Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
File:                     0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft (raw, json)
Hash identifier:          zwFtrgf+sCH4GazDwE8huXPNnXMEnfE76JaI7rAw2CQ=
Subject key identifier:   0C:3F:22:3E:08:B1:1E:19:95:63:ED:E4:E2:9B:7E:C2:6C:62:E1:8C
Authority key identifier: 0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
Certificate issuer:       /CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
Certificate serial:       59B5497198410F7EA40361D943C1DCED02887DEC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
Manifest number:          F1
Signing time:             Thu 26 Mar 2026 12:05:17 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:17 +0000
Manifest next update:     Fri 27 Mar 2026 15:23:17 +0000
Files and hashes:         1: 323830343a383266633a3a2f33322d313238203d3e20323732313639.roa (hash: I6emds5ngPltq+zX/8WmZ4R9w3ZwGbEw6yUNHUh4RpU=)
                          2: 0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl (hash: IOAHr3nXqUOsLfSKx9SW62jF86Qbq5YCBqQI63RGhn8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl
                          rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b5:49:71:98:41:0f:7e:a4:03:61:d9:43:c1:dc:ed:02:88:7d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
        Validity
            Not Before: Mar 26 12:00:17 2026 GMT
            Not After : Mar 27 15:23:17 2026 GMT
        Subject: CN=0C3F223E08B11E199563EDE4E29B7EC26C62E18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:a8:5d:9c:d9:ee:b5:71:3d:ec:91:5a:39:
                    fd:57:b9:a8:d7:f1:a9:74:5b:c4:26:7f:e5:ac:38:
                    c4:75:47:ee:c1:62:b8:a0:cd:6d:f8:8e:84:6e:2b:
                    c0:16:dd:1a:8b:d4:98:15:bd:a6:af:48:db:e1:84:
                    9b:bc:6c:91:4d:8d:70:29:e1:f1:38:5e:72:12:dc:
                    8d:4f:26:51:85:fa:49:38:82:d1:6f:2d:b1:8e:ff:
                    c8:f9:3c:9b:ce:9a:2e:3a:4d:73:da:8a:78:59:c0:
                    e4:0b:96:49:98:90:f2:b2:de:0a:5f:9f:69:1c:af:
                    02:f1:2d:ce:35:55:f0:e6:d5:65:5e:d4:4b:d1:cc:
                    c2:d1:32:a5:33:89:3f:2e:f9:9e:4c:06:6e:93:05:
                    57:e0:19:ad:17:21:c6:76:29:3a:d5:1b:dd:62:36:
                    2c:50:0d:99:30:89:64:6e:50:f8:dd:5b:4f:0a:b3:
                    33:50:53:ab:63:0a:be:f5:c4:fa:ae:c7:33:9c:55:
                    78:4a:20:36:20:5f:7c:6e:ad:52:fa:ab:c9:cc:16:
                    17:8e:c7:61:9d:48:3b:52:d6:2b:3a:ba:5f:a5:2d:
                    be:dd:66:d1:06:19:ad:83:73:12:47:62:74:40:72:
                    9e:f6:14:62:43:b1:9f:ab:f8:fd:79:4d:9e:25:23:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3F:22:3E:08:B1:1E:19:95:63:ED:E4:E2:9B:7E:C2:6C:62:E1:8C
