Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
File:                     BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft (raw, json)
Hash identifier:          ACepaICjUkcvGDib4XRMf8MpnN+eO9X5cbDJzQJ4tXc=
Subject key identifier:   D0:1F:62:05:C8:B6:37:9D:C0:0C:70:86:52:DA:C7:E7:90:44:CE:D8
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Certificate issuer:       /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial:       2E8270D9AE89425F8EE7C62BC088EDE648898D9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
Manifest number:          BE
Signing time:             Thu 26 Mar 2026 09:58:52 +0000
Manifest this update:     Thu 26 Mar 2026 09:53:52 +0000
Manifest next update:     Fri 27 Mar 2026 13:30:52 +0000
Files and hashes:         1: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (hash: QaEwq9CjYPQg9XB/xC9mJEcrxzexB7rgdQeR7cGgREo=)
                          2: BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl (hash: 8v34YI3wyZzu0SaAmAQ25MEv3Bepm4KnM4QJ8tA4MzI=)
                          3: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (hash: y1QhIZbdYepzcdoxIZqGNBMxC53wsudaiKNsqEV9cH0=)
                          4: 3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa (hash: /a2y4aWHo28lvVRWC/abKo7CnvEkblWEARGoZ2mTN+4=)
                          5: 3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (hash: J+2cGeedQSkQuUMX8IRAr/pw89GMZTOHvWopcXCptdg=)
                          6: 323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (hash: 5B/+vfFGdF3IJoTrS9TeBsQvxm7kgyg44LTsGmD5N98=)
                          7: 323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa (hash: pQdsswWDxVePBoPmNKpkVs2XaQl3ZUuXa6gWuMdedDU=)
                          8: 323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa (hash: k+owxz3l68cprZCV0+3obZmXyYo5ofrM4/CRu+pOcko=)
                          9: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (hash: UQXu2hQXHRN2je3euhZZyn9PUypsZVOOhjs5UK8A/bM=)
                          10: 323830343a333237383a3a2f34382d3438203d3e20323635303830.roa (hash: 3c35Sa1vs4KaYssZIcwRB2/bFofdsYxoZj9drQm8oag=)
                          11: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (hash: kgMnQvFQZ41NmFQiiTfB9er4UvYH9awM9HsX7+MBHPU=)
                          12: 323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa (hash: ytq9/JXR5mL09eUGCEFYeLztJqnlsf79ZDVOTj0Nt+A=)
                          13: 323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (hash: NSak5ER7+MAC0xU7nbH0pQGj8bMe+2muo5Do/DYaqX8=)
                          14: 323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (hash: bujYDSW3nhUTEnjiY26vATKpg4+iqTkcy30ORRNiXhM=)
                          15: 323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa (hash: QAGx0Yj4jJ2xXyr2rLQE4GAUGzzvVbqpP4lyFevhLng=)
                          16: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (hash: WrF8hQYEh/sGsppfpPesov8ngoxD0nE/e0IKlgdOawQ=)
                          17: 3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa (hash: P0h7l+SiWRbWxbwbdGayBtSVOA3PqofNYXoBFXjyF2Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
                          rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:82:70:d9:ae:89:42:5f:8e:e7:c6:2b:c0:88:ed:e6:48:89:8d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
        Validity
            Not Before: Mar 26 09:53:52 2026 GMT
            Not After : Mar 27 13:30:52 2026 GMT
        Subject: CN=D01F6205C8B6379DC00C708652DAC7E79044CED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:26:35:18:d5:96:88:ba:7e:e1:cf:8c:25:
                    b3:b7:ee:c0:85:c9:ec:57:a2:17:db:16:a7:ad:da:
                    01:31:5b:86:0d:ea:c9:6a:01:d6:19:f7:5d:ae:ec:
                    9d:81:63:d3:9d:a9:99:8e:cd:2c:4a:1f:a3:fd:33:
                    ab:07:f4:10:89:4b:81:9a:a8:1a:19:3f:2d:58:03:
                    08:a2:b7:46:41:95:ae:11:a5:c0:b3:42:79:11:07:
                    9d:a6:49:cf:c6:e9:08:4a:3b:73:1f:48:a2:e3:8b:
                    0f:f5:62:00:e3:84:e6:11:8a:6e:6c:22:49:3a:82:
                    49:c8:96:5d:30:a7:df:56:8d:2d:c8:a4:94:86:c1:
                    f3:00:39:84:80:46:c4:71:93:a5:00:ac:83:96:fe:
                    a5:41:d2:3f:d4:cf:ef:84:d5:8b:25:c6:f6:9c:cc:
                    04:f6:f6:94:9f:ca:96:ca:27:2f:1e:5e:61:47:60:
                    f4:42:0e:46:19:d8:3e:90:67:b9:ce:ae:65:2d:d2:
                    b6:6f:6c:0a:06:ff:77:99:76:42:4d:25:cc:1a:1b:
                    0e:45:2b:da:ed:6d:73:62:27:55:4c:44:94:35:c3:
                    04:95:c0:77:cc:d0:04:5d:28:eb:69:71:8d:2b:5b:
                    bd:dd:4b:ea:83:0e:cf:89:63:48:26:91:74:35:0e:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:62:05:C8:B6:37:9D:C0:0C:70:86:52:DA:C7:E7:90:44:CE:D8
            X509v3 Authority Key Identifier:
                keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:df:2f:d8:05:96:dc:27:0b:88:bc:96:3a:60:7c:68:5e:
         e7:72:f0:7c:8d:41:7f:69:11:06:49:3d:26:bb:cf:99:1e:30:
         bd:82:ef:09:d4:83:21:72:38:28:3b:fa:68:15:5f:90:b3:9b:
         f1:fc:f3:3e:42:93:0f:a0:b4:68:e6:54:47:ad:11:fc:1f:2d:
         7b:ed:58:76:cb:ff:c9:d4:ac:bf:46:f9:a0:7a:c6:2c:0e:08:
         d4:d1:8c:d1:29:4d:83:f3:f1:53:95:3c:b0:c4:61:27:8c:ec:
         c4:fe:e0:7f:5d:f3:ad:16:4a:69:52:98:61:cf:c1:ad:e8:4b:
         1d:e9:e9:72:73:9b:81:ec:29:4c:6a:27:02:80:3f:ed:2d:3c:
         98:8d:d6:49:bc:50:39:50:33:23:06:4a:29:52:4d:a9:dc:cd:
         1a:05:d2:a9:6f:51:09:c7:89:c7:53:0d:89:42:c2:5c:5b:8c:
         41:86:5e:e8:4a:5e:85:af:af:11:0d:00:d9:44:2a:81:62:a0:
         74:f9:c0:e8:23:db:9c:df:60:89:f4:4c:f3:87:c4:d0:35:ee:
         5c:06:92:0e:36:3a:56:cf:e5:6a:b9:12:c1:b0:e9:1a:89:09:
         c4:02:da:f3:8f:33:5f:ba:cc:2d:a0:d0:97:a0:ee:da:82:83:
         bc:a7:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:55 2026 by rpki-client