Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
File:                     DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft (raw, json)
Hash identifier:          aiyYz2P4/lNfq3zttqaQo0XqGqOa6sEUgPKSxfK7JUc=
Subject key identifier:   16:DF:AC:AE:52:14:5D:B6:E5:AE:95:5C:62:4A:4C:16:44:18:42:98
Authority key identifier: DF:83:23:2F:CD:7F:AE:C8:A4:B1:93:B1:0B:AC:48:F6:CE:63:12:B2
Certificate issuer:       /CN=DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2
Certificate serial:       65B0D1D92748C210C1204AE5BAA7329959A7F727
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
Manifest number:          EE
Signing time:             Thu 23 Jul 2026 16:12:23 +0000
Manifest this update:     Thu 23 Jul 2026 16:07:23 +0000
Manifest next update:     Fri 24 Jul 2026 18:54:23 +0000
Files and hashes:         1: DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl (hash: qeJdLj2XCZlNsUCz1LbGAgF878P2PPB4jDxhNjSVHEY=)
                          2: 3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa (hash: 71GXOovkfD4/F5vE5KwShK2i0t+eVqNHb8PxIbRjF8I=)
                          3: 323830343a6531383a3a2f33322d3438203d3e203532353434.roa (hash: U2kLN/W4F7tie2B7Td4HKkqC2GUTLt/fW2QqfIEdZKA=)
                          4: 3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa (hash: femmjrxINKICKTll6FMqC12Rauoo6AiE33D5WwEPQAw=)
                          5: 3137372e3135322e3135322e302f32312d3234203d3e203532353434.roa (hash: INJ+4mZg7DrSnmIM4YQkU6mGvs7SoWAIm+bGEb4boYY=)
                          6: 3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa (hash: YM81l7qXRR+sWhy8RwSOafUuaDfbK4TCUaiXw/uHV0g=)
                          7: 3137302e3234372e37322e302f32322d3234203d3e203532353434.roa (hash: Qrn68hWMekgsRVA0koOp4nSV7xI7AKjZ4sp7QGhptbQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl
                          rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b0:d1:d9:27:48:c2:10:c1:20:4a:e5:ba:a7:32:99:59:a7:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2
        Validity
            Not Before: Jul 23 16:07:23 2026 GMT
            Not After : Jul 24 18:54:23 2026 GMT
        Subject: CN=16DFACAE52145DB6E5AE955C624A4C1644184298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:8f:92:10:33:7d:09:8c:01:d4:28:ba:52:
                    4d:17:d9:05:71:d7:a3:05:b6:b9:2f:b3:85:0f:b3:
                    a9:32:66:c3:2b:9a:00:3d:08:d0:2b:a5:e6:45:4f:
                    ea:12:69:ac:2d:29:4f:33:b3:ff:f3:59:95:e5:11:
                    dc:10:d4:33:6c:ab:0c:ab:95:8a:23:f9:23:bd:5d:
                    ca:2c:f5:5e:03:b2:e6:86:19:44:d3:7a:f1:55:79:
                    30:92:0f:4b:91:ab:34:c6:60:16:f1:ef:4e:b6:db:
                    f5:82:be:4c:ba:df:b3:8b:57:1a:a0:23:06:67:45:
                    46:75:59:d5:ac:ba:ee:b8:a6:ca:03:8d:18:52:f0:
                    e8:e9:16:5a:1b:d9:dc:e7:e3:2c:57:2f:0d:d1:b9:
                    8d:97:89:95:db:bb:74:e6:24:5d:33:2c:e2:8a:bf:
                    37:d9:6e:10:fa:13:f4:e2:93:a6:36:83:dc:66:8d:
                    ab:6b:14:f9:a4:ca:3c:1b:6d:02:f8:16:29:bf:dd:
