Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          9W62XWkMbyi8drFolzeagsLgDUfysM15M7GhmrgATj0=
Subject key identifier:   BB:70:74:E5:9F:DE:DC:5B:D4:B5:67:B6:AA:D3:3F:5A:D9:AA:9D:29
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       73AE2B811C2DE3C0893C523DF4282F2B56457A9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          01A9
Signing time:             Thu 23 Jul 2026 15:21:15 +0000
Manifest this update:     Thu 23 Jul 2026 15:16:15 +0000
Manifest next update:     Fri 24 Jul 2026 18:23:15 +0000
Files and hashes:         1: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: efCaDnSNHaCNsUZJZ2BRsQIelnrquDotvL3pslOlzNQ=)
                          2: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: Kmsr+UXvwv+S9FvagZVWzDR/evsnsCJePVvlO07EQgE=)
                          3: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: N+XUMWcII3BAqNP4TTCzSCeQwh2jC9OmWVd+xl4z8DY=)
                          4: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: /vSap4te8guh+qAqqLmYZImHb8QA8jgej13kbYH5e3Y=)
                          5: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: /drp7PSezGS1qNVeVaeeIfgrdM+Z6cmjl/BZw4KIz1M=)
                          6: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: LyeM55h+f+yfzNTGWUrTsVrUxrvRTN+/Fl74HTUvAlM=)
                          7: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=)
                          8: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: dZH8ZxBMw0oZDUrL/jw2vuUaVyuoflPFTd7ol71clGw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ae:2b:81:1c:2d:e3:c0:89:3c:52:3d:f4:28:2f:2b:56:45:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Jul 23 15:16:15 2026 GMT
            Not After : Jul 24 18:23:15 2026 GMT
        Subject: CN=BB7074E59FDEDC5BD4B567B6AAD33F5AD9AA9D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:62:82:ae:23:f1:95:3f:fd:7c:87:66:93:
                    ae:d5:88:a3:f9:92:0c:be:ae:34:cc:d1:dd:0c:0c:
                    d6:dd:9b:c1:a2:88:d5:92:94:2c:5d:b7:93:e3:b7:
                    e0:ff:0d:f8:24:64:50:79:b1:03:ab:c2:2d:c0:99:
                    e6:b4:d6:9a:ee:7b:56:89:0f:98:94:2a:70:50:9b:
                    53:d9:39:93:e8:a5:03:80:43:ca:4e:cb:d7:87:a2:
                    be:13:d8:a1:2c:3f:ab:82:b6:90:12:f2:40:a2:53:
                    96:27:5a:ad:40:47:69:6e:69:bb:ec:3f:6d:dc:2f:
                    b8:9b:5b:c5:b1:3f:33:98:81:98:08:91:73:bb:30:
                    63:70:fc:2e:ff:4a:4f:0d:c1:cb:c7:e7:22:fe:df:
                    bd:f9:22:81:fc:23:64:01:f7:dc:c0:9d:ea:58:1f:
                    b6:7d:93:5b:d6:65:8b:12:67:93:e6:cd:17:34:10:
                    2b:fd:39:6c:8d:53:9c:f5:3d:67:16:28:98:42:52:
                    8f:cc:5e:1a:f2:be:fc:58:28:a0:92:59:6c:03:c4:
                    ac:16:96:01:9e:a9:0f:6f:66:04:a2:26:78:06:df:
                    d9:eb:2f:1d:a9:ab:02:7a:4f:82:aa:93:f4:04:b0:
                    fd:3d:d5:9d:c7:76:39:8e:20:f9:91:27:61:8a:33:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:74:E5:9F:DE:DC:5B:D4:B5:67:B6:AA:D3:3F:5A:D9:AA:9D:29
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:33:b0:91:c3:dd:72:da:3a:05:1f:6d:f1:51:09:cb:4d:0e:
         a9:91:66:c2:a6:54:20:9a:80:68:97:81:63:7c:ec:41:e4:fe:
         67:2c:c0:5e:7c:fb:1a:94:ef:81:9d:00:03:1d:a4:55:13:6a:
         a4:ec:c8:f3:e4:83:c6:61:e2:7d:ac:80:2e:6f:5f:71:c0:4c:
         a4:5f:20:4f:89:08:79:a5:dc:09:88:47:6a:0e:50:e1:0e:49:
         67:a7:28:27:6a:e1:9e:82:19:1b:d1:fc:0c:c7:05:8c:d3:8b:
         1b:51:97:b7:8a:5a:31:64:02:b5:e5:c0:a6:80:8f:89:2c:56:
         ca:b4:90:58:da:7d:7d:a9:b1:3c:71:f2:d3:7c:13:63:90:1e:
         b0:5f:2f:d3:4b:f7:d0:99:5b:8e:1e:01:9f:98:e7:b4:48:2e:
         93:d1:a5:dc:b7:86:4c:d7:92:5a:e0:09:d6:aa:0f:21:f0:f9:
         72:74:73:f1:e6:bb:20:62:6f:ed:fd:dd:47:62:b5:a4:f9:b4:
         68:22:bf:4a:53:b3:96:b1:af:86:18:63:dd:5c:a9:c6:79:d2:
         50:35:ce:bc:6e:f3:d3:22:43:7f:89:14:fe:b5:0e:d0:52:24:
         c0:34:4f:d1:98:17:4f:6f:1f:4a:db:3d:a1:d8:d0:26:4a:cd:
         73:59:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:52 2026 by rpki-client