8v1CyrZ7MIt/5XHyaN2
wH/meuR4NLNV3KYoO9C1SS0Y/+ZbFiCSCGZZYdVzcAUIgk0v/ErqSBVSC5/DxCsD
wzRp4GeBDL+Xnd/xb96sJDcRyTckn8vanlTkdKQktfylt4azcNt+Lby6GsTazcXg
gXnY+pLapA6td0IVbLPXKj2oDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:39 2026 by rpki-client