                    1f:ba:b3:23:6f:6e:aa:f5:fd:6a:50:2b:ae:17:8e:
                    7b:52:dc:cf:35:a1:0c:c4:01:52:21:f6:67:c2:de:
                    bc:86:17:8d:aa:39:59:05:08:f4:11:c8:76:77:86:
                    5c:9d:d2:e8:9d:4e:72:c7:28:cb:80:1f:56:4f:3d:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:AC:AE:52:14:5D:B6:E5:AE:95:5C:62:4A:4C:16:44:18:42:98
            X509v3 Authority Key Identifier:
                keyid:DF:83:23:2F:CD:7F:AE:C8:A4:B1:93:B1:0B:AC:48:F6:CE:63:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:83:7b:9d:53:bc:dd:97:86:f5:c2:af:d9:44:15:05:f3:
         c0:36:fe:21:56:0f:47:67:33:c8:32:ca:3d:b1:c7:28:05:ba:
         26:bd:31:77:a0:ad:8e:f4:9f:11:73:41:42:3a:4d:96:47:68:
         ac:79:5c:d0:16:be:4c:92:46:25:09:16:f4:7b:e4:2a:54:5b:
         18:3e:75:f2:38:47:f6:11:6c:b5:c4:50:0a:10:ed:71:ce:3b:
         4d:70:73:42:17:7f:ea:9c:dc:82:c6:c5:1b:6a:cc:20:7b:53:
         12:6a:d7:52:5e:25:48:e9:df:25:1b:93:34:23:c7:fc:0d:24:
         7f:76:7c:68:ab:7a:c2:a0:fd:a1:41:89:84:30:1f:58:e3:b4:
         c7:59:e8:ed:73:d1:ad:b0:aa:da:ee:9b:74:f1:0b:83:4c:ee:
         cc:c6:aa:c5:9e:e8:9c:e2:2b:58:1f:1d:d4:a7:76:f9:b3:5c:
         0b:fa:62:9f:c4:d6:18:dc:92:82:c8:e3:0d:76:df:96:49:9e:
         ec:8d:a4:5f:ed:2b:6b:5c:1c:13:62:6f:0a:f6:18:82:ff:34:
         e1:3f:6a:cf:05:af:bf:60:61:35:65:71:1d:77:c2:50:0f:8f:
         b0:36:2d:57:40:8f:24:61:a7:51:9c:5f:57:b5:fa:f5:f6:6f:
         c6:af:9b:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZbDR2SdIwhDBIErluqcymVmn9ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4MzIzMkZDRDdGQUVDOEE0QjE5M0IxMEJBQzQ4RjZD
RTYzMTJCMjAeFw0yNjA3MjMxNjA3MjNaFw0yNjA3MjQxODU0MjNaMDMxMTAvBgNV
BAMTKDE2REZBQ0FFNTIxNDVEQjZFNUFFOTU1QzYyNEE0QzE2NDQxODQyOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyD4+SEDN9CYwB1Ci6Uk0X2QVx
16MFtrkvs4UPs6kyZsMrmgA9CNArpeZFT+oSaawtKU8zs//zWZXlEdwQ1DNsqwyr
lYoj+SO9Xcos9V4DsuaGGUTTevFVeTCSD0uRqzTGYBbx70622/WCvky637OLVxqg
IwZnRUZ1WdWsuu64psoDjRhS8OjpFlob2dzn4yxXLw3RuY2XiZXbu3TmJF0zLOKK
vzfZbhD6E/Tik6Y2g9xmjatrFPmkyjwbbQL4Fim/3R+6syNvbqr1/WpQK64XjntS
3M81oQzEAVIh9mfC3ryGF42qOVkFCPQRyHZ3hlyd0uidTnLHKMuAH1ZPPUFVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFt+srlIUXbblrpVcYkpMFkQYQpgwHwYDVR0j
BBgwFoAU34MjL81/rsiksZOxC6xI9s5jErIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1
YzkvMC9ERjgzMjMyRkNEN0ZBRUM4QTRCMTkzQjEwQkFDNDhGNkNFNjMxMkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODMyMzJGQ0Q3RkFFQzhB
NEIxOTNCMTBCQUM0OEY2Q0U2MzEyQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1YzkvMC9E
RjgzMjMyRkNEN0ZBRUM4QTRCMTkzQjEwQkFDNDhGNkNFNjMxMkIyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGpaDe51TvN2XhvXCr9lEFQXzwDb+IVYPR2czyDLKPbHHKAW6Jr0xd6CtjvSf
EXNBQjpNlkdorHlc0Ba+TJJGJQkW9HvkKlRbGD518jhH9hFstcRQChDtcc47TXBz
Qhd/6pzcgsbFG2rMIHtTEmrXUl4lSOnfJRuTNCPH/A0kf3Z8aKt6wqD9oUGJhDAf
WOO0x1no7XPRrbCq2u6bdPELg0zuzMaqxZ7onOIrWB8d1Kd2+bNcC/pin8TWGNyS
gsjjDXbflkme7I2kX+0ra1wcE2JvCvYYgv804T9qzwWvv2BhNWVxHXfCUA+PsDYt
V0CPJGGnUZxfV7X69fZvxq+bqw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:31 2026 by rpki-client