Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft
File:                     C376E26BEB77393E68155940A07E68C0988916F7.mft (raw, json)
Hash identifier:          +x9Kf/PB54XMFy5IqDjhnwHHu13qk/BouEj+9pElm0Q=
Subject key identifier:   61:41:95:C3:D9:40:17:19:F8:F6:D4:C6:C0:C8:54:C0:F1:4D:7D:F8
Authority key identifier: C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7
Certificate issuer:       /CN=C376E26BEB77393E68155940A07E68C0988916F7
Certificate serial:       03415758E96BDD475E6DAA04A9514503368DD128
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft
Manifest number:          72
Signing time:             Thu 26 Mar 2026 05:27:42 +0000
Manifest this update:     Thu 26 Mar 2026 05:22:42 +0000
Manifest next update:     Fri 27 Mar 2026 08:19:42 +0000
Files and hashes:         1: 3137372e32322e3139312e302f32342d3234203d3e20323633313231.roa (hash: 5WrfoYsb/8m60etNDNk3fX8tPU6Jb8VNtnZdD+uEZIU=)
                          2: 3137372e32322e3139302e302f32342d3234203d3e20323633313231.roa (hash: tMjR0FPpD4pmgBFg/s5YJx2BHyOKj1vHT6Oy/Y5CNyE=)
                          3: 3137372e32322e3138392e302f32342d3234203d3e20323633313231.roa (hash: WXBJcwOZbRC5k0wiPE8iMF7IIHaVK8jnQD95Ix3raQc=)
                          4: C376E26BEB77393E68155940A07E68C0988916F7.crl (hash: 50f5ur2qk0ats4vess7JCZxu1SC5m56zU1Iw0jgtKxg=)
                          5: 3137372e32322e3138382e302f32342d3234203d3e20323633313231.roa (hash: SBsP/ob5lKGPkgNeLYzQL/WERV1syqPtKG6ufxQsThM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl
                          rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:41:57:58:e9:6b:dd:47:5e:6d:aa:04:a9:51:45:03:36:8d:d1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C376E26BEB77393E68155940A07E68C0988916F7
        Validity
            Not Before: Mar 26 05:22:42 2026 GMT
            Not After : Mar 27 08:19:42 2026 GMT
        Subject: CN=614195C3D9401719F8F6D4C6C0C854C0F14D7DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:56:30:e1:bb:27:05:07:7a:1e:11:5f:88:
                    0b:ae:b1:17:4b:20:53:43:15:e9:12:6b:72:bf:d1:
                    1f:f8:55:df:4b:1c:d1:df:87:58:fd:f1:9a:f7:0d:
                    17:2f:41:2c:d5:79:13:f4:90:d7:f5:81:81:c0:78:
                    fb:62:63:63:c8:69:60:7c:08:07:5f:8d:cf:41:10:
                    8b:15:39:a7:38:db:b0:80:ba:e0:09:6d:67:f4:65:
                    95:3a:ae:2a:2b:45:77:32:67:f0:45:4f:9d:a2:f7:
                    e4:16:23:d9:23:ed:28:8d:08:21:6e:70:d4:88:e9:
                    dd:bd:16:3b:f8:9c:4a:99:48:60:c3:d6:12:15:25:
                    36:d4:39:db:4a:30:c3:d8:86:2f:ad:0d:7b:84:46:
                    de:3a:c3:77:02:08:38:1a:5a:bc:4d:bf:78:a4:8e:
                    32:9a:2f:75:6b:76:d9:0d:8f:28:b4:f5:17:0c:0b:
                    9e:2d:3a:a9:a3:b1:aa:bc:b6:8f:4a:79:64:0e:86:
                    c5:e6:ac:0a:66:0d:b1:cf:db:75:55:a2:77:54:a5:
                    86:35:0d:84:b7:e4:96:86:cc:b8:82:e8:07:3b:ec:
                    91:b9:61:06:30:7f:77:58:be:f2:c9:41:2e:df:22:
                    33:ab:b4:4e:58:cc:b9:a3:6c:97:f8:72:20:12:e2:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:41:95:C3:D9:40:17:19:F8:F6:D4:C6:C0:C8:54:C0:F1:4D:7D:F8
