Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
File:                     11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft (raw, json)
Hash identifier:          b4L4hT81rjceMXsA8GOj6LRotfjby0HViL1zB0I5ID0=
Subject key identifier:   42:25:49:6E:EF:89:99:DA:02:26:0A:D7:58:C2:A3:20:8E:4C:64:15
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       21DFC388406AAC593F70A99E3666AE3EF96D01D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
Manifest number:          FC
Signing time:             Wed 25 Mar 2026 22:23:02 +0000
Manifest this update:     Wed 25 Mar 2026 22:18:02 +0000
Manifest next update:     Thu 26 Mar 2026 23:13:02 +0000
Files and hashes:         1: 34352e3136372e39382e302f32342d3234203d3e20323637393938.roa (hash: K6GBQqxqAfLpF97zU04kB7u5JAis425xps/SL+WZhCw=)
                          2: 34352e3136372e39362e302f32332d3233203d3e20323637393938.roa (hash: nq7RhRiVGDMVVgM/MoyTYLTPrn1mJ9KD/K6WgZpjXDY=)
                          3: 34352e3136372e39362e302f32342d3234203d3e20323637393938.roa (hash: /LAOQeapE7t7p2/spLqG+U81j0Yy8oxAeK+W5yPj2Gw=)
                          4: 34352e3136372e39362e302f32322d3232203d3e20323637393938.roa (hash: /oOEnAypauONcNbXkKj4AELCL3ogJdLj9O5tkwd15xI=)
                          5: 323830343a353637303a3a2f33322d3332203d3e20323637393938.roa (hash: +cUVgKxn4mOXd+cHhmjCT1WiUS3lOZJTsD6ZtKdpHUU=)
                          6: 34352e3136372e39372e302f32342d3234203d3e20323637393938.roa (hash: Ytrdo261nu68G5iYQF5kllJQrLZFTEmfyesz1UaQMsc=)
                          7: 11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl (hash: hcOnJe5vvzHnT0g/L9OVN8+NRbWMZQdwyS+c/MjzGAM=)
                          8: 34352e3136372e39382e302f32332d3233203d3e20323637393938.roa (hash: O7kjjCoo8NTTsbX0UuS95uZuDag0Q0a6IltqgBl9WOY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:c3:88:40:6a:ac:59:3f:70:a9:9e:36:66:ae:3e:f9:6d:01:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Mar 25 22:18:02 2026 GMT
            Not After : Mar 26 23:13:02 2026 GMT
        Subject: CN=4225496EEF8999DA02260AD758C2A3208E4C6415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:ec:a4:28:c7:40:1e:ec:16:05:2e:76:fe:
                    f5:46:27:86:94:84:a6:5c:14:44:66:5e:9c:a8:1a:
                    7a:9d:1e:61:d2:ad:8a:f4:85:7c:a4:da:cb:74:c2:
                    c1:c8:2b:6c:0d:8c:79:cf:94:fc:3b:a5:51:0b:b0:
                    f1:c6:dd:e0:0b:7b:ee:db:48:6b:69:e1:06:cc:c4:
                    78:09:29:ad:8f:c3:01:37:60:75:47:ab:23:1f:e9:
                    01:54:16:2c:fc:ee:87:1e:14:d5:fc:85:41:08:03:
                    31:cd:f7:7c:e7:cb:c9:d6:ef:1d:2d:b5:9e:b7:24:
                    fc:75:6e:c5:1e:f2:f2:aa:05:74:c9:78:c5:11:71:
                    1d:7a:4f:eb:fe:c6:82:82:d5:b3:00:d6:47:ef:b3:
                    4c:f3:5b:07:c5:d4:71:58:1e:a6:89:8c:ac:59:3f:
                    90:a3:80:40:39:0d:42:ff:ad:63:40:c5:30:5f:6c:
                    3d:a4:b8:07:81:82:36:5f:8b:dd:c0:39:a7:64:e1:
