Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
File:                     60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json)
Hash identifier:          04iMdrh/ukQb60Id13GssjQ5LJF2r6kj/b/ILuchxyY=
Subject key identifier:   2D:99:53:68:F7:49:09:9F:EC:B5:3D:CE:8B:3F:EC:5F:03:2D:B4:33
Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Certificate issuer:       /CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Certificate serial:       4FB913BEB979A8C383AA92ADC05FAC462A7518AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
Manifest number:          F0
Signing time:             Thu 26 Mar 2026 16:57:05 +0000
Manifest this update:     Thu 26 Mar 2026 16:52:05 +0000
Manifest next update:     Fri 27 Mar 2026 20:14:05 +0000
Files and hashes:         1: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=)
                          2: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: PHRaIJe5ELQmspgHeWZIrQthsXIpO/yh+UBU/VSLw2s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
                          rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b9:13:be:b9:79:a8:c3:83:aa:92:ad:c0:5f:ac:46:2a:75:18:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
        Validity
            Not Before: Mar 26 16:52:05 2026 GMT
            Not After : Mar 27 20:14:05 2026 GMT
        Subject: CN=2D995368F749099FECB53DCE8B3FEC5F032DB433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:5c:9b:c6:11:6a:c4:7f:b7:c1:a7:c4:a2:
                    db:fc:dd:80:3d:6d:4d:0f:00:12:54:73:70:cf:e3:
                    fb:fe:b2:58:56:1a:1b:bf:6b:cb:da:60:ef:dc:6a:
                    99:c8:96:a2:46:54:05:bb:89:88:6f:7c:06:28:6f:
                    26:50:54:45:00:44:5c:96:26:75:2f:19:51:de:1e:
                    39:af:5a:3f:4e:06:a2:fc:fe:96:34:3b:e2:5f:89:
                    3c:31:47:37:2e:25:5f:fd:eb:d7:60:da:e9:9b:0b:
                    e3:06:2b:c6:d2:80:2f:a9:3a:0d:e9:1e:6a:6b:46:
                    93:ae:d0:e3:b2:65:01:d6:19:9e:81:90:b4:3b:98:
                    27:37:ee:a4:8a:cc:77:b0:cd:3e:95:8c:09:2c:ff:
                    4a:e3:a8:f5:c7:88:fa:e4:b9:b6:c5:f0:37:22:4c:
                    aa:45:d9:24:d0:e6:db:7d:05:e0:54:1d:a5:74:45:
                    68:5d:06:30:55:a8:d8:6d:c6:81:a6:f5:fb:79:45:
                    03:45:9b:b4:34:81:94:bb:90:cf:ef:61:60:a5:28:
                    12:cb:cf:85:25:92:d9:02:8f:5c:c8:9e:a3:73:d0:
                    7a:a3:0b:92:02:25:37:96:e8:f5:af:50:14:65:a5:
                    ae:af:ab:1e:ba:64:11:90:6b:d0:75:10:86:0b:c1:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:99:53:68:F7:49:09:9F:EC:B5:3D:CE:8B:3F:EC:5F:03:2D:B4:33
            X509v3 Authority Key Identifier:
                keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f9:53:ce:fa:71:1a:d6:22:7c:04:fd:08:b2:78:60:63:c7:
         7a:26:fe:32:3a:b7:ba:2f:3d:2e:98:da:29:d5:f8:d9:54:39:
         b2:f5:99:38:db:cc:0d:66:80:7c:26:ee:98:42:21:20:8a:3d:
         ae:d4:d2:06:dc:ad:e6:06:34:86:ed:95:a7:d2:47:fd:fd:0b:
         32:32:72:d6:c6:d0:50:32:ab:26:8f:a6:17:02:7f:c6:42:71:
         3a:d8:5c:b4:d6:e7:29:bc:88:51:3a:9e:ed:df:29:e7:ce:35:
         b8:dd:c8:5c:30:3a:6f:37:30:5d:92:0e:df:4d:ca:a9:17:e3:
         af:6c:74:84:8b:ab:91:0e:85:5e:a0:13:5c:a4:dc:f4:c9:2b:
         3a:39:74:74:9c:2a:dd:d1:75:16:2d:23:a6:16:5d:1d:4a:8f:
         52:fa:15:13:03:a3:5f:69:f7:f2:b7:9e:26:9c:a0:52:f0:0a:
         74:84:eb:18:c7:fe:6c:dc:1d:e7:3f:be:e9:03:74:4d:55:66:
         99:9c:d8:d5:36:9a:2b:ef:47:7e:cc:db:b2:75:91:e8:c9:07:
         49:90:03:86:9c:9f:3f:70:69:e9:30:61:2c:24:a0:f8:39:63:
         55:df:db:88:ec:e0:51:d5:de:0e:92:d2:88:ff:91:c3:0d:d4:
         54:ec:51:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT7kTvrl5qMODqpKtwF+sRip1GKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAzNTg4ODRCRjBGMUM0RDMwMjRCNzA5REQ1NzM0RDUz
ODc2M0VFQzAeFw0yNjAzMjYxNjUyMDVaFw0yNjAzMjcyMDE0MDVaMDMxMTAvBgNV
BAMTKDJEOTk1MzY4Rjc0OTA5OUZFQ0I1M0RDRThCM0ZFQzVGMDMyREI0MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPb1ybxhFqxH+3wafEotv83YA9
bU0PABJUc3DP4/v+slhWGhu/a8vaYO/capnIlqJGVAW7iYhvfAYobyZQVEUARFyW
JnUvGVHeHjmvWj9OBqL8/pY0O+JfiTwxRzcuJV/969dg2umbC+MGK8bSgC+pOg3p
HmprRpOu0OOyZQHWGZ6BkLQ7mCc37qSKzHewzT6VjAks/0rjqPXHiPrkubbF8Dci
TKpF2STQ5tt9BeBUHaV0RWhdBjBVqNhtxoGm9ft5RQNFm7Q0gZS7kM/vYWClKBLL
z4UlktkCj1zInqNz0HqjC5ICJTeW6PWvUBRlpa6vqx66ZBGQa9B1EIYLwVGzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULZlTaPdJCZ/stT3Oiz/sXwMttDMwHwYDVR0j
BBgwFoAUYDWIhL8PHE0wJLcJ3Vc01Th2PuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDlCVkY5WGNSeVdzd2pNc2hlVWlTTDMxQlNKUUZ3UFV5VlNmSlRGMmM4
eE0vMC82MDM1ODg4NEJGMEYxQzREMzAyNEI3MDlERDU3MzRENTM4NzYzRUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMzU4ODg0QkYwRjFDNEQz
MDI0QjcwOURENTczNEQ1Mzg3NjNFRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDlCVkY5WGNSeVdzd2pNc2hlVWlTTDMxQlNKUUZ3UFV5VlNmSlRGMmM4eE0vMC82
MDM1ODg4NEJGMEYxQzREMzAyNEI3MDlERDU3MzRENTM4NzYzRUVDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAPlTzvpxGtYifAT9CLJ4YGPHeib+Mjq3ui89LpjaKdX42VQ5svWZONvMDWaA
fCbumEIhIIo9rtTSBtyt5gY0hu2Vp9JH/f0LMjJy1sbQUDKrJo+mFwJ/xkJxOthc
tNbnKbyIUTqe7d8p5841uN3IXDA6bzcwXZIO303KqRfjr2x0hIurkQ6FXqATXKTc
9MkrOjl0dJwq3dF1Fi0jphZdHUqPUvoVEwOjX2n38reeJpygUvAKdITrGMf+bNwd
5z++6QN0TVVmmZzY1TaaK+9HfszbsnWR6MkHSZADhpyfP3Bp6TBhLCSg+DljVd/b
iOzgUdXeDpLSiP+Rww3UVOxRFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:49 2026 by rpki-client