Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
File:                     73D43FEADED592156D29C67CCC13A030541CD25A.mft (raw, json)
Hash identifier:          10ZUn26u2TyUON2UW1aCFsUrO5YZgrZCfjqywMXhrRg=
Subject key identifier:   3D:A3:1C:5A:4C:C6:C5:47:89:B5:19:C0:7F:6C:D6:27:11:AC:18:E9
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       52432BF205A421FDF8755A42417DF60D5D5AD0A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
Manifest number:          01B1
Signing time:             Wed 25 Mar 2026 14:25:42 +0000
Manifest this update:     Wed 25 Mar 2026 14:20:42 +0000
Manifest next update:     Thu 26 Mar 2026 17:03:42 +0000
Files and hashes:         1: 73D43FEADED592156D29C67CCC13A030541CD25A.crl (hash: 1T3XkwlT6pzG5v6Abfud0v8DsTnwES2+ccwzxpOaD5E=)
                          2: 3133382e3231392e3134342e302f32322d3234203d3e203532353634.roa (hash: OELlR2mkeHJMSjCDa14qi1nKMpWhg+xJGIybHOq+gPQ=)
                          3: 3133312e3136312e33362e302f32322d3234203d3e203532353634.roa (hash: uqHm6KJdK1pvKvy0CuTIXotwXXgMhIUxRd6ej5Ho2L0=)
                          4: 3137372e38352e3135362e302f32322d3234203d3e203532353634.roa (hash: JwPHUe/eVdO6bAYhYAIUNqAZxpWG8GDsedsKIz7hB0Q=)
                          5: 3137372e39312e3233362e302f32322d3234203d3e203532353634.roa (hash: swm2J5uROSFAXEvTonVKASOTeaR8WgMZC5ItpoA7oPQ=)
                          6: 323830343a316562383a3a2f33322d3536203d3e203532353634.roa (hash: s9qbeek2fSTEjSVmUQU7vWuWcPksV6u6dEUnuyWi9Xo=)
                          7: 3138372e36322e37322e302f32322d3234203d3e203532353634.roa (hash: jikdQ29cn0nPG35AKmYx84HCkVwCjzRQyWSQ0gjrPH0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:43:2b:f2:05:a4:21:fd:f8:75:5a:42:41:7d:f6:0d:5d:5a:d0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: Mar 25 14:20:42 2026 GMT
            Not After : Mar 26 17:03:42 2026 GMT
        Subject: CN=3DA31C5A4CC6C54789B519C07F6CD62711AC18E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:94:65:f1:60:95:4e:6c:c4:c2:73:ac:5c:
                    60:78:ac:61:ed:2a:66:69:48:bb:7a:32:ee:09:4b:
                    f7:4a:f9:6d:8c:88:d9:44:08:50:a7:31:4a:75:5b:
                    a5:78:cc:9e:1a:eb:1a:54:fc:fe:d1:96:e4:d6:71:
                    1f:92:4d:31:96:49:47:9b:7a:26:43:a5:a4:6b:5f:
                    8f:97:fa:65:90:da:54:7e:58:ac:8d:a8:c2:39:f9:
                    49:e1:ee:2e:0e:0e:b5:21:58:76:2b:04:be:df:b4:
                    c4:8b:25:8a:f7:68:30:ff:34:fb:c4:9a:08:2b:c6:
                    7e:1f:98:f2:15:d6:f7:a1:75:b0:f1:df:92:16:ca:
                    e3:9a:1a:8a:ab:04:7f:e5:ac:6a:3e:60:c4:a4:7d:
                    b0:70:30:f3:8d:97:61:dc:25:74:93:90:c8:2c:82:
                    83:0a:3e:da:ff:bb:8a:fa:eb:c0:44:dc:47:ad:7d:
                    2e:de:d5:21:f4:52:5f:f4:e5:3d:0a:b4:f7:36:fe:
                    4a:af:e9:e6:9d:a7:c1:4c:10:b2:69:d3:2b:c7:c7:
                    1d:84:ec:e0:f2:57:c6:3d:63:5d:54:29:0b:4e:9d:
