Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
File:                     60358884BF0F1C4D3024B709DD5734D538763EEC.mft (raw, json)
Hash identifier:          la7tot+wGwMDrRInUD5qio8DJfBAKEzm2z3iqrVVJ6Q=
Subject key identifier:   D9:81:23:B4:0C:00:ED:32:24:66:D8:81:B0:6C:E8:B3:DE:F7:2C:5A
Authority key identifier: 60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Certificate issuer:       /CN=60358884BF0F1C4D3024B709DD5734D538763EEC
Certificate serial:       28D24B4E4CABD0ECB4A0548A60BB2F5EFBC4CED2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
Manifest number:          0191
Signing time:             Fri 24 Jul 2026 14:07:08 +0000
Manifest this update:     Fri 24 Jul 2026 14:02:08 +0000
Manifest next update:     Sat 25 Jul 2026 16:55:08 +0000
Files and hashes:         1: 323830343a383234383a3a2f33322d3438203d3e20323732353130.roa (hash: FuLRg2mQnQb4bhpiLaVmWlnozUB8vSOFoWM8uHkcM+A=)
                          2: 60358884BF0F1C4D3024B709DD5734D538763EEC.crl (hash: 8kUvowmD7lL8Q6lTRMJ2tY4AOS9HWUwtgabDYLsoLIw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl
                          rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d2:4b:4e:4c:ab:d0:ec:b4:a0:54:8a:60:bb:2f:5e:fb:c4:ce:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
        Validity
            Not Before: Jul 24 14:02:08 2026 GMT
            Not After : Jul 25 16:55:08 2026 GMT
        Subject: CN=D98123B40C00ED322466D881B06CE8B3DEF72C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:46:a7:57:fa:7d:3e:71:4e:21:56:3c:01:
                    fc:91:be:a6:13:c8:2e:7e:1e:4c:71:95:2e:d7:26:
                    18:56:af:64:4e:73:19:57:87:57:5b:97:99:09:a4:
                    60:5a:01:4b:6e:99:52:64:34:dd:0d:9f:1d:f6:3d:
                    eb:94:c0:24:e5:19:46:2d:c1:b2:d9:83:f7:18:a5:
                    f2:89:6c:02:17:73:1a:e9:0b:18:68:88:e2:1a:06:
                    fe:85:2c:61:9f:50:d3:88:6a:e8:7b:ca:02:a6:2c:
                    87:37:db:38:a3:f2:2c:ba:d7:22:2b:51:00:24:8c:
                    09:17:9e:97:40:14:81:90:ad:e2:45:a8:91:66:e8:
                    5d:00:9a:aa:a8:49:00:06:f3:13:25:bf:b0:6e:43:
                    db:a8:e4:9b:86:cd:5c:5c:fb:30:5f:49:e9:f8:79:
                    11:83:dc:6a:6d:3e:d9:62:28:37:5b:d3:bf:b6:7a:
                    9c:2c:14:6d:ae:94:85:8f:a7:e7:f3:0d:ea:12:dc:
                    56:3a:30:34:56:c6:bc:7d:a9:12:8e:76:62:ea:67:
                    74:de:c0:60:68:b2:ed:30:ab:79:c1:67:5c:48:3e:
                    b5:c8:e0:41:bb:75:60:40:6a:55:5f:db:2d:6a:92:
                    be:7c:21:e7:cb:3d:aa:86:99:e4:e7:29:3f:6f:85:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:81:23:B4:0C:00:ED:32:24:66:D8:81:B0:6C:E8:B3:DE:F7:2C:5A
            X509v3 Authority Key Identifier:
                keyid:60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cd:6f:2b:a4:58:89:9f:b6:d6:e7:1c:52:ad:f5:ff:40:5e:
         94:b5:0d:e3:70:a8:06:d5:74:b3:35:22:b3:b4:04:ec:b0:d8:
         34:73:13:d9:63:7b:2a:3b:b6:51:85:2d:ba:2e:4d:4a:a0:6d:
         e2:79:f9:62:a1:18:1a:f8:36:1b:15:bb:ab:7e:2b:b9:1c:18:
         ae:36:9a:bc:30:e4:b9:e2:a4:0f:1c:22:bc:1a:bd:db:a0:cb:
         ab:e9:22:3c:b6:5d:9f:26:e4:67:ae:31:2a:13:b8:5e:13:7d:
         c3:d2:4f:0b:c0:77:f8:c9:b3:de:2d:28:a4:31:1a:1f:7f:be:
         8b:73:ab:be:d2:87:20:e5:87:fb:df:75:e8:4c:56:1e:95:39:
         d3:dd:6a:ee:c2:1c:0d:cb:68:e9:d6:85:bc:1a:1d:69:e3:8a:
         ae:66:14:cf:28:50:10:56:f3:9f:34:d8:77:33:15:be:6b:df:
         f0:b3:68:26:e5:59:fc:78:b5:a3:26:ab:3c:1e:37:73:66:11:
         db:c7:7a:27:48:26:8f:03:ef:3a:6c:06:c7:06:bc:fb:d5:1e:
         ee:5a:4f:02:d2:45:7a:8b:14:3d:47:37:13:09:a1:b2:83:cc:
         42:40:b8:a4:71:22:b2:a9:d9:5e:db:33:60:9d:56:8e:4e:d4:
         94:ec:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:32:08 2026 by rpki-client