Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          A6yl2rUBR2lVH1v8jo5EmpEU5YCnJsBqXQo8Nl2x+74=
Subject key identifier:   2B:C1:BC:FF:96:9F:1B:A4:DB:38:13:9C:6A:C9:72:EA:6F:93:D1:D6
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       3F1CC8658D52EBB30D27DF0843195C439C8D538E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          04E3
Signing time:             Fri 24 Jul 2026 02:26:33 +0000
Manifest this update:     Fri 24 Jul 2026 02:21:33 +0000
Manifest next update:     Sat 25 Jul 2026 04:44:33 +0000
Files and hashes:         1: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: mFtz3DiVtTRV//AJTwvqGoLOjrPqT5Z6JSp4fCiILFg=)
                          2: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: ayKHkoUaXDc+dlhSGRGyDF6TYdoTV7sf4lmoMEMC7N4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:c8:65:8d:52:eb:b3:0d:27:df:08:43:19:5c:43:9c:8d:53:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Jul 24 02:21:33 2026 GMT
            Not After : Jul 25 04:44:33 2026 GMT
        Subject: CN=2BC1BCFF969F1BA4DB38139C6AC972EA6F93D1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:ea:26:c1:2f:c8:0e:24:0b:12:c7:1d:f6:
                    e8:cf:8a:92:a4:0d:58:8c:bd:ec:b0:df:20:be:fd:
                    86:5c:bb:0d:1e:77:db:bc:76:79:c3:e9:ba:29:4e:
                    32:36:4b:2a:a9:67:ff:7a:15:19:9e:3e:59:02:ff:
                    34:0b:79:03:69:91:36:db:0b:5a:c7:b5:a7:ff:e5:
                    23:73:0d:25:d4:b1:55:4b:a4:d3:57:d5:2c:58:fb:
                    3c:e7:d6:6c:c0:b5:9f:db:28:a4:09:c3:ea:86:f3:
                    18:03:cd:18:8c:b2:09:6c:5b:03:0c:f0:a1:37:35:
                    9d:9f:d8:57:2d:13:e9:ee:b5:e8:ec:32:bd:e6:94:
                    7c:38:25:c6:46:f2:1a:19:d3:32:da:30:4f:03:c5:
                    86:93:10:e1:85:9f:83:e0:3d:e5:95:92:a7:cc:6d:
                    84:6d:68:bd:05:89:0d:90:3a:ec:ee:fe:02:b0:fc:
                    cd:f2:0b:fa:cc:9d:49:d0:36:f6:e8:86:60:76:0b:
                    7a:1c:cc:53:2e:0f:05:64:f9:ba:9a:d2:b5:6d:3e:
                    b6:b8:84:76:f0:16:a3:45:42:7c:85:9a:07:f4:16:
                    25:6c:76:86:3d:57:71:a1:05:b3:52:73:64:c1:19:
                    01:71:98:33:09:a8:1e:97:59:2b:a1:f8:6d:20:bf:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:BC:FF:96:9F:1B:A4:DB:38:13:9C:6A:C9:72:EA:6F:93:D1:D6
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:be:64:eb:1e:0f:95:40:47:0d:d6:aa:e9:c9:4f:cf:70:69:
         73:bc:b4:05:a9:94:52:c2:7f:98:c0:4f:0d:af:ea:f5:0d:e6:
         da:85:f7:cf:53:6f:c3:7f:61:b9:d6:92:23:c7:81:04:4f:6b:
         b5:39:5b:fa:18:ef:39:99:e5:57:29:d7:06:34:77:d7:a0:9d:
         04:98:b1:3a:ae:05:4c:96:f5:bf:03:85:3a:b9:c8:24:f5:b7:
         69:67:41:ae:b6:0a:bb:72:c3:70:36:db:b1:b2:1c:cc:be:f8:
         15:44:0b:7d:57:d4:19:93:d3:d3:72:79:b0:58:af:fb:fa:61:
         af:c7:ed:57:33:30:bd:dd:1c:64:e8:d2:82:ab:82:5f:3a:1b:
         10:7a:80:5f:fd:d1:85:ea:c7:0b:8f:57:87:10:4b:c7:c5:87:
         5f:1f:d7:a5:21:db:43:5c:06:47:3b:6d:4d:02:d3:c4:17:05:
         f9:da:f7:20:d3:8f:7b:24:18:0b:6f:b4:ac:01:29:f5:8d:6a:
         50:9c:d2:6f:14:f5:60:2b:f1:f0:40:27:17:dd:16:db:6e:69:
         3d:0c:a2:7a:c1:65:1e:86:6e:7b:16:84:47:2d:39:87:b7:eb:
         96:59:3f:1b:13:7b:10:39:d9:ff:1b:a8:ff:ba:a6:f8:b1:6a:
         87:11:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:46 2026 by rpki-client