Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft
File:                     3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft (raw, json)
Hash identifier:          5J77JUcb3KUkosF+zrw+qMFoCDlFD/OPbCg54zQIC1o=
Subject key identifier:   4E:3B:22:9C:C2:37:34:A8:8F:B6:F0:54:97:E5:15:71:29:FF:24:B2
Authority key identifier: 3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07
Certificate issuer:       /CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107
Certificate serial:       2B1C9F2A3467721475FD592BB4ABAAF844018A86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft
Manifest number:          0121
Signing time:             Tue 27 Oct 2026 11:40:20 +0000
Manifest this update:     Tue 27 Oct 2026 11:35:20 +0000
Manifest next update:     Wed 28 Oct 2026 13:56:20 +0000
Files and hashes:         1: 323830343a373463383a3a2f33322d3334203d3e20323731303033.roa (hash: r0QICRt+/jwvPgp0AVQL1jdP/CNC/Z7OVGt8PpqIa1o=)
                          2: 3137372e3132392e3130302e302f32322d3234203d3e20323731303033.roa (hash: beOMvTvufasshZAEt2fQbCS4E/KMRJvclckEAXlFdas=)
                          3: AS271003.asa (hash: DdwOqzdIQONM3SzSV/eUGb8aEvLVu2chhd4EmK0okYw=)
                          4: 3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl (hash: T0U/Mstp4HpPTIib5KK3b9Y+1L0O04p2ZiSWUV+quQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl
                          rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 13:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1c:9f:2a:34:67:72:14:75:fd:59:2b:b4:ab:aa:f8:44:01:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DE1F96CF0A9E750DD54B28CE66E521BC301C107
        Validity
            Not Before: Oct 27 11:35:20 2026 GMT
            Not After : Oct 28 13:56:20 2026 GMT
        Subject: CN=4E3B229CC23734A88FB6F05497E5157129FF24B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:a2:d0:ce:00:91:b4:68:ad:bc:76:d8:f4:
                    4d:9d:58:3b:1d:52:a2:b3:e6:5c:f2:de:9e:0e:57:
                    aa:23:90:8a:81:60:88:6d:fa:bf:4b:ac:f3:c7:09:
                    be:ac:03:f4:c0:f3:a2:3f:05:26:ed:84:3f:4a:dc:
                    60:f2:8a:3f:83:71:15:9a:d1:57:2e:32:78:77:fb:
                    fc:9d:e6:ad:06:f3:ca:4a:c9:ec:b0:6b:28:20:b2:
                    18:c7:83:d1:33:ec:a7:39:36:12:70:af:d7:6d:c6:
                    e6:54:6b:95:49:b1:e8:1b:bf:ef:26:92:5f:97:cf:
                    99:a6:0d:78:e8:28:94:ed:7d:9c:39:16:7d:c4:7b:
                    91:7e:b1:c9:4a:6e:6f:ad:5c:b1:88:db:7b:7d:46:
                    7b:93:7d:db:80:9d:0b:8e:4c:60:20:85:e6:d5:9a:
                    76:73:a0:17:55:b0:5e:79:f7:0e:ff:c6:3f:ce:af:
                    f2:90:45:73:bf:5f:8f:a0:fd:a7:7b:08:74:ac:a0:
                    5c:24:4f:ef:c3:ef:60:cc:61:28:b9:79:96:4f:44:
                    0a:13:ea:23:51:d2:08:21:bf:61:db:b4:83:59:7a:
                    dc:58:bb:81:6d:77:2e:80:d3:98:c1:97:2a:3b:08:
                    db:8d:27:9a:36:03:fa:f6:b7:54:31:5c:7c:ad:9e:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:22:9C:C2:37:34:A8:8F:B6:F0:54:97:E5:15:71:29:FF:24:B2
