Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
File:                     CD466D427F1FD3AB41CF878A569898A79B337545.mft (raw, json)
Hash identifier:          lcu6m3uqIMnQacAh7+Dsnmw7kNB+4nKrWu/pD9q0H9A=
Subject key identifier:   4B:9B:5D:C5:15:2C:E2:36:18:DE:4A:32:97:66:ED:7D:8F:06:54:EE
Authority key identifier: CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45
Certificate issuer:       /CN=CD466D427F1FD3AB41CF878A569898A79B337545
Certificate serial:       4DB866E02CE09743AA2939E7E12615F75DD00916
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
Manifest number:          C2
Signing time:             Thu 26 Mar 2026 08:28:56 +0000
Manifest this update:     Thu 26 Mar 2026 08:23:56 +0000
Manifest next update:     Fri 27 Mar 2026 12:18:56 +0000
Files and hashes:         1: 323830343a393539633a3a2f33322d313238203d3e20323734353333.roa (hash: aEO4ZPibLWZ8DPxY/2v4NVH5yBsjIZnlJPaG6/91zgQ=)
                          2: CD466D427F1FD3AB41CF878A569898A79B337545.crl (hash: vbQV/Y6d8tjKdX4EuXoMN3Jwy9diaR9Q58noyjryaMc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl
                          rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b8:66:e0:2c:e0:97:43:aa:29:39:e7:e1:26:15:f7:5d:d0:09:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD466D427F1FD3AB41CF878A569898A79B337545
        Validity
            Not Before: Mar 26 08:23:56 2026 GMT
            Not After : Mar 27 12:18:56 2026 GMT
        Subject: CN=4B9B5DC5152CE23618DE4A329766ED7D8F0654EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:5f:0d:4c:f1:0c:c8:6d:6a:4f:32:8b:b1:
                    4f:70:00:4a:67:e7:61:c8:7f:3d:65:96:24:c6:7e:
                    98:6e:bb:b1:9d:fc:04:9d:a4:f5:39:6f:85:e3:83:
                    44:07:d6:3d:b3:94:81:31:ed:9a:7f:32:2f:44:3f:
                    ab:36:c8:98:14:db:81:d5:e4:d7:16:66:59:23:a5:
                    d6:ae:62:9b:3b:82:55:4d:d7:09:53:a4:6f:4b:eb:
                    67:d1:2b:9c:b6:91:b4:4d:1a:7f:08:e6:65:42:ae:
                    66:b7:8f:fa:92:27:a2:b0:3f:57:b3:91:3f:68:13:
                    b0:11:2a:92:50:1a:ad:0a:8e:cf:64:25:e9:68:4b:
                    87:00:0c:f8:fc:87:08:41:4a:21:58:c6:5f:13:13:
                    b0:e1:52:68:29:b7:49:77:93:84:a5:81:d2:0c:be:
                    31:7b:12:db:86:30:76:ab:1b:8d:40:9d:7f:1a:bf:
                    c1:72:df:20:67:d7:32:4d:6d:68:68:2b:c1:05:5d:
                    1d:0e:a4:f8:d6:17:a8:1a:fb:b8:3b:2c:06:7f:e3:
                    6e:8a:fd:89:50:2f:ee:a9:6c:34:a0:cb:d8:e5:88:
                    35:b2:02:ad:11:d5:57:4e:6c:d8:ac:48:2a:d7:6f:
                    d3:ba:07:b4:90:0d:72:22:23:34:6d:be:79:da:14:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9B:5D:C5:15:2C:E2:36:18:DE:4A:32:97:66:ED:7D:8F:06:54:EE