                    7c:8c:21:6e:bd:da:39:fc:4d:13:4e:e1:06:4a:24:
                    e8:78:5e:b2:bf:ac:9d:f5:d2:ca:27:4c:d8:d1:23:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:1C:5A:4C:C6:C5:47:89:B5:19:C0:7F:6C:D6:27:11:AC:18:E9
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:0a:02:10:2b:75:c4:d6:1d:0d:6c:92:99:ad:b4:41:9c:
         07:76:a0:be:34:48:49:dd:35:0f:eb:7a:ab:5b:f2:7f:7c:ff:
         77:03:08:a6:07:fb:13:9a:f2:68:05:49:16:49:42:e4:16:38:
         01:8f:64:5e:3c:bc:d2:a3:6a:1b:8c:17:d1:b0:f4:58:23:13:
         8e:7f:2f:f4:31:ce:1e:c0:25:f6:21:7e:10:b2:e4:38:5a:f7:
         64:1f:28:a2:e9:47:0e:52:bf:25:29:6c:b9:3f:e2:07:83:33:
         d4:25:d3:ae:39:c2:4c:50:7a:5e:0d:5b:cd:e8:dc:39:db:1c:
         98:34:24:5b:64:e1:79:6e:2e:80:49:b6:56:cf:7f:07:cd:92:
         8f:33:ef:b4:04:8e:74:f2:7d:f0:fb:ee:03:e0:d1:61:60:51:
         57:b6:10:ae:58:ac:d3:55:09:de:69:f2:70:7d:9a:e2:71:20:
         fc:61:30:ad:7c:67:c7:e5:db:30:01:2c:3e:3c:ca:c0:b3:5f:
         fa:e0:e8:3e:89:a4:27:b8:de:0d:93:64:bc:f3:9e:a7:bd:4d:
         c0:32:45:f1:f0:f7:a7:c9:16:ed:67:e8:93:9b:ce:ad:73:41:
         ab:a0:b0:bc:8b:79:61:00:f2:09:88:10:c6:5b:64:5b:40:34:
         e8:cb:e9:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUUkMr8gWkIf34dVpCQX32DV1a0KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNENDNGRUFERUQ1OTIxNTZEMjlDNjdDQ0MxM0EwMzA1
NDFDRDI1QTAeFw0yNjAzMjUxNDIwNDJaFw0yNjAzMjYxNzAzNDJaMDMxMTAvBgNV
BAMTKDNEQTMxQzVBNENDNkM1NDc4OUI1MTlDMDdGNkNENjI3MTFBQzE4RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fZRl8WCVTmzEwnOsXGB4rGHt
KmZpSLt6Mu4JS/dK+W2MiNlECFCnMUp1W6V4zJ4a6xpU/P7RluTWcR+STTGWSUeb
eiZDpaRrX4+X+mWQ2lR+WKyNqMI5+Unh7i4ODrUhWHYrBL7ftMSLJYr3aDD/NPvE
mggrxn4fmPIV1vehdbDx35IWyuOaGoqrBH/lrGo+YMSkfbBwMPONl2HcJXSTkMgs
goMKPtr/u4r668BE3EetfS7e1SH0Ul/05T0KtPc2/kqv6eadp8FMELJp0yvHxx2E
7ODyV8Y9Y11UKQtOnXyMIW692jn8TRNO4QZKJOh4XrK/rJ310sonTNjRI0R7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPaMcWkzGxUeJtRnAf2zWJxGsGOkwHwYDVR0j
BBgwFoAUc9Q/6t7VkhVtKcZ8zBOgMFQc0lowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtkWGJnZHBGeHoxQlN1QkEydGdtUzNNZ0ZTQU5ZTldXeHlmUUU2QXly
QkwvMC83M0Q0M0ZFQURFRDU5MjE1NkQyOUM2N0NDQzEzQTAzMDU0MUNEMjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczRDQzRkVBREVENTkyMTU2
RDI5QzY3Q0NDMTNBMDMwNTQxQ0QyNUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUtkWGJnZHBGeHoxQlN1QkEydGdtUzNNZ0ZTQU5ZTldXeHlmUUU2QXlyQkwvMC83
M0Q0M0ZFQURFRDU5MjE1NkQyOUM2N0NDQzEzQTAzMDU0MUNEMjVBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATbgKAhArdcTWHQ1skpmttEGcB3agvjRISd01D+t6q1vyf3z/dwMIpgf7E5ry
aAVJFklC5BY4AY9kXjy80qNqG4wX0bD0WCMTjn8v9DHOHsAl9iF+ELLkOFr3ZB8o
oulHDlK/JSlsuT/iB4Mz1CXTrjnCTFB6Xg1bzejcOdscmDQkW2TheW4ugEm2Vs9/
B82SjzPvtASOdPJ98PvuA+DRYWBRV7YQrlis01UJ3mnycH2a4nEg/GEwrXxnx+Xb
MAEsPjzKwLNf+uDoPomkJ7jeDZNkvPOep71NwDJF8fD3p8kW7Wfok5vOrXNBq6Cw
vIt5YQDyCYgQxltkW0A06Mvptw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:16:42 2026 by rpki-client