Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
File:                     3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft (raw, json)
Hash identifier:          v1z+BsVXvh0++GadkdEqgQ3OZBENWjdJ1+Dpqtixy4E=
Subject key identifier:   3C:B7:9C:30:17:6F:B0:CB:FA:43:11:09:97:C9:72:AE:01:B2:30:9C
Authority key identifier: 3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F
Certificate issuer:       /CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
Certificate serial:       5C31CB48EF5ED372770F630D14D2E8E092441DA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
Manifest number:          0147
Signing time:             Thu 23 Jul 2026 13:31:36 +0000
Manifest this update:     Thu 23 Jul 2026 13:26:36 +0000
Manifest next update:     Fri 24 Jul 2026 14:48:36 +0000
Files and hashes:         1: 3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl (hash: yqkgaiepntnMge0U4WK+3TwHOLuimTdBSxB/7oqNSvE=)
                          2: 323830343a393663383a3a2f33322d3438203d3e20323734333539.roa (hash: r9ehMvK9WF6GKjJBopb+wu5KC0PRaqLjucxj5Cw0zkw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl
                          rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 14:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:31:cb:48:ef:5e:d3:72:77:0f:63:0d:14:d2:e8:e0:92:44:1d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9ECE01CAB9C304842225F2554CF84F7910F83F
        Validity
            Not Before: Jul 23 13:26:36 2026 GMT
            Not After : Jul 24 14:48:36 2026 GMT
        Subject: CN=3CB79C30176FB0CBFA43110997C972AE01B2309C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:57:75:41:7c:f3:ab:93:15:27:e9:c6:5b:
                    6a:72:61:c9:2f:f6:9c:bd:e6:0d:7b:89:78:3e:4f:
                    c4:31:cd:19:9c:c6:9b:b7:f8:8f:5e:36:39:2b:5b:
                    99:49:71:b3:a5:35:66:99:68:ae:f1:dd:1b:13:56:
                    fe:f1:35:c9:5e:c4:d4:76:9e:47:24:25:77:31:4c:
                    ee:0b:a3:64:69:a7:8e:1d:ef:01:49:29:67:f7:e2:
                    66:7b:b6:5c:83:6f:a0:90:aa:1f:7b:01:af:66:7c:
                    b1:84:d8:f4:34:fa:1c:08:a8:67:0a:d5:7b:aa:dc:
                    a3:6a:7b:2e:3e:78:26:c2:b5:4f:9a:6f:58:95:59:
                    cc:f5:64:d7:0e:20:d7:80:21:5e:83:be:c5:25:ea:
                    38:32:05:7e:47:36:4b:5b:cd:4c:35:ed:9f:81:ef:
                    94:3d:ab:63:d9:ac:9f:6b:d0:b6:65:58:65:49:28:
                    ee:1b:9e:f9:08:43:f0:1e:e0:32:b0:35:1c:49:9b:
                    d6:db:b8:85:98:1d:0f:81:42:89:c8:ea:1c:fd:51:
                    38:4e:e8:6a:7f:18:d6:ec:2e:6c:60:95:08:9d:3e:
                    77:d9:67:04:df:a4:a7:48:be:2b:f3:84:a7:37:ad:
                    3e:68:2d:e1:ca:e5:5c:da:b1:56:1a:91:d6:75:91:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:9C:30:17:6F:B0:CB:FA:43:11:09:97:C9:72:AE:01:B2:30:9C
            X509v3 Authority Key Identifier:
                keyid:3A:9E:CE:01:CA:B9:C3:04:84:22:25:F2:55:4C:F8:4F:79:10:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9ECE01CAB9C304842225F2554CF84F7910F83F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bUzKemfjK84R5Mi2X3TH9XtdMLpPdWg5GiwwnhKRmYa/0/3A9ECE01CAB9C304842225F2554CF84F7910F83F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:31:69:a4:9c:f9:dc:7b:6c:8d:f9:5d:26:dd:73:c9:89:41:
         05:09:93:09:10:47:b1:70:8e:ed:08:4d:ed:cd:46:e6:32:ad:
         ad:3b:3b:17:60:1d:55:65:3a:23:50:8a:e7:7d:06:bd:ec:88:
         72:93:87:c5:9e:31:7b:fb:46:af:df:03:1c:6f:74:99:9e:3d:
         5b:2f:ff:97:6b:89:34:3a:e4:5e:0c:75:00:c1:1f:c9:6f:c4:
         4b:8d:b1:26:80:44:58:4e:be:3b:19:bf:20:f5:02:f4:1b:4a:
         2a:72:28:0a:90:68:0a:ad:fe:a8:86:fb:49:3d:1c:0b:65:aa:
         7c:0b:0e:ca:77:69:82:7d:7e:74:ff:27:36:18:9b:ec:d9:ce:
         e2:93:f5:be:57:34:b2:d8:98:1b:93:b6:c1:77:d7:f5:48:42:
         ed:7e:ce:0e:2d:ea:ab:99:59:c3:2f:43:3b:ed:a8:bb:41:dc:
         8f:55:5c:6e:10:bc:6a:f3:72:eb:71:7d:b5:17:f8:ae:db:e7:
         81:d5:aa:8d:99:cc:df:16:b2:62:9e:db:18:a1:66:04:3d:01:
         a2:3e:19:3f:59:08:53:bd:fe:c9:50:6c:2f:0b:78:06:68:04:
         39:38:a8:14:d1:63:54:0d:b9:68:89:5b:d6:13:04:89:9c:8b:
         bc:33:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:10:10 2026 by rpki-client