Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          bb6idys8N1Rff2wk9qTwGDKTBNs3hv3ltm6qJdqXEOo=
Subject key identifier:   38:FF:25:C8:10:97:0A:8E:59:E7:AC:5A:0D:63:DF:C5:40:FF:67:9E
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       2CFBF0E6DCF506E36E319696090B52EEB06A7F79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          0484
Signing time:             Wed 13 May 2026 14:40:25 +0000
Manifest this update:     Wed 13 May 2026 14:35:25 +0000
Manifest next update:     Thu 14 May 2026 17:27:25 +0000
Files and hashes:         1: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: ayKHkoUaXDc+dlhSGRGyDF6TYdoTV7sf4lmoMEMC7N4=)
                          2: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: 9Lwi39YnxiHe6GUf3QaKGx4nyNSuYHW9oX3JOGuCO7A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fb:f0:e6:dc:f5:06:e3:6e:31:96:96:09:0b:52:ee:b0:6a:7f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: May 13 14:35:25 2026 GMT
            Not After : May 14 17:27:25 2026 GMT
        Subject: CN=38FF25C810970A8E59E7AC5A0D63DFC540FF679E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:1e:db:f1:3c:57:d1:8b:93:cd:16:ea:43:
                    d6:aa:79:bd:31:c7:e7:54:21:0b:01:96:fb:67:f1:
                    f4:1c:65:d3:35:c2:4f:7e:67:b3:4d:c6:c7:33:0d:
                    a3:84:c0:fc:79:e0:a2:94:c9:30:9d:92:c5:4d:b7:
                    e2:1c:00:ca:d7:d7:b2:8d:a3:a1:73:46:8c:5e:0b:
                    21:1b:88:44:ce:e0:e3:ff:ca:d6:86:cd:d7:f8:f6:
                    13:04:e5:47:c4:98:42:c7:70:bd:87:a8:10:cc:86:
                    06:1c:74:3f:7f:4c:28:94:44:d4:f0:c6:e0:91:d9:
                    bf:bc:dd:9f:99:06:0d:4a:52:5c:8d:98:6a:07:79:
                    07:63:9d:44:33:bc:36:2a:30:e0:3a:57:2e:93:83:
                    fc:ab:3d:c5:17:3d:d7:74:c0:51:7d:bf:a3:d7:e9:
                    ae:e2:29:41:b3:b4:50:60:c5:32:ec:d0:37:50:45:
                    71:7b:34:a5:82:2f:2b:0f:fd:74:e6:4c:26:e7:75:
                    91:0c:7c:d2:c9:be:d6:3f:0e:bf:fb:39:fa:c1:d6:
                    53:60:b2:b5:ae:57:73:2d:bb:28:ec:10:d5:fd:06:
                    00:18:92:73:15:a8:00:90:8a:07:15:87:c6:f4:5b:
                    3f:4b:b7:91:97:9c:38:9e:db:18:c2:4c:62:34:11:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FF:25:C8:10:97:0A:8E:59:E7:AC:5A:0D:63:DF:C5:40:FF:67:9E
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f8:39:65:03:ed:ca:67:f0:5e:e6:2f:7d:aa:e6:54:82:3c:
         cb:35:d1:48:1e:58:75:db:0f:75:20:c5:0f:0d:2e:2a:e6:ec:
