Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
File:                     3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json)
Hash identifier:          +erc1jWY5AQouiC+umBpzOmTr0k+KQUsWgkDQoaLxmM=
Subject key identifier:   AA:4D:BE:84:DB:B4:7D:9C:A2:E2:C3:0D:35:37:53:37:18:FC:00:31
Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11
Certificate issuer:       /CN=3BA0E4707E0361E96A25CFBC6104551202B34011
Certificate serial:       5F8AE22478FF2F98A894F034558201F88FAF3D9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
Manifest number:          042B
Signing time:             Fri 24 Jul 2026 16:02:48 +0000
Manifest this update:     Fri 24 Jul 2026 15:57:48 +0000
Manifest next update:     Sat 25 Jul 2026 19:20:48 +0000
Files and hashes:         1: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: JiFkgxIIV7sAWo6cqh3+p2Z70dWJZpaKtAMta9c9Pyg=)
                          2: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: F7w2Dq+Yhj72VNuZUgl1wKxmEpwz0ASh9hJIJlITw+8=)
                          3: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: tSOXGp3AKoKrMg3hjQnTPWPEkh2iCcBNOWKCuvWdE+I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl
                          rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8a:e2:24:78:ff:2f:98:a8:94:f0:34:55:82:01:f8:8f:af:3d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011
        Validity
            Not Before: Jul 24 15:57:48 2026 GMT
            Not After : Jul 25 19:20:48 2026 GMT
        Subject: CN=AA4DBE84DBB47D9CA2E2C30D3537533718FC0031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:ab:17:83:bf:df:7c:1a:fd:0e:10:e9:de:
                    a2:19:85:f8:7b:96:ed:f3:99:83:d0:43:7e:97:b6:
                    73:38:e7:91:03:ec:d4:fb:15:a8:66:c8:9a:52:ba:
                    97:13:67:8a:72:fd:0c:b1:4b:d0:9f:f4:38:21:77:
                    e1:c2:3f:00:89:ae:e5:79:51:4f:d2:ed:f9:63:d0:
                    3b:de:b7:0c:e4:95:9b:31:b7:a4:e3:44:32:4b:22:
                    45:a9:49:2d:7f:bc:8c:62:58:21:ac:ca:f7:ae:2a:
                    ca:1e:cc:fe:ef:cc:68:3a:56:01:0d:84:f2:17:07:
                    84:b1:48:e6:01:89:b5:8e:65:51:7c:7d:75:64:6d:
                    5a:10:4b:3c:86:fc:d1:5f:1d:77:f5:f6:92:4e:e1:
                    6e:ee:8b:75:fd:ce:93:44:42:e2:d9:a0:8f:d1:82:
                    27:76:c6:25:ac:97:d8:fc:c1:27:9a:e8:38:bd:13:
                    1e:6c:3d:b0:5a:8e:37:0c:07:72:29:62:5a:6b:3a:
                    c9:95:d6:a2:21:51:d0:21:fe:f3:3b:ba:f0:f1:e3:
                    81:98:87:cc:43:6e:3e:6f:6a:4b:8b:e5:52:a2:16:
                    3c:45:ac:ae:e8:8f:7f:44:53:19:c4:c2:6e:7d:f1:
                    52:8e:4c:29:29:88:d9:93:d7:f2:b3:64:ff:fe:b7:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:BE:84:DB:B4:7D:9C:A2:E2:C3:0D:35:37:53:37:18:FC:00:31
            X509v3 Authority Key Identifier:
                keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:90:dd:bc:e0:7d:44:8d:43:14:ca:4c:e6:1b:43:29:db:be:
         43:9c:9c:ab:b2:9c:35:c4:03:3d:8c:2d:16:d1:be:85:0b:d7:
         95:5e:b6:66:44:c2:e6:52:0f:62:e4:14:b4:02:7a:81:c6:0b:
         39:45:ff:d0:cb:d2:ea:9a:ef:58:d4:f4:e7:f4:73:8d:5d:a2:
         94:ed:2f:6f:b2:fc:ab:05:93:03:c2:bb:ed:32:46:7d:2b:0e:
         ee:9f:b7:9a:87:a4:80:2b:4e:71:81:7b:ce:1f:e6:f1:65:0d:
         be:c9:b8:12:bb:23:37:ca:75:dd:09:54:c1:c4:72:8f:a3:e1:
         15:4d:ed:80:c5:af:9d:ec:cf:62:9e:14:2b:0c:bd:82:a7:98:
         b3:d4:aa:51:4a:58:ec:aa:08:e9:f6:cc:27:e5:54:e8:dd:f9:
         f9:2b:90:9a:3f:62:a4:fc:5f:55:b4:13:47:ec:44:d6:40:c1:
         19:46:d4:9e:f5:f5:f2:f0:8b:1c:12:b2:00:5f:47:07:9f:e9:
         40:53:f5:d4:98:d3:f1:e9:25:d5:01:b7:4f:13:50:a1:07:df:
         a7:40:94:62:78:96:fb:d6:6a:8d:00:32:30:f4:7d:63:0b:93:
         09:7f:48:21:73:78:54:1b:e9:80:f1:7f:0e:a7:b6:58:b2:15:
         7e:0f:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:49:28 2026 by rpki-client