Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
File:                     65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft (raw, json)
Hash identifier:          9hb/LDcnaIAdgvJHIBqenf08unI1gLlIXrglppki8LE=
Subject key identifier:   F7:D7:0E:1B:B3:A2:F8:EE:ED:EB:C8:AE:36:D2:12:C8:83:07:A8:C1
Authority key identifier: 65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75
Certificate issuer:       /CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
Certificate serial:       20A0C2F8381ECFFAF948C8C51CA402E753052465
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
Manifest number:          04
Signing time:             Wed 25 Mar 2026 11:09:11 +0000
Manifest this update:     Wed 25 Mar 2026 11:04:11 +0000
Manifest next update:     Thu 26 Mar 2026 12:29:11 +0000
Files and hashes:         1: 34352e36352e3230382e302f32322d3332203d3e20323636323638.roa (hash: liWzoV3TfBKHFWyTXxKGFC3+THTI6S8qPfwwALbmS3U=)
                          2: 65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl (hash: Jd5O57Yxa8MVmlJ2oKw+RzoLMQnRJeNuE4YvfUSHUXo=)
                          3: 323830343a336435343a3a2f33322d313238203d3e20323636323638.roa (hash: Ay9rLwcjz3jCnT8mZCX4Y72LElzvXSeNcln94O03DZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a0:c2:f8:38:1e:cf:fa:f9:48:c8:c5:1c:a4:02:e7:53:05:24:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B1F9973AFB6EFFA9031919C1DD54079AAB8F75
        Validity
            Not Before: Mar 25 11:04:11 2026 GMT
            Not After : Mar 26 12:29:11 2026 GMT
        Subject: CN=F7D70E1BB3A2F8EEEDEBC8AE36D212C88307A8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:1f:c9:f8:1f:52:b8:f8:13:49:53:2d:d8:
                    fb:d2:51:e4:44:63:40:c8:5b:d4:88:e2:8c:17:9b:
                    81:91:7c:c9:3f:81:f3:f0:cf:8f:cf:d7:41:b1:27:
                    cb:e7:9b:8d:9c:ac:e9:63:58:5c:6d:0e:9c:7e:45:
                    dc:0f:6f:30:d2:44:61:d0:35:66:dd:0f:50:5c:e0:
                    a9:75:ed:8f:6a:d9:99:02:4b:52:a9:bc:8e:bb:79:
                    1e:8a:9f:74:12:7b:19:e9:d6:bf:83:10:47:bc:fc:
                    c4:5c:42:3d:cf:15:a2:95:f1:af:ca:00:90:bf:8b:
                    95:04:ad:ee:87:1b:03:78:0c:01:22:89:c4:b8:34:
                    f0:f1:75:36:15:2c:0e:05:5a:a8:9b:50:6f:d6:24:
                    4c:d6:aa:0f:82:c7:30:fe:c4:48:e0:f2:a9:5b:ad:
                    82:ff:cb:7b:6c:c5:c9:d0:50:f9:63:ea:1b:16:29:
                    4e:58:a8:0c:3f:a4:24:92:db:d5:d4:91:9e:3a:2e:
                    c6:3a:73:d7:10:54:68:36:7e:77:99:48:68:ca:d4:
                    55:25:89:d0:84:59:62:17:2b:93:e2:a5:cc:4f:6c:
                    54:18:40:5a:5c:0a:8c:c2:63:76:74:6d:cc:81:1a:
                    e0:23:81:3e:ae:df:94:0e:b4:12:a2:75:c8:1f:cf:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D7:0E:1B:B3:A2:F8:EE:ED:EB:C8:AE:36:D2:12:C8:83:07:A8:C1
