Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.mft
File:                     55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.mft (raw, json)
Hash identifier:          tuLFVxiC4OmEbwSm1vweXfUdoKUS1srwkLws9ZfnBNA=
Subject key identifier:   21:EE:85:97:A0:C4:1C:9F:3F:3B:6C:B5:2A:78:8B:4A:98:44:AE:1E
Authority key identifier: 55:F0:E8:E1:F9:AA:D0:2A:FD:FD:8A:76:C4:BD:E5:BD:A3:C1:AA:6C
Certificate issuer:       /CN=55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C
Certificate serial:       0FC18355828A4401969B0BE171D791B2C7C201C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.mft
Manifest number:          3C
Signing time:             Thu 23 Jul 2026 23:35:36 +0000
Manifest this update:     Thu 23 Jul 2026 23:30:36 +0000
Manifest next update:     Sat 25 Jul 2026 01:10:36 +0000
Files and hashes:         1: 323830343a393432383a3a2f33322d313238203d3e20323734383235.roa (hash: mxgXsNQokXg1j5a0IT+6C7gWAVIvGNf/J6nwS9Ep8yg=)
                          2: 55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.crl (hash: fwwhRcyk3NDuG/VI92W01IcKMzMwWV2gy7+LWXZPE5E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.crl
                          rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c1:83:55:82:8a:44:01:96:9b:0b:e1:71:d7:91:b2:c7:c2:01:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C
        Validity
            Not Before: Jul 23 23:30:36 2026 GMT
            Not After : Jul 25 01:10:36 2026 GMT
        Subject: CN=21EE8597A0C41C9F3F3B6CB52A788B4A9844AE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:22:45:68:15:3f:61:05:bb:e3:22:68:5d:
                    59:fc:28:db:a6:52:9d:89:b4:fc:af:1e:c4:63:fc:
                    48:62:1c:ef:0f:e1:1c:8d:13:66:25:04:00:ca:a1:
                    42:8c:fd:e9:0c:7c:aa:8b:e8:f9:9d:cc:dd:ad:09:
                    3d:06:a3:dd:9e:67:5b:39:f1:32:9c:43:4c:2f:9e:
                    78:d8:8b:a6:97:72:b2:a3:bc:5d:b1:da:3b:3a:b5:
                    d4:d6:40:9d:cb:ed:ab:85:e7:e9:73:5f:70:83:8e:
                    de:16:7d:3f:71:4b:e2:61:94:09:8f:fa:8e:d9:8c:
                    66:b1:3a:7b:d2:0e:6b:1f:2f:0f:bf:69:ad:f0:ce:
                    e2:6e:f0:4b:90:84:65:aa:41:42:80:7c:00:e5:06:
                    75:83:b9:66:f6:4e:ef:b4:ea:27:ad:8c:0e:d4:bc:
                    37:1c:86:2f:24:69:e4:93:9c:a6:65:cc:29:0a:c8:
                    16:25:55:12:c9:71:3e:c0:5f:af:aa:7f:99:9a:28:
                    f3:9f:53:cf:5a:16:99:0b:6f:02:3c:f2:de:3c:55:
                    3d:34:78:ba:6d:58:49:32:38:be:e9:a9:0b:60:34:
                    b2:4a:53:d1:50:57:f5:0f:ac:a5:b0:31:64:8f:42:
                    6d:df:4a:81:d6:32:04:0d:56:01:ba:a4:55:56:18:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:85:97:A0:C4:1C:9F:3F:3B:6C:B5:2A:78:8B:4A:98:44:AE:1E