            X509v3 Authority Key Identifier:
                keyid:0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:eb:cd:cf:38:8a:31:82:6f:d9:45:20:99:21:bc:06:d9:
         81:21:55:5f:b0:0c:9d:80:50:d3:14:48:c9:5f:d5:d1:11:ca:
         93:64:e4:af:95:4b:03:e3:50:16:4f:83:71:af:bc:a4:41:c3:
         22:e1:c6:fb:3c:4a:15:ff:4b:fb:6f:97:08:a0:7d:5d:a6:09:
         68:5f:49:3f:91:ab:95:40:9c:69:b0:16:93:61:bd:19:e5:86:
         cd:3e:e6:a8:0e:14:0e:88:97:3e:68:30:17:6b:82:4a:6b:f5:
         3f:2a:b8:63:bd:2f:fe:20:df:eb:79:6b:9a:6f:8b:4d:e2:50:
         bd:1c:28:62:e3:ea:15:bc:b1:85:22:a4:10:22:2e:9d:6a:93:
         b4:14:7a:0f:7d:ed:35:0d:16:30:37:38:d1:c7:60:32:65:bb:
         f0:4c:20:49:21:97:06:8c:b1:9b:99:27:7e:b7:f6:03:b6:d6:
         3d:f5:bf:2a:2d:fa:ca:ad:55:a2:f5:89:71:f1:24:60:b9:ed:
         0c:c1:ea:8e:49:f1:fc:e6:97:3d:fb:76:7a:98:51:81:c7:f3:
         8d:d7:d9:d7:be:a6:a5:91:e4:ff:cb:ed:b8:54:7a:7f:f7:92:
         96:20:26:9a:9f:48:02:97:50:5d:b9:22:65:3e:55:49:d9:12:
         5f:0a:a3:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWbVJcZhBD36kA2HZQ8Hc7QKIfewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJGMjg0MUZBMjMzNkE3QzhCRDE5MkJDOTM1RjhGM0E1
M0Y3RjBGOTAeFw0yNjAzMjYxMjAwMTdaFw0yNjAzMjcxNTIzMTdaMDMxMTAvBgNV
BAMTKDBDM0YyMjNFMDhCMTFFMTk5NTYzRURFNEUyOUI3RUMyNkM2MkUxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EahdnNnutXE97JFaOf1XuajX
8al0W8Qmf+WsOMR1R+7BYrigzW34joRuK8AW3RqL1JgVvaavSNvhhJu8bJFNjXAp
4fE4XnIS3I1PJlGF+kk4gtFvLbGO/8j5PJvOmi46TXPainhZwOQLlkmYkPKy3gpf
n2kcrwLxLc41VfDm1WVe1EvRzMLRMqUziT8u+Z5MBm6TBVfgGa0XIcZ2KTrVG91i
NixQDZkwiWRuUPjdW08KszNQU6tjCr71xPquxzOcVXhKIDYgX3xurVL6q8nMFheO
x2GdSDtS1is6ul+lLb7dZtEGGa2DcxJHYnRAcp72FGJDsZ+r+P15TZ4lI3EdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDD8iPgixHhmVY+3k4pt+wmxi4YwwHwYDVR0j
BBgwFoAUC/KEH6IzanyL0ZK8k1+POlP38PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJN
dVgvMC8wQkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCRjI4NDFGQTIzMzZBN0M4
QkQxOTJCQzkzNUY4RjNBNTNGN0YwRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q25TRWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMC8w
QkYyODQxRkEyMzM2QTdDOEJEMTkyQkM5MzVGOEYzQTUzRjdGMEY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMvvrzc84ijGCb9lFIJkhvAbZgSFVX7AMnYBQ0xRIyV/V0RHKk2Tkr5VLA+NQ
Fk+Dca+8pEHDIuHG+zxKFf9L+2+XCKB9XaYJaF9JP5GrlUCcabAWk2G9GeWGzT7m
qA4UDoiXPmgwF2uCSmv1Pyq4Y70v/iDf63lrmm+LTeJQvRwoYuPqFbyxhSKkECIu
nWqTtBR6D33tNQ0WMDc40cdgMmW78EwgSSGXBoyxm5knfrf2A7bWPfW/Ki36yq1V
ovWJcfEkYLntDMHqjknx/OaXPft2ephRgcfzjdfZ176mpZHk/8vtuFR6f/eSliAm
mp9IApdQXbkiZT5VSdkSXwqj6w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:03:58 2026 by rpki-client