Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
File:                     624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft (raw, json)
Hash identifier:          +EbjvA/XW98G6qfE5WD51klb2HcU9RD2IvtmtOhXyww=
Subject key identifier:   52:C5:AD:D7:96:8C:9B:8A:02:A1:B3:7B:23:64:CA:C6:BC:96:49:37
Authority key identifier: 62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C
Certificate issuer:       /CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
Certificate serial:       3B5B4A675F9F5C88A0304E0FCCD75F27E3946153
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
Manifest number:          91
Signing time:             Thu 23 Jul 2026 22:41:57 +0000
Manifest this update:     Thu 23 Jul 2026 22:36:56 +0000
Manifest next update:     Sat 25 Jul 2026 01:44:56 +0000
Files and hashes:         1: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (hash: TRdDBJVai/QX4HA/YYKgKvwE9EfFSBTO5fgw0vIe0so=)
                          2: 3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (hash: JDVm2dHK2XbFExRJiro1H5tl7HQ/IM2KxUJxtFXgOxg=)
                          3: 624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl (hash: 0OuouHgaYNLYqzpBlCTvyCJ8DDoT1TOwNNGwBxHT5Ow=)
                          4: 323830343a3133383a613030303a3a2f34372d3437203d3e203131343332.roa (hash: 4CfHBUBDDkPgL617GWa3jtvOo0guxUqxP4b4fmNYQYA=)
                          5: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (hash: qI3QzNSBTuRmcLYaZ7uxJ8EbBE529u4C7OIxtDmDaUE=)
                          6: 3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (hash: F7GwJYU5pi7qkcw+AIV30DeWFm/AVz8Tv2MvBi1EUQ4=)
                          7: 3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (hash: a45BK9jdtyNnZdCT8U24mBKePWG91Scqt/kbiE+YmZY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5b:4a:67:5f:9f:5c:88:a0:30:4e:0f:cc:d7:5f:27:e3:94:61:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624F0468FC714CC37AD7B531FC42ED69C25ADF2C
        Validity
            Not Before: Jul 23 22:36:56 2026 GMT
            Not After : Jul 25 01:44:56 2026 GMT
        Subject: CN=52C5ADD7968C9B8A02A1B37B2364CAC6BC964937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:6e:1d:26:87:d7:af:6a:a4:b2:0e:34:a5:
                    7d:36:d7:ba:39:a4:25:93:22:1a:b8:5d:f3:65:8c:
                    45:6b:20:cc:c8:1c:a4:29:de:36:c5:9d:71:bc:e5:
                    7f:6b:a8:1e:78:e8:0a:9a:28:9d:dc:72:90:d8:7a:
                    fe:32:51:1c:9a:08:cd:46:d1:03:c3:a6:da:43:81:
                    10:f7:4c:df:41:03:e1:a1:ea:94:b7:a9:b7:91:70:
                    b8:88:00:43:e9:7c:13:b6:0e:52:33:c3:46:d2:e7:
                    9c:01:e9:a9:e5:0e:74:c0:78:ac:5d:44:8e:c7:89:
                    24:9f:91:4c:c6:a3:ff:c4:62:ad:bd:35:2e:51:8b:
                    fd:08:ec:3b:ba:d5:a4:17:03:62:96:4e:00:28:13:
                    38:87:f5:06:bf:3a:98:f8:e0:73:56:af:15:2b:d2:
                    62:ce:94:03:e7:5a:c7:39:1c:aa:c8:43:61:f7:c2:
                    89:e6:a7:10:ca:a6:db:45:33:51:f5:fc:c9:21:38:
                    44:0f:78:43:2a:77:64:c8:62:95:24:dc:5c:73:c8:
                    96:c2:8f:c0:9c:f8:c4:9d:fc:8c:fb:e6:3e:94:29:
                    ab:78:a2:f1:19:4d:6d:8e:e2:85:bd:44:32:cb:f8:
                    5c:d7:3e:a1:83:f0:ea:2e:64:86:47:62:b6:c4:99:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:AD:D7:96:8C:9B:8A:02:A1:B3:7B:23:64:CA:C6:BC:96:49:37
            X509v3 Authority Key Identifier:
                keyid:62:4F:04:68:FC:71:4C:C3:7A:D7:B5:31:FC:42:ED:69:C2:5A:DF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/624F0468FC714CC37AD7B531FC42ED69C25ADF2C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:75:cb:c8:1c:cc:c8:7f:b7:cc:27:e1:13:38:4e:a0:b8:8c:
         ff:00:f8:d7:f0:13:d8:43:6c:02:20:b3:df:46:27:d1:32:14:
         04:c0:04:bb:c4:c7:96:47:17:b3:c7:7d:5f:a7:88:25:81:ee:
         ce:78:3f:46:cc:03:a1:8a:a7:dc:8f:aa:52:ab:ff:63:b3:df:
         32:8e:74:14:f8:2f:6a:79:96:ee:16:51:9d:46:29:ea:5d:39:
         87:d8:60:4a:f3:51:70:7f:9a:37:b4:9f:a1:bd:85:cd:aa:8c:
         c6:a0:80:25:04:9d:41:f8:f9:bb:02:41:e1:d2:2a:f2:d2:2b:
         be:7d:8c:6b:2e:a3:c0:f9:20:34:dd:fa:00:12:9d:d5:c6:a9:
         61:e4:6b:26:22:6e:42:e3:88:cc:33:2c:1a:05:ea:ec:66:a4:
         cd:13:6d:1a:9d:e0:ce:75:a6:d6:d8:46:2c:ec:10:84:9c:6d:
         f4:3f:fa:66:ea:a7:7b:9f:fc:73:4c:01:19:83:91:72:90:39:
         38:f3:d6:27:b3:55:7b:2f:99:ae:ea:bd:b6:22:65:a4:6d:97:
         24:f2:30:bd:be:e1:1a:ae:12:26:5b:60:db:e9:8e:04:24:91:
         27:73:cb:36:64:fc:be:d6:d7:90:ae:1d:5d:80:6a:c8:bf:32:
         3f:1d:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:13:16 2026 by rpki-client