            X509v3 Authority Key Identifier:
                keyid:55:F0:E8:E1:F9:AA:D0:2A:FD:FD:8A:76:C4:BD:E5:BD:A3:C1:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/55F0E8E1F9AAD02AFDFD8A76C4BDE5BDA3C1AA6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:b6:c3:8e:d1:fc:31:82:88:ed:e2:6b:42:36:f6:f0:80:
         71:d4:7e:49:fa:71:8c:e9:6f:53:20:c2:6b:ce:30:af:e8:30:
         77:33:7c:ab:66:bd:13:af:cb:74:9a:fd:57:e0:76:68:32:0f:
         86:33:58:c7:93:c3:50:07:d1:10:ae:cb:67:62:71:34:c1:e5:
         db:d7:44:c2:86:01:c0:19:30:d7:ff:6a:2c:7e:a9:49:10:02:
         55:fc:ca:e0:56:a2:e3:b9:9c:92:b4:cb:57:21:e0:4b:0b:28:
         82:a0:c1:4e:ff:98:56:b8:c2:05:e6:d4:c3:6b:c2:df:a7:03:
         88:c8:95:fd:4e:a8:05:e3:c3:db:19:4e:ec:61:83:f7:23:65:
         f5:a1:35:b6:16:90:8e:fa:30:53:2a:ed:cc:da:80:0a:71:46:
         6c:b4:a4:f1:d9:08:71:21:b4:e2:3e:f3:f6:93:4e:89:31:9a:
         b7:c6:99:d0:d9:28:8d:5b:db:5f:11:3e:0e:c8:84:05:9e:65:
         58:e6:be:44:b5:35:58:b4:ec:86:9e:5d:24:5d:23:1d:0b:c3:
         ea:17:2a:bd:79:dd:41:f2:73:aa:da:83:08:41:9d:e1:10:9d:
         5f:81:8e:92:7b:b1:06:f6:19:69:f5:49:be:2e:ca:b2:67:05:
         36:d4:a8:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD8GDVYKKRAGWmwvhcdeRssfCAckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGMEU4RTFGOUFBRDAyQUZERkQ4QTc2QzRCREU1QkRB
M0MxQUE2QzAeFw0yNjA3MjMyMzMwMzZaFw0yNjA3MjUwMTEwMzZaMDMxMTAvBgNV
BAMTKDIxRUU4NTk3QTBDNDFDOUYzRjNCNkNCNTJBNzg4QjRBOTg0NEFFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ziJFaBU/YQW74yJoXVn8KNum
Up2JtPyvHsRj/EhiHO8P4RyNE2YlBADKoUKM/ekMfKqL6PmdzN2tCT0Go92eZ1s5
8TKcQ0wvnnjYi6aXcrKjvF2x2js6tdTWQJ3L7auF5+lzX3CDjt4WfT9xS+JhlAmP
+o7ZjGaxOnvSDmsfLw+/aa3wzuJu8EuQhGWqQUKAfADlBnWDuWb2Tu+06ietjA7U
vDcchi8kaeSTnKZlzCkKyBYlVRLJcT7AX6+qf5maKPOfU89aFpkLbwI88t48VT00
eLptWEkyOL7pqQtgNLJKU9FQV/UPrKWwMWSPQm3fSoHWMgQNVgG6pFVWGIb1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUIe6Fl6DEHJ8/O2y1KniLSphErh4wHwYDVR0j
BBgwFoAUVfDo4fmq0Cr9/Yp2xL3lvaPBqmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJX
TjIvMC81NUYwRThFMUY5QUFEMDJBRkRGRDhBNzZDNEJERTVCREEzQzFBQTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1RjBFOEUxRjlBQUQwMkFG
REZEOEE3NkM0QkRFNUJEQTNDMUFBNkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJXTjIvMC81
NUYwRThFMUY5QUFEMDJBRkRGRDhBNzZDNEJERTVCREEzQzFBQTZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT6q2w47R/DGCiO3ia0I29vCAcdR+SfpxjOlvUyDCa84wr+gwdzN8q2a9E6/L
dJr9V+B2aDIPhjNYx5PDUAfREK7LZ2JxNMHl29dEwoYBwBkw1/9qLH6pSRACVfzK
4Fai47mckrTLVyHgSwsogqDBTv+YVrjCBebUw2vC36cDiMiV/U6oBePD2xlO7GGD
9yNl9aE1thaQjvowUyrtzNqACnFGbLSk8dkIcSG04j7z9pNOiTGat8aZ0NkojVvb
XxE+DsiEBZ5lWOa+RLU1WLTshp5dJF0jHQvD6hcqvXndQfJzqtqDCEGd4RCdX4GO
knuxBvYZafVJvi7KsmcFNtSoQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:28:33 2026 by rpki-client