         90:37:2c:b1:7a:48:48:3a:87:a6:47:97:d2:21:34:85:93:8d:
         38:ac:47:95:fe:34:cb:ce:b0:15:52:5d:fd:bd:f0:81:f6:38:
         ac:de:51:98:11:ea:47:00:a1:78:f5:99:7a:f2:cb:dd:39:1f:
         ed:dc:4a:cf:18:a3:72:50:7b:ff:2a:6c:6f:27:bb:60:83:f5:
         22:db:e9:d0:8a:74:d8:64:1b:18:68:9b:a2:97:4e:94:04:02:
         60:d8:a6:8d:e1:6d:9a:e3:6e:17:f4:91:7a:31:ca:8b:a5:b3:
         27:46:fa:4b:30:51:a3:bb:05:68:e3:cd:45:2f:90:9d:0b:c1:
         e9:72:7e:24:e5:5b:19:af:ea:97:f6:4f:bb:19:dd:48:7e:ea:
         c0:64:3a:7e:73:8e:86:f2:52:2d:b0:b4:34:24:c9:cd:f9:62:
         d7:4f:e3:d5:da:ff:d1:75:0b:a0:6f:21:8c:c5:e9:f8:77:56:
         70:50:64:00:7f:48:6d:71:19:c5:5f:45:fe:39:14:19:e5:c5:
         f5:9c:f1:63:9e:3f:b9:06:cb:53:24:bd:9f:aa:fb:df:fd:ba:
         6a:37:57:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULPvw5tz1BuNuMZaWCQtS7rBqf3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4OTM4RjZCODdENTgxNDFEODUzRkEwNEI2MUYyRUM2
ODM3MUU0MzAeFw0yNjA1MTMxNDM1MjVaFw0yNjA1MTQxNzI3MjVaMDMxMTAvBgNV
BAMTKDM4RkYyNUM4MTA5NzBBOEU1OUU3QUM1QTBENjNERkM1NDBGRjY3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYB7b8TxX0YuTzRbqQ9aqeb0x
x+dUIQsBlvtn8fQcZdM1wk9+Z7NNxsczDaOEwPx54KKUyTCdksVNt+IcAMrX17KN
o6FzRoxeCyEbiETO4OP/ytaGzdf49hME5UfEmELHcL2HqBDMhgYcdD9/TCiURNTw
xuCR2b+83Z+ZBg1KUlyNmGoHeQdjnUQzvDYqMOA6Vy6Tg/yrPcUXPdd0wFF9v6PX
6a7iKUGztFBgxTLs0DdQRXF7NKWCLysP/XTmTCbndZEMfNLJvtY/Dr/7OfrB1lNg
srWuV3MtuyjsENX9BgAYknMVqACQigcVh8b0Wz9Lt5GXnDie2xjCTGI0EQ7ZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOP8lyBCXCo5Z56xaDWPfxUD/Z54wHwYDVR0j
BBgwFoAUMok49rh9WBQdhT+gS2Hy7Gg3HkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU04dWt1VnBjbms5TFdKUXI3WTlaaWlGQ2hiWUs3aDNwY3FqWUoyOWda
dmcvMi8zMjg5MzhGNkI4N0Q1ODE0MUQ4NTNGQTA0QjYxRjJFQzY4MzcxRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyODkzOEY2Qjg3RDU4MTQx
RDg1M0ZBMDRCNjFGMkVDNjgzNzFFNDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU04dWt1VnBjbms5TFdKUXI3WTlaaWlGQ2hiWUs3aDNwY3FqWUoyOWdadmcvMi8z
Mjg5MzhGNkI4N0Q1ODE0MUQ4NTNGQTA0QjYxRjJFQzY4MzcxRTQzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtfg5ZQPtymfwXuYvfarmVII8yzXRSB5YddsPdSDFDw0uKubskDcssXpISDqH
pkeX0iE0hZONOKxHlf40y86wFVJd/b3wgfY4rN5RmBHqRwChePWZevLL3Tkf7dxK
zxijclB7/ypsbye7YIP1Itvp0Ip02GQbGGibopdOlAQCYNimjeFtmuNuF/SRejHK
i6WzJ0b6SzBRo7sFaOPNRS+QnQvB6XJ+JOVbGa/ql/ZPuxndSH7qwGQ6fnOOhvJS
LbC0NCTJzfli10/j1dr/0XULoG8hjMXp+HdWcFBkAH9IbXEZxV9F/jkUGeXF9Zzx
Y54/uQbLUyS9n6r73/26ajdX4w==
-----END CERTIFICATE-----
Generated at Wed May 13 18:38:55 2026 by rpki-client