Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
File:                     44AA67B8361484903B52C5717C3AC07266651DDA.mft (raw, json)
Hash identifier:          nrkahI9OXFqtA0Aqa/0RS9LDI/JAGDIbPEzfcxKmMmc=
Subject key identifier:   93:F4:E9:48:FE:84:76:5F:66:1D:60:6C:90:60:B6:87:C7:1A:F0:B7
Authority key identifier: 44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
Certificate issuer:       /CN=44AA67B8361484903B52C5717C3AC07266651DDA
Certificate serial:       709A3316F886555340EC4369828F58B24AACD345
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
Manifest number:          BB
Signing time:             Mon 12 Oct 2026 22:22:25 +0000
Manifest this update:     Mon 12 Oct 2026 22:17:25 +0000
Manifest next update:     Tue 13 Oct 2026 23:48:25 +0000
Files and hashes:         1: 3137372e39312e322e302f32342d3234203d3e20323733333731.roa (hash: 3uxyq/H6+IL4AqA8WdQh52Drrhs8STO5IL5xDQRr1PY=)
                          2: 3137372e39312e312e302f32342d3234203d3e20323733333731.roa (hash: b+vlEn9PV+UPgjfoB6HaIT2kxWoQSIFG9HMDR0ANizg=)
                          3: 3137372e39312e302e302f32342d3234203d3e20323733333731.roa (hash: I+ai2zrryIB3jm/ZyUhGUCYdlQNlYlsJoBGvwg5y1Qk=)
                          4: 44AA67B8361484903B52C5717C3AC07266651DDA.crl (hash: jdSPI6ARd+nx8lRPdfbDXzCH4t6VL5XSIjgS03iPT04=)
                          5: 323830343a386461383a3a2f33322d3332203d3e20323733333731.roa (hash: dUSclG3hcnvmzCtZad0ztte8VuntvaZbq6OAKVQlXpg=)
                          6: 3137372e39312e332e302f32342d3234203d3e20323733333731.roa (hash: 4rJ2qZ0yZt79f8SRQfm6ezLUKfXsSzqk254BIL2m0NE=)
                          7: 3137372e39312e302e302f32322d3232203d3e20323733333731.roa (hash: FJNudzw+KP3HO+d7mgZJJmAc6MZm7EnyiN6jQ/uu1fQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl
                          rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:33:16:f8:86:55:53:40:ec:43:69:82:8f:58:b2:4a:ac:d3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AA67B8361484903B52C5717C3AC07266651DDA
        Validity
            Not Before: Oct 12 22:17:25 2026 GMT
            Not After : Oct 13 23:48:25 2026 GMT
        Subject: CN=93F4E948FE84765F661D606C9060B687C71AF0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:70:32:6c:55:79:23:83:ec:75:20:b1:f7:
                    bb:3e:5f:4b:d0:6b:cb:28:22:a4:65:f7:ff:bf:db:
                    3b:8d:fa:c5:c0:db:be:ef:d5:52:ad:68:a1:24:ff:
                    91:21:5e:72:f5:5b:5f:c4:d4:dc:53:41:0f:ef:22:
                    b2:23:8b:d0:c0:bc:37:14:db:1e:5b:0b:ff:a9:d9:
                    92:b4:8d:65:54:63:5e:b7:63:e9:52:90:6e:d4:da:
                    44:44:65:34:3f:9a:93:f9:fe:8a:9b:ba:d2:29:ac:
                    59:a4:28:a5:54:31:39:1a:dc:23:db:79:fe:f5:4d:
                    dc:70:0b:9f:05:20:ef:e9:71:1a:a6:7d:7a:6e:5e:
                    46:31:81:77:93:71:b7:9c:9e:40:5d:86:50:0a:84:
                    90:bd:1c:90:a3:2b:d7:9f:7b:ea:d3:94:1c:a7:51:
                    6c:3b:99:16:40:63:d3:21:dd:e5:10:31:8b:db:a5:
                    88:6f:07:0a:37:0e:91:17:e6:9b:c4:4c:a2:37:b3:
