Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
File:                     CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json)
Hash identifier:          YWTD9Ha+ajaDAhVZN4xjsXgcORvnv+eafq5SyWZWWG8=
Subject key identifier:   67:E1:EA:F5:DB:63:A2:1F:42:EE:A0:2A:85:0E:75:40:3B:6E:FA:E7
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       4DCBBEE1CFFF0B8A1C694178687588CB85AD0B45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
Manifest number:          0473
Signing time:             Fri 24 Jul 2026 16:20:24 +0000
Manifest this update:     Fri 24 Jul 2026 16:15:24 +0000
Manifest next update:     Sat 25 Jul 2026 16:48:24 +0000
Files and hashes:         1: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: N2i/qBjBq5/TJnBxu2abDlDhuFcVTp1FhoYaGw4HyrY=)
                          2: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: tSMpR71UAuC2zrbdj0EWvYX2DFiB40w3XPiao4IrMLk=)
                          3: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: xZOGYqIMw2Xb3OgmunSGGwwg8xrOZJS8s2Q0thZGd0A=)
                          4: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: bIU81f9YCjQGqnLEEAw17fgvcftmD8QjkFeC4s20MKQ=)
                          5: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: O74Dl+n7kgxIX7fp6e+Rx21Kwb0KGKe4Rd/oFvpRadw=)
                          6: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: 64wqdwUaEccPdY6qWIpOZigUo3XQ8KFCqbPZrhXAaMo=)
                          7: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: tCHeehAWk6SX2/rRTD0d6RSK+ulyfAmwIQ9PX6N9nqk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cb:be:e1:cf:ff:0b:8a:1c:69:41:78:68:75:88:cb:85:ad:0b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Jul 24 16:15:24 2026 GMT
            Not After : Jul 25 16:48:24 2026 GMT
        Subject: CN=67E1EAF5DB63A21F42EEA02A850E75403B6EFAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:f6:b0:57:9f:d3:0e:cd:a0:bc:9e:50:95:
                    df:11:46:2f:ba:aa:b1:fd:09:e8:af:44:c3:17:69:
                    0c:01:cb:8e:f7:f3:ad:48:df:3c:95:7d:17:49:f1:
                    67:dc:75:d5:e1:32:86:89:08:8a:be:37:bd:5f:8f:
                    c0:26:f4:f4:53:d6:52:c9:ff:3d:4a:36:91:d0:4c:
                    b9:a6:89:c9:d6:1a:f7:ad:2a:c3:e3:33:61:80:a9:
                    36:93:9b:9d:4c:28:96:a9:57:48:27:7c:93:7b:5a:
                    e5:80:ad:ff:1d:82:50:4f:fa:8b:5c:d2:7c:ad:65:
                    46:ad:e3:e8:d6:d8:e1:ac:56:3b:a2:28:42:75:0c:
                    8d:1d:0c:26:ff:61:24:4b:a1:c1:b7:50:2d:b9:9b:
                    b5:a3:08:5c:11:4c:1b:ba:e5:e3:ac:71:2c:a9:23:
                    e7:ae:e5:9d:99:d2:75:18:98:8c:8d:f8:0b:f5:ac:
                    39:77:e8:40:26:0d:83:f6:db:f0:3e:38:d0:48:8a:
                    0e:a3:a6:15:2d:34:7e:49:39:3f:9f:b6:93:08:ba:
                    ec:ed:be:bf:44:8c:5e:00:9f:08:6c:80:cf:22:55:
                    18:a6:d6:f9:b4:dc:21:c1:9b:bf:fe:5a:3a:8d:59:
                    1c:0e:58:ae:78:c6:be:69:75:a5:cf:b1:30:17:20:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E1:EA:F5:DB:63:A2:1F:42:EE:A0:2A:85:0E:75:40:3B:6E:FA:E7
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:15:4f:98:2c:11:3d:01:0c:3d:6f:59:9d:ce:b9:ef:57:
         12:ca:5f:03:69:ef:84:d4:ac:33:32:c5:da:8a:11:f9:83:17:
         b2:9a:28:c5:bd:f2:c0:93:92:e2:19:44:bf:08:13:b8:fe:ab:
         1e:90:ca:5d:24:6c:21:65:17:23:ac:8a:c4:bb:ba:1c:a6:e0:
         40:19:33:87:5f:fe:9c:a6:2c:e2:e4:21:48:19:8f:23:f1:d6:
         d9:53:59:36:b2:40:f6:02:19:f1:77:7b:47:2c:15:06:14:0f:
         34:6f:c7:d9:d8:65:13:12:b5:b9:2c:5d:50:e3:06:0c:18:74:
         3d:9e:fa:ec:f4:13:c0:04:87:4b:cd:8d:7f:55:c3:7f:94:32:
         83:d3:0c:55:50:4e:97:60:78:31:ad:64:a1:cd:2a:92:0e:86:
         49:e6:9c:c5:e3:75:ef:df:71:1c:b8:3e:a5:5d:04:73:b0:d8:
         48:ca:a2:32:1e:ed:61:61:67:a6:e1:6b:a8:05:20:ef:0a:68:
         fa:bb:16:61:39:16:10:cc:d7:52:c6:56:69:e3:17:d6:24:b3:
         44:1c:47:17:d7:6d:fc:6e:b4:73:6e:45:90:df:70:e0:4d:1f:
         6a:8e:e8:e9:e3:92:2d:c0:bc:d8:54:75:90:87:87:0f:31:a8:
         a0:7c:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:24 2026 by rpki-client