                    5d:5a:40:17:fe:af:cc:db:4a:5a:b5:49:f4:65:85:
                    e4:fa:07:26:80:8d:48:e4:f8:cc:bf:48:86:1a:fd:
                    ed:3c:60:94:46:ec:91:52:aa:aa:8f:bd:78:09:d8:
                    10:66:7e:52:68:20:c1:ac:81:68:b7:0f:e5:6d:84:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:49:6E:EF:89:99:DA:02:26:0A:D7:58:C2:A3:20:8E:4C:64:15
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:4e:5c:d6:b4:d3:08:f9:bc:13:f1:3b:77:b9:7e:2b:b1:
         f5:3f:3f:53:f5:fd:a4:62:3e:af:44:83:32:af:6e:45:04:95:
         c8:ec:60:ad:1f:26:2b:03:33:f7:63:fc:61:94:da:09:03:9d:
         aa:32:5e:79:98:7c:39:4f:2a:8a:e1:19:e8:73:14:6e:a4:0c:
         17:e0:7e:78:c4:b4:62:25:17:06:83:1a:9c:08:05:a8:2f:02:
         c6:b9:2b:68:6b:45:08:97:16:a9:7b:a2:4a:47:30:2e:43:c9:
         13:3f:82:85:16:c1:c6:44:f7:82:0c:99:ad:e8:09:70:f7:ff:
         94:3f:33:9e:ad:96:57:f7:aa:99:bf:80:49:90:9a:4d:56:fa:
         74:6f:23:5a:04:5c:3d:d1:4c:a3:1f:d7:36:33:e7:8c:a2:73:
         73:c6:bf:f5:05:ff:5b:93:eb:43:73:60:82:8b:74:c2:a7:aa:
         74:ee:de:8f:53:1d:b0:ad:15:a2:16:9d:eb:fc:96:54:2b:47:
         86:d9:3b:5d:a4:51:d9:eb:2f:f5:c8:66:11:b1:a5:0b:91:29:
         70:de:57:f5:74:00:85:c3:4c:82:70:8d:b0:ea:10:66:d8:0b:
         45:28:de:a6:01:5f:f5:7a:2b:61:71:40:22:74:f6:3c:a1:27:
         c6:c6:e7:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUId/DiEBqrFk/cKmeNmauPvltAdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGQjFFRDVBODg5NERBNzQ5QTdGNUFENEYxMEU4MEM5
NDRENDIxQzAeFw0yNjAzMjUyMjE4MDJaFw0yNjAzMjYyMzEzMDJaMDMxMTAvBgNV
BAMTKDQyMjU0OTZFRUY4OTk5REEwMjI2MEFENzU4QzJBMzIwOEU0QzY0MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVOykKMdAHuwWBS52/vVGJ4aU
hKZcFERmXpyoGnqdHmHSrYr0hXyk2st0wsHIK2wNjHnPlPw7pVELsPHG3eALe+7b
SGtp4QbMxHgJKa2PwwE3YHVHqyMf6QFUFiz87oceFNX8hUEIAzHN93zny8nW7x0t
tZ63JPx1bsUe8vKqBXTJeMURcR16T+v+xoKC1bMA1kfvs0zzWwfF1HFYHqaJjKxZ
P5CjgEA5DUL/rWNAxTBfbD2kuAeBgjZfi93AOadk4V1aQBf+r8zbSlq1SfRlheT6
ByaAjUjk+My/SIYa/e08YJRG7JFSqqqPvXgJ2BBmflJoIMGsgWi3D+VthLAVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQiVJbu+JmdoCJgrXWMKjII5MZBUwHwYDVR0j
BBgwFoAUEfse1aiJTadJp/WtTxDoDJRNQhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFl
SmovMC8xMUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRkIxRUQ1QTg4OTREQTc0
OUE3RjVBRDRGMTBFODBDOTQ0RDQyMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHh6aFFZblk3S1JkRUxuNXRUSmNGRVNMZ1V5ZXR1cGpIeVZ5Mmh1MlFlSmovMC8x
MUZCMUVENUE4ODk0REE3NDlBN0Y1QUQ0RjEwRTgwQzk0NEQ0MjFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVb9OXNa00wj5vBPxO3e5fiux9T8/U/X9pGI+r0SDMq9uRQSVyOxgrR8mKwMz
92P8YZTaCQOdqjJeeZh8OU8qiuEZ6HMUbqQMF+B+eMS0YiUXBoManAgFqC8Cxrkr
aGtFCJcWqXuiSkcwLkPJEz+ChRbBxkT3ggyZregJcPf/lD8znq2WV/eqmb+ASZCa
TVb6dG8jWgRcPdFMox/XNjPnjKJzc8a/9QX/W5PrQ3Nggot0wqeqdO7ej1MdsK0V
ohad6/yWVCtHhtk7XaRR2esv9chmEbGlC5EpcN5X9XQAhcNMgnCNsOoQZtgLRSje
pgFf9XorYXFAInT2PKEnxsbn1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:32 2026 by rpki-client