                    28:8e:76:ae:53:46:2b:31:28:0d:cf:36:81:30:df:
                    f3:20:f1:86:a2:c4:ae:6c:3e:1d:c8:6c:a0:3e:3d:
                    b0:da:fe:30:d0:24:a1:39:af:f7:75:8b:b0:2c:0f:
                    00:06:cd:e1:0c:1a:28:e0:04:b1:1a:0f:ba:b1:db:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F4:E9:48:FE:84:76:5F:66:1D:60:6C:90:60:B6:87:C7:1A:F0:B7
            X509v3 Authority Key Identifier:
                keyid:44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7d:5f:c6:51:a6:d0:6e:bd:ce:c2:22:6d:48:17:6a:1a:fc:
         0c:84:ea:f5:6a:4b:d9:de:8f:1e:d9:d1:11:36:3f:1a:c4:17:
         d8:be:fd:77:77:1a:fb:2c:af:97:0a:d1:7a:5f:45:18:d9:44:
         9d:9b:f3:3a:78:33:e2:1b:a3:6c:cd:d4:cc:98:f1:d2:41:ff:
         58:54:1e:2e:9d:17:30:7e:de:60:a5:db:e4:50:99:00:bc:09:
         ed:78:fa:c5:da:0b:1d:fa:37:31:0a:0e:84:f3:b2:24:cd:16:
         0c:10:b8:2e:7c:02:16:29:66:99:f7:86:8c:e3:46:aa:01:66:
         b5:2f:94:b0:76:27:df:f9:c7:74:ea:a8:5e:a1:8c:9f:b2:93:
         b8:66:ce:6a:a8:34:8c:57:63:63:83:c7:4d:83:17:af:ed:b6:
         3a:f1:43:1f:28:2f:a2:22:64:e8:fe:85:4d:43:ac:ef:91:13:
         2d:40:bc:99:98:62:15:71:1c:66:d9:e3:86:71:b3:44:a4:a1:
         f1:59:77:d8:f6:48:b6:88:17:33:bf:08:a0:f0:00:81:06:55:
         79:39:74:bd:d5:90:5f:a7:a7:76:21:6c:50:a0:2c:69:2e:38:
         ef:51:9a:98:af:3f:ed:de:d0:90:21:b5:fd:1f:1a:f3:fa:49:
         c2:fa:2d:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcJozFviGVVNA7ENpgo9Yskqs00UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRBQTY3QjgzNjE0ODQ5MDNCNTJDNTcxN0MzQUMwNzI2
NjY1MUREQTAeFw0yNjEwMTIyMjE3MjVaFw0yNjEwMTMyMzQ4MjVaMDMxMTAvBgNV
BAMTKDkzRjRFOTQ4RkU4NDc2NUY2NjFENjA2QzkwNjBCNjg3QzcxQUYwQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEo3AybFV5I4PsdSCx97s+X0vQ
a8soIqRl9/+/2zuN+sXA277v1VKtaKEk/5EhXnL1W1/E1NxTQQ/vIrIji9DAvDcU
2x5bC/+p2ZK0jWVUY163Y+lSkG7U2kREZTQ/mpP5/oqbutIprFmkKKVUMTka3CPb
ef71TdxwC58FIO/pcRqmfXpuXkYxgXeTcbecnkBdhlAKhJC9HJCjK9efe+rTlByn
UWw7mRZAY9Mh3eUQMYvbpYhvBwo3DpEX5pvETKI3syiOdq5TRisxKA3PNoEw3/Mg
8YaixK5sPh3IbKA+PbDa/jDQJKE5r/d1i7AsDwAGzeEMGijgBLEaD7qx28yNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUk/TpSP6Edl9mHWBskGC2h8ca8LcwHwYDVR0j
BBgwFoAURKpnuDYUhJA7UsVxfDrAcmZlHdowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVlOYUF1dHMzRHVaZDJuM2JwczlhdXNDaTRwQ0RveE5CMzVSM2FDdHB0
RkgvMC80NEFBNjdCODM2MTQ4NDkwM0I1MkM1NzE3QzNBQzA3MjY2NjUxRERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0QUE2N0I4MzYxNDg0OTAz
QjUyQzU3MTdDM0FDMDcyNjY2NTFEREEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVlOYUF1dHMzRHVaZDJuM2JwczlhdXNDaTRwQ0RveE5CMzVSM2FDdHB0RkgvMC80
NEFBNjdCODM2MTQ4NDkwM0I1MkM1NzE3QzNBQzA3MjY2NjUxRERBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQH1fxlGm0G69zsIibUgXahr8DITq9WpL2d6PHtnRETY/GsQX2L79d3ca+yyv
lwrRel9FGNlEnZvzOngz4hujbM3UzJjx0kH/WFQeLp0XMH7eYKXb5FCZALwJ7Xj6
xdoLHfo3MQoOhPOyJM0WDBC4LnwCFilmmfeGjONGqgFmtS+UsHYn3/nHdOqoXqGM
n7KTuGbOaqg0jFdjY4PHTYMXr+22OvFDHygvoiJk6P6FTUOs75ETLUC8mZhiFXEc
ZtnjhnGzRKSh8Vl32PZItogXM78IoPAAgQZVeTl0vdWQX6endiFsUKAsaS4471Ga
mK8/7d7QkCG1/R8a8/pJwvotng==
-----END CERTIFICATE-----