            X509v3 Authority Key Identifier:
                keyid:CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:4a:f8:fd:e4:bb:29:de:62:62:10:1d:13:61:03:54:9c:
         ae:4c:a3:f2:0b:eb:45:d2:b1:bf:3b:63:ed:2e:f3:fe:54:d2:
         83:8e:36:29:63:c4:f8:91:b1:a2:07:55:af:91:8b:6e:20:d5:
         90:62:a6:9c:3c:38:74:6e:31:b8:1f:0b:f2:cd:64:18:0b:bc:
         b5:22:8a:75:d1:d1:05:82:14:c6:ec:25:32:bf:8d:e4:f7:88:
         98:23:4a:2e:dc:67:2f:1c:ae:ea:2d:59:d0:74:a9:f4:44:95:
         96:1e:0d:70:81:e8:ff:7d:1c:27:b0:79:22:57:f7:13:83:47:
         98:44:42:47:4f:a9:0d:fa:f4:82:bc:4c:8e:e2:2a:b4:f0:59:
         d9:b3:93:ea:78:37:b9:2d:a9:68:7b:98:fb:e4:0f:00:11:dc:
         65:eb:85:4f:ff:03:f2:81:39:de:9f:a1:4e:78:24:19:5b:47:
         6f:0c:25:58:ea:fc:43:9d:b4:64:4b:51:4d:9b:71:03:5c:a2:
         94:d4:b6:32:6e:3f:9b:43:2b:98:5b:90:54:de:04:b5:5f:af:
         29:99:2e:37:34:10:34:0f:ac:f4:40:d9:88:b9:b7:62:1d:2d:
         c4:1e:c0:9e:65:96:26:50:6f:4b:b0:2b:e7:29:55:76:dc:cf:
         fb:22:3a:a1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTbhm4Czgl0OqKTnn4SYV913QCRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5
QjMzNzU0NTAeFw0yNjAzMjYwODIzNTZaFw0yNjAzMjcxMjE4NTZaMDMxMTAvBgNV
BAMTKDRCOUI1REM1MTUyQ0UyMzYxOERFNEEzMjk3NjZFRDdEOEYwNjU0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLX18NTPEMyG1qTzKLsU9wAEpn
52HIfz1lliTGfphuu7Gd/ASdpPU5b4Xjg0QH1j2zlIEx7Zp/Mi9EP6s2yJgU24HV
5NcWZlkjpdauYps7glVN1wlTpG9L62fRK5y2kbRNGn8I5mVCrma3j/qSJ6KwP1ez
kT9oE7ARKpJQGq0Kjs9kJeloS4cADPj8hwhBSiFYxl8TE7DhUmgpt0l3k4SlgdIM
vjF7EtuGMHarG41AnX8av8Fy3yBn1zJNbWhoK8EFXR0OpPjWF6ga+7g7LAZ/426K
/YlQL+6pbDSgy9jliDWyAq0R1VdObNisSCrXb9O6B7SQDXIiIzRtvnnaFP+fAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUS5tdxRUs4jYY3koyl2btfY8GVO4wHwYDVR0j
BBgwFoAUzUZtQn8f06tBz4eKVpiYp5szdUUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Cbm1MWEpNUXNlWVhpTXZoOVoyZnFId2l6S2V0aFRjZkNLSnVaOFdvZkY2
LzAvQ0Q0NjZENDI3RjFGRDNBQjQxQ0Y4NzhBNTY5ODk4QTc5QjMzNzU0NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DRDQ2NkQ0MjdGMUZEM0FCNDFD
Rjg3OEE1Njk4OThBNzlCMzM3NTQ1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ju
bUxYSk1Rc2VZWGlNdmg5WjJmcUh3aXpLZXRoVGNmQ0tKdVo4V29mRjYvMC9DRDQ2
NkQ0MjdGMUZEM0FCNDFDRjg3OEE1Njk4OThBNzlCMzM3NTQ1Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
KZ5K+P3kuyneYmIQHRNhA1Scrkyj8gvrRdKxvztj7S7z/lTSg442KWPE+JGxogdV
r5GLbiDVkGKmnDw4dG4xuB8L8s1kGAu8tSKKddHRBYIUxuwlMr+N5PeImCNKLtxn
Lxyu6i1Z0HSp9ESVlh4NcIHo/30cJ7B5Ilf3E4NHmERCR0+pDfr0grxMjuIqtPBZ
2bOT6ng3uS2paHuY++QPABHcZeuFT/8D8oE53p+hTngkGVtHbwwlWOr8Q520ZEtR
TZtxA1yilNS2Mm4/m0MrmFuQVN4EtV+vKZkuNzQQNA+s9EDZiLm3Yh0txB7AnmWW
JlBvS7Ar5ylVdtzP+yI6oQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:49 2026 by rpki-client