Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          oJPSuw1WwEE+Rtsa5u+NBEWFWWZ6dNqoiZsZc+3dqbc=
Subject key identifier:   EE:A5:E4:8E:2F:0E:6F:BC:C3:16:8E:67:94:10:F7:D2:48:71:4D:AE
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       7197D704EA452C7294B09589E0583643A06C7BEB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          0307
Signing time:             Fri 24 Jul 2026 16:23:50 +0000
Manifest this update:     Fri 24 Jul 2026 16:18:50 +0000
Manifest next update:     Sat 25 Jul 2026 17:49:50 +0000
Files and hashes:         1: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: 8o/NxD+/BFG/7ATeK1/NGnbyatDcg9ZUtDfol5ACC24=)
                          2: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:d7:04:ea:45:2c:72:94:b0:95:89:e0:58:36:43:a0:6c:7b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Jul 24 16:18:50 2026 GMT
            Not After : Jul 25 17:49:50 2026 GMT
        Subject: CN=EEA5E48E2F0E6FBCC3168E679410F7D248714DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3b:38:18:73:3e:95:15:85:a5:99:42:70:b4:
                    e4:fd:51:da:aa:0e:90:b3:66:ad:85:29:12:93:05:
                    5c:9b:d6:d0:c3:4a:c8:60:8e:3d:8d:2f:25:25:c1:
                    84:1d:e8:68:33:79:be:1f:1a:37:c5:26:c2:a4:3d:
                    1d:f8:ac:9e:e0:59:ed:92:7f:44:97:0b:eb:24:56:
                    b8:3f:e5:3e:3d:dd:a9:9b:0c:25:fe:9d:df:9f:0e:
                    07:d4:11:ed:0c:f5:5b:77:17:46:b7:0e:b5:2c:3e:
                    9d:f2:4e:b4:1f:f9:03:4d:a8:e2:c2:76:06:23:7c:
                    e9:8b:72:f5:18:59:c1:ef:1d:7b:08:99:92:50:9a:
                    bc:2b:0f:87:a0:94:7d:39:9f:de:f5:73:dd:3e:d8:
                    b7:8e:26:0d:fe:e4:63:ef:c8:81:1a:58:3d:00:76:
                    78:46:4b:46:93:fb:d7:33:55:c9:73:f9:2f:6f:97:
                    e9:f6:ee:6b:3a:e7:ae:c1:3c:56:32:59:ab:49:8d:
                    82:0b:3f:3b:70:b5:ad:d9:3d:ca:9c:d3:4e:b3:11:
                    5a:b9:b6:3c:6f:08:4f:15:75:1b:61:62:a1:91:35:
                    61:7d:09:b3:a5:87:f8:ef:fc:18:ef:0e:59:2e:a7:
                    3f:c8:63:d1:f2:81:ab:9e:b3:85:ce:bc:9d:9e:a6:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A5:E4:8E:2F:0E:6F:BC:C3:16:8E:67:94:10:F7:D2:48:71:4D:AE
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:a8:2e:a2:93:93:95:81:5b:a4:db:58:70:78:60:03:d0:
         c4:a6:72:84:7f:a4:b2:e8:d7:54:b4:df:e5:b1:4c:b0:0a:85:
         50:22:0b:ab:8a:e5:c4:3f:e0:62:56:cb:3f:65:9e:93:a9:d2:
         11:c9:34:61:5d:30:91:5d:f8:aa:2d:9f:77:34:28:aa:07:e7:
         2a:3b:46:75:5f:6c:5d:59:4c:14:b1:75:32:b2:bb:13:a4:e2:
         11:02:58:38:da:3c:ed:c3:e3:51:38:24:f8:c8:12:5a:80:87:
         91:15:11:51:88:e4:b1:53:e2:d6:6a:91:7d:9e:f9:c9:15:be:
         d9:38:b8:4b:5d:b6:ff:c0:a6:22:a8:0f:d1:67:1e:cd:94:14:
         cb:e6:33:74:53:0b:d1:6b:12:0d:d6:be:2d:86:50:e7:cc:2f:
         20:f0:0f:90:8f:5e:fb:7c:70:f2:7c:37:2e:97:fb:e7:2e:89:
         72:4f:e7:f8:05:ab:4d:a8:24:28:c8:ce:ab:0a:e9:9c:ae:65:
         64:44:ad:c1:b1:4a:b4:b1:fb:e8:4c:6b:95:7d:d8:ef:6e:d2:
         6d:86:2a:94:16:84:ed:1c:2c:17:59:3d:99:99:7c:fe:38:95:
         5f:52:73:2c:08:f6:73:09:a4:a2:2b:34:8e:3a:4e:a2:47:bf:
         8b:02:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:58:22 2026 by rpki-client