            X509v3 Authority Key Identifier:
                keyid:65:B1:F9:97:3A:FB:6E:FF:A9:03:19:19:C1:DD:54:07:9A:AB:8F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/65B1F9973AFB6EFFA9031919C1DD54079AAB8F75.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:5c:a3:42:22:d7:49:68:20:b8:43:94:55:8d:3f:48:82:
         7a:4b:dc:5b:74:32:bb:ba:91:8b:2d:b1:3a:05:b0:28:77:89:
         a5:2e:25:ed:45:be:bc:0a:7a:85:b8:bc:55:f1:11:6b:2f:23:
         b6:10:5d:42:f5:b0:6e:ba:fc:84:3e:a6:c9:c0:8f:14:81:42:
         fd:b5:16:53:40:ca:1c:a3:19:f3:18:f5:71:b8:fe:c4:6c:74:
         20:30:ab:eb:d9:bb:94:4d:ba:ba:dd:75:de:69:95:f4:1a:ae:
         7c:b6:e5:ed:10:18:b3:9c:4b:6e:4d:2c:36:16:f2:87:85:6a:
         07:c9:c0:10:d6:09:b7:eb:77:0c:b7:43:62:5a:c5:30:ae:04:
         51:94:af:5c:5e:a1:cc:93:ad:33:64:67:c0:75:b5:8b:ba:f7:
         8a:a5:6b:94:2a:99:1d:8b:e3:22:2d:af:75:9e:9b:a6:3e:9e:
         4e:22:46:ed:e2:d4:54:c5:b1:65:f1:82:84:fe:77:e6:05:e8:
         0b:b3:62:04:84:fa:24:e5:78:0a:a9:3c:b3:9f:1c:88:10:96:
         98:75:e6:0b:3f:ad:65:59:2b:b3:ff:04:3a:88:76:e3:89:da:
         a4:2d:3a:6b:55:c4:5c:17:1c:f7:c0:9c:1d:b0:d5:2b:3b:79:
         00:27:8d:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIKDC+Dgez/r5SMjFHKQC51MFJGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVCMUY5OTczQUZCNkVGRkE5MDMxOTE5QzFERDU0MDc5
QUFCOEY3NTAeFw0yNjAzMjUxMTA0MTFaFw0yNjAzMjYxMjI5MTFaMDMxMTAvBgNV
BAMTKEY3RDcwRTFCQjNBMkY4RUVFREVCQzhBRTM2RDIxMkM4ODMwN0E4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJh/J+B9SuPgTSVMt2PvSUeRE
Y0DIW9SI4owXm4GRfMk/gfPwz4/P10GxJ8vnm42crOljWFxtDpx+RdwPbzDSRGHQ
NWbdD1Bc4Kl17Y9q2ZkCS1KpvI67eR6Kn3QSexnp1r+DEEe8/MRcQj3PFaKV8a/K
AJC/i5UEre6HGwN4DAEiicS4NPDxdTYVLA4FWqibUG/WJEzWqg+CxzD+xEjg8qlb
rYL/y3tsxcnQUPlj6hsWKU5YqAw/pCSS29XUkZ46LsY6c9cQVGg2fneZSGjK1FUl
idCEWWIXK5PipcxPbFQYQFpcCozCY3Z0bcyBGuAjgT6u35QOtBKidcgfz7NlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU99cOG7Oi+O7t68iuNtISyIMHqMEwHwYDVR0j
BBgwFoAUZbH5lzr7bv+pAxkZwd1UB5qrj3UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC82NUIxRjk5NzNBRkI2RUZGQTkwMzE5MTlDMURENTQwNzlBQUI4Rjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1QjFGOTk3M0FGQjZFRkZB
OTAzMTkxOUMxREQ1NDA3OUFBQjhGNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3ZiTXAvMC82
NUIxRjk5NzNBRkI2RUZGQTkwMzE5MTlDMURENTQwNzlBQUI4Rjc1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT8Bco0Ii10loILhDlFWNP0iCekvcW3Qyu7qRiy2xOgWwKHeJpS4l7UW+vAp6
hbi8VfERay8jthBdQvWwbrr8hD6mycCPFIFC/bUWU0DKHKMZ8xj1cbj+xGx0IDCr
69m7lE26ut113mmV9BqufLbl7RAYs5xLbk0sNhbyh4VqB8nAENYJt+t3DLdDYlrF
MK4EUZSvXF6hzJOtM2RnwHW1i7r3iqVrlCqZHYvjIi2vdZ6bpj6eTiJG7eLUVMWx
ZfGChP535gXoC7NiBIT6JOV4Cqk8s58ciBCWmHXmCz+tZVkrs/8EOoh244napC06
a1XEXBcc98CcHbDVKzt5ACeNPQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:31 2026 by rpki-client