            X509v3 Authority Key Identifier:
                keyid:C3:76:E2:6B:EB:77:39:3E:68:15:59:40:A0:7E:68:C0:98:89:16:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C376E26BEB77393E68155940A07E68C0988916F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqzufVxWNdHp9EwNwAVAuSquJbygTA3abH8AZAmrBqZt/0/C376E26BEB77393E68155940A07E68C0988916F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:60:c0:38:67:ec:d5:f4:79:42:da:85:74:26:6d:e4:34:
         79:d1:0f:e1:78:f3:c6:ea:41:02:6b:04:c2:6f:7c:c6:dd:00:
         67:68:03:98:39:e4:63:da:9d:c8:bf:13:68:3e:cd:1b:e4:e4:
         a9:c2:c3:86:75:44:cc:fa:08:bc:33:50:6c:82:ab:b8:22:73:
         0a:c4:0c:46:a4:fe:7c:80:a1:7d:37:13:50:33:a3:49:2a:fe:
         9f:8f:69:32:ee:82:42:2d:d9:c8:2a:bf:44:70:fa:b7:f2:6e:
         fd:15:bc:4a:96:09:28:22:32:39:8d:dc:44:e9:95:1e:0d:15:
         98:f3:cb:cf:08:d7:98:b5:5d:31:3e:0c:19:14:cf:09:d1:6a:
         e9:32:d9:58:d2:3d:18:36:24:94:ea:27:f6:df:3c:3d:07:5f:
         e0:15:43:db:ac:80:05:04:24:9b:99:42:80:c0:98:e2:a0:50:
         f0:31:95:64:48:f8:78:5c:24:e1:10:1c:b2:4f:64:e2:1b:37:
         e7:04:34:0c:2f:6c:63:88:09:6a:31:13:98:57:98:3b:ac:45:
         51:ca:34:68:e1:4c:63:31:a1:82:31:7e:1d:8b:fe:43:8e:8b:
         12:16:fb:0c:8b:22:42:19:3c:d7:9f:46:77:c7:5c:46:ba:da:
         87:6a:94:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA0FXWOlr3UdebaoEqVFFAzaN0SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NkUyNkJFQjc3MzkzRTY4MTU1OTQwQTA3RTY4QzA5
ODg5MTZGNzAeFw0yNjAzMjYwNTIyNDJaFw0yNjAzMjcwODE5NDJaMDMxMTAvBgNV
BAMTKDYxNDE5NUMzRDk0MDE3MTlGOEY2RDRDNkMwQzg1NEMwRjE0RDdERjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfL1Yw4bsnBQd6HhFfiAuusRdL
IFNDFekSa3K/0R/4Vd9LHNHfh1j98Zr3DRcvQSzVeRP0kNf1gYHAePtiY2PIaWB8
CAdfjc9BEIsVOac427CAuuAJbWf0ZZU6riorRXcyZ/BFT52i9+QWI9kj7SiNCCFu
cNSI6d29Fjv4nEqZSGDD1hIVJTbUOdtKMMPYhi+tDXuERt46w3cCCDgaWrxNv3ik
jjKaL3VrdtkNjyi09RcMC54tOqmjsaq8to9KeWQOhsXmrApmDbHP23VVondUpYY1
DYS35JaGzLiC6Ac77JG5YQYwf3dYvvLJQS7fIjOrtE5YzLmjbJf4ciAS4nNZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYUGVw9lAFxn49tTGwMhUwPFNffgwHwYDVR0j
BBgwFoAUw3bia+t3OT5oFVlAoH5owJiJFvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF6dWZWeFdOZEhwOUV3TndBVkF1U3F1SmJ5Z1RBM2FiSDhBWkFtckJx
WnQvMC9DMzc2RTI2QkVCNzczOTNFNjgxNTU5NDBBMDdFNjhDMDk4ODkxNkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNzZFMjZCRUI3NzM5M0U2
ODE1NTk0MEEwN0U2OEMwOTg4OTE2RjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHF6dWZWeFdOZEhwOUV3TndBVkF1U3F1SmJ5Z1RBM2FiSDhBWkFtckJxWnQvMC9D
Mzc2RTI2QkVCNzczOTNFNjgxNTU5NDBBMDdFNjhDMDk4ODkxNkY3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWTxgwDhn7NX0eULahXQmbeQ0edEP4XjzxupBAmsEwm98xt0AZ2gDmDnkY9qd
yL8TaD7NG+TkqcLDhnVEzPoIvDNQbIKruCJzCsQMRqT+fIChfTcTUDOjSSr+n49p
Mu6CQi3ZyCq/RHD6t/Ju/RW8SpYJKCIyOY3cROmVHg0VmPPLzwjXmLVdMT4MGRTP
CdFq6TLZWNI9GDYklOon9t88PQdf4BVD26yABQQkm5lCgMCY4qBQ8DGVZEj4eFwk
4RAcsk9k4hs35wQ0DC9sY4gJajETmFeYO6xFUco0aOFMYzGhgjF+HYv+Q46LEhb7
DIsiQhk8159Gd8dcRrrah2qU4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:36 2026 by rpki-client