Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.mft
File:                     28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.mft (raw, json)
Hash identifier:          s3tg8OvwT0mKm1juYzqd0/5GD6eBhf3cOMe8xBGOFu0=
Subject key identifier:   9F:A3:A6:D8:CB:37:FF:C6:C9:3E:B0:08:2D:A5:58:55:00:17:27:3D
Authority key identifier: 28:E5:E6:A5:B2:B9:E3:D9:80:CD:37:E1:4F:E6:22:B2:91:A4:D1:91
Certificate issuer:       /CN=28E5E6A5B2B9E3D980CD37E14FE622B291A4D191
Certificate serial:       682C7D326DE2D559BE06C9A9E8BF25C82803AA4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.mft
Manifest number:          04
Signing time:             Fri 24 Jul 2026 12:55:32 +0000
Manifest this update:     Fri 24 Jul 2026 12:50:32 +0000
Manifest next update:     Sat 25 Jul 2026 15:57:32 +0000
Files and hashes:         1: 34352e3232392e36342e302f32322d3332203d3e20323637313033.roa (hash: kgJVL8bgJyemumExJDsL7rXXyrm+387Biwb0lh1Sqj0=)
                          2: 28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.crl (hash: PqdSEA4UmGlvrFWxLi+NXRmsQSm7uTuF804RXAkwGCQ=)
                          3: 323830343a343833303a3a2f33322d313238203d3e20323637313033.roa (hash: nBXIkiqysPJ+KOuvU86jGgcBTyVqhS7Ae9TImOTNebM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.crl
                          rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2c:7d:32:6d:e2:d5:59:be:06:c9:a9:e8:bf:25:c8:28:03:aa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E5E6A5B2B9E3D980CD37E14FE622B291A4D191
        Validity
            Not Before: Jul 24 12:50:32 2026 GMT
            Not After : Jul 25 15:57:32 2026 GMT
        Subject: CN=9FA3A6D8CB37FFC6C93EB0082DA558550017273D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:a8:a6:64:6d:79:63:0e:be:62:b7:1b:e9:
                    c7:85:88:48:17:bc:37:ef:db:d7:a8:d0:9d:c1:4d:
                    ff:4b:35:67:de:76:e4:cd:1b:68:43:29:25:5c:71:
                    8f:ef:65:fe:47:d6:88:de:24:b6:d2:e9:f3:fa:e1:
                    13:3b:17:46:96:2f:7f:b6:8a:2e:5e:73:7a:bf:f1:
                    c6:d6:f9:5a:40:7b:2d:24:af:3b:80:e9:ad:fc:81:
                    06:27:20:60:74:8c:2f:aa:cb:5e:4c:fc:49:20:7a:
                    96:94:00:3d:b7:e7:bf:1f:25:2f:84:63:3f:4a:83:
                    fa:b2:c1:8c:71:6d:93:d0:da:ba:c1:b0:d7:9d:5e:
                    51:81:a9:c5:8a:cf:b0:e8:bf:9a:56:e7:d2:a6:a3:
                    a1:93:01:6c:46:a3:4e:2f:25:73:75:22:cd:0f:d1:
                    f2:e6:e6:15:73:07:83:ab:49:44:3d:62:18:f8:ca:
                    96:b6:ad:41:21:e3:ee:3d:09:cb:dd:11:75:ec:c8:
                    ac:96:df:0f:d6:1d:f2:b1:61:fc:74:31:7f:1d:93:
                    c1:53:22:2d:a7:ea:aa:ed:b3:a8:9d:a8:0e:08:06:
                    7d:07:73:6e:52:70:b8:89:a7:d8:a3:06:f6:b3:03:
                    a9:72:9f:63:c4:c5:bc:ca:6d:ea:87:7c:d7:2f:49:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:A6:D8:CB:37:FF:C6:C9:3E:B0:08:2D:A5:58:55:00:17:27:3D
            X509v3 Authority Key Identifier:
                keyid:28:E5:E6:A5:B2:B9:E3:D9:80:CD:37:E1:4F:E6:22:B2:91:A4:D1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:aa:43:db:b7:72:4f:85:dd:9c:66:aa:fa:0d:02:3e:e2:
         02:92:9f:06:96:1d:b5:d1:8f:73:47:9f:d5:80:58:57:ee:83:
         60:50:c1:77:97:7e:9e:e7:b8:a1:d4:20:35:8e:53:6d:17:6c:
         55:d9:57:69:4d:c7:2d:2d:c6:71:7b:50:10:35:50:cb:b2:27:
         1a:55:f7:d2:b0:0b:85:9a:79:36:1d:b6:b7:be:90:02:5e:7f:
         a0:89:99:1e:00:a1:7b:ec:e8:f9:78:02:05:b2:d5:7a:a9:cf:
         a3:94:c4:bc:f0:37:85:1a:93:c9:97:d3:4f:e5:2d:4d:da:9a:
         ac:b7:5a:03:97:50:7e:f7:05:26:65:49:f6:17:fd:4d:ea:77:
         fc:36:b4:02:94:cd:7c:bf:f6:be:0a:91:72:e4:c4:ab:ed:0f:
         ee:f6:1a:47:1a:89:4a:06:8b:4b:70:80:22:b3:1a:5b:50:b9:
         1f:d3:32:ec:d6:d9:82:3d:b6:1a:52:3e:c8:68:5d:dc:8a:2d:
         f9:3b:0d:87:b7:5e:aa:9a:6c:21:02:76:7c:3e:3e:28:ad:d4:
         5a:c9:ab:f3:34:39:ca:21:b5:cb:e9:5b:67:5d:7e:30:ee:15:
         ee:ed:28:ed:ed:99:56:1c:17:5c:66:f3:1c:0a:a8:fe:88:12:
         4e:c2:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:41:14 2026 by rpki-client