            X509v3 Authority Key Identifier:
                keyid:3D:E1:F9:6C:F0:A9:E7:50:DD:54:B2:8C:E6:6E:52:1B:C3:01:C1:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBdbB4XJAG5K9fUktp3r37p9zNe7LiJzX5QpnVL7xcbg/0/3DE1F96CF0A9E750DD54B28CE66E521BC301C107.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:74:6f:6c:1b:e9:b3:38:5b:9b:c8:f1:86:2d:8b:59:88:69:
         e5:64:76:55:6a:03:38:c8:6c:e4:a0:c5:1b:b1:08:bf:eb:ae:
         ed:24:8c:6b:31:f6:0d:22:dd:fc:30:29:e5:7a:64:bb:b5:0b:
         3b:d4:d4:89:99:04:93:f3:cd:2f:6f:8f:76:51:6d:62:6b:00:
         a1:fb:81:39:33:52:01:ac:51:0c:92:ef:5c:85:58:96:d5:1a:
         c9:1a:fe:12:74:b5:0b:45:d4:53:17:62:c5:e5:98:ec:70:ce:
         15:04:30:74:da:56:6e:2c:78:0a:48:9d:9a:78:26:ab:a0:c7:
         14:84:fc:46:5c:dd:b4:1e:1c:9e:33:59:41:1e:e2:43:bc:9f:
         1d:61:be:a9:23:b4:a8:9c:df:69:a0:35:32:16:5c:05:53:94:
         e0:d1:d5:27:94:92:f5:9e:e8:1d:96:80:db:49:a5:8b:ba:81:
         ed:4e:2b:10:16:57:b5:ec:57:1c:e3:00:38:0c:60:c2:8c:2f:
         18:10:02:00:f3:4a:56:6c:3f:37:60:df:45:2e:f6:0d:bb:b3:
         d9:c9:c3:0b:22:02:76:47:4c:b0:3a:d3:12:20:8c:6e:c8:22:
         eb:69:99:a0:24:8b:29:f0:d1:a4:82:b5:87:4d:94:99:8b:4b:
         42:1b:15:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKxyfKjRnchR1/VkrtKuq+EQBioYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RFMUY5NkNGMEE5RTc1MERENTRCMjhDRTY2RTUyMUJD
MzAxQzEwNzAeFw0yNjEwMjcxMTM1MjBaFw0yNjEwMjgxMzU2MjBaMDMxMTAvBgNV
BAMTKDRFM0IyMjlDQzIzNzM0QTg4RkI2RjA1NDk3RTUxNTcxMjlGRjI0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+aLQzgCRtGitvHbY9E2dWDsd
UqKz5lzy3p4OV6ojkIqBYIht+r9LrPPHCb6sA/TA86I/BSbthD9K3GDyij+DcRWa
0VcuMnh3+/yd5q0G88pKyeywayggshjHg9Ez7Kc5NhJwr9dtxuZUa5VJsegbv+8m
kl+Xz5mmDXjoKJTtfZw5Fn3Ee5F+sclKbm+tXLGI23t9RnuTfduAnQuOTGAghebV
mnZzoBdVsF559w7/xj/Or/KQRXO/X4+g/ad7CHSsoFwkT+/D72DMYSi5eZZPRAoT
6iNR0gghv2HbtINZetxYu4Ftdy6A05jBlyo7CNuNJ5o2A/r2t1QxXHytnqKrAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTjsinMI3NKiPtvBUl+UVcSn/JLIwHwYDVR0j
BBgwFoAUPeH5bPCp51DdVLKM5m5SG8MBwQcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JkYkI0WEpBRzVLOWZVa3RwM3IzN3A5ek5lN0xpSnpYNVFwblZMN3hj
YmcvMC8zREUxRjk2Q0YwQTlFNzUwREQ1NEIyOENFNjZFNTIxQkMzMDFDMTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNERTFGOTZDRjBBOUU3NTBE
RDU0QjI4Q0U2NkU1MjFCQzMwMUMxMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0JkYkI0WEpBRzVLOWZVa3RwM3IzN3A5ek5lN0xpSnpYNVFwblZMN3hjYmcvMC8z
REUxRjk2Q0YwQTlFNzUwREQ1NEIyOENFNjZFNTIxQkMzMDFDMTA3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmXRvbBvpszhbm8jxhi2LWYhp5WR2VWoDOMhs5KDFG7EIv+uu7SSMazH2DSLd
/DAp5Xpku7ULO9TUiZkEk/PNL2+PdlFtYmsAofuBOTNSAaxRDJLvXIVYltUayRr+
EnS1C0XUUxdixeWY7HDOFQQwdNpWbix4Ckidmngmq6DHFIT8RlzdtB4cnjNZQR7i
Q7yfHWG+qSO0qJzfaaA1MhZcBVOU4NHVJ5SS9Z7oHZaA20mli7qB7U4rEBZXtexX
HOMAOAxgwowvGBACAPNKVmw/N2DfRS72Dbuz2cnDCyICdkdMsDrTEiCMbsgi62mZ
oCSLKfDRpIK1h02UmYtLQhsVIg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:10:17 2026 by rpki-client