Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
File:                     20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json)
Hash identifier:          I7aoZFEVCvb2J5XnsHxm65YFhIMNG3LyykAAO6Ln2sM=
Subject key identifier:   CE:5B:B2:BA:F5:AC:45:5E:A1:3B:96:10:ED:F3:51:A1:10:AE:61:14
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       327DF132EEEDBEA699015C46F3660D4A19BA899C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
Manifest number:          0286
Signing time:             Fri 24 Jul 2026 00:45:36 +0000
Manifest this update:     Fri 24 Jul 2026 00:40:36 +0000
Manifest next update:     Sat 25 Jul 2026 04:18:36 +0000
Files and hashes:         1: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: xWjFkUUH3xOUgkG4v7wi/q2SB8ChAo5GzZN4HLrLRT8=)
                          2: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: EI4qd+UKlcWT5W1otLpzlkKFQpJ5wwBw8Avb4ZIbpEk=)
                          3: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: n4fGAg6AMweCu7vUIWYp8q8obiKdibCGWpsEM9+ZQpI=)
                          4: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: I3sxbsBwAiUED16/mXKof6uIS0NEHhkcBxrZPc1GObo=)
                          5: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: 6T/V2lMHFc+9zFV5vfsLqnfbbHISu9BQ5EkK8GHCRfk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7d:f1:32:ee:ed:be:a6:99:01:5c:46:f3:66:0d:4a:19:ba:89:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Jul 24 00:40:36 2026 GMT
            Not After : Jul 25 04:18:36 2026 GMT
        Subject: CN=CE5BB2BAF5AC455EA13B9610EDF351A110AE6114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:83:5e:06:01:9b:29:49:2c:35:39:b6:5e:
                    88:64:6e:53:a9:b1:69:c3:8f:18:ec:a9:f9:89:c1:
                    65:f6:c3:7e:5d:75:14:63:0b:c9:f5:6f:e0:0d:d9:
                    02:27:23:30:21:cd:61:19:23:95:47:c6:51:6f:1d:
                    94:67:c3:e2:50:4b:ce:a3:4a:80:b9:08:c3:fa:c6:
                    36:a3:54:c5:8c:55:30:2e:17:a5:30:51:f8:39:3a:
                    da:7f:86:26:ae:f4:0b:0b:44:0c:48:45:e0:94:45:
                    07:af:43:14:6d:12:32:01:d5:51:68:6e:02:b5:6d:
                    72:55:92:71:63:3e:0a:5a:b4:92:ed:5b:96:ff:27:
                    b0:5a:6a:1f:62:93:fa:fc:4a:05:3a:bd:15:d0:d5:
                    5d:f6:c6:1d:56:07:c7:de:10:c0:d7:3e:83:d3:eb:
                    47:c5:9a:dd:dd:4f:7f:a2:98:e1:4a:47:1c:da:f4:
                    e1:c0:cc:0c:e6:7f:7d:9d:e9:4c:27:9a:16:50:78:
                    7b:1a:d4:6b:7c:84:6f:c7:8d:df:39:a4:8a:1c:fe:
                    51:bf:21:89:b3:a8:32:16:71:03:29:15:62:d6:92:
                    9e:5a:d6:f8:13:c1:5c:3c:49:63:61:38:c7:cb:8b:
                    cd:8b:d1:40:a7:16:9d:51:48:11:1d:26:5b:73:76:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:B2:BA:F5:AC:45:5E:A1:3B:96:10:ED:F3:51:A1:10:AE:61:14
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:61:ef:e9:d1:42:d3:d1:b8:ea:a7:2f:ee:b6:cc:e3:90:
         a1:7d:4c:71:fb:3e:0b:32:91:3f:ac:6d:c9:8c:af:e4:fa:9a:
         52:40:9b:87:a5:ca:83:c8:21:22:7a:fb:a9:1b:6e:02:58:8f:
         9b:0b:c3:94:b6:dd:a0:30:60:62:6e:c7:4b:34:5b:36:46:1e:
         11:1e:07:9d:90:c0:e5:25:30:4b:b9:95:f6:09:f7:1e:48:7b:
         2c:77:2c:2e:1b:4d:0a:0a:44:88:af:b7:3d:64:9a:58:c7:c3:
         8f:a8:c4:ca:ec:db:8d:62:a9:52:6c:52:08:16:6a:bd:23:e4:
         99:71:84:57:6c:a7:6c:50:10:9d:c8:46:bf:c9:fe:19:c6:e7:
         6f:6d:c2:a7:ae:27:c2:08:f4:22:f0:a3:8a:16:31:a7:16:dc:
         ac:40:e8:7d:1b:79:0c:3d:2f:c5:bd:fa:e8:04:6b:fb:5a:85:
         a7:6d:1e:55:89:68:3f:dc:2c:9f:de:67:2a:f3:f1:cd:58:ad:
         ba:11:83:7a:24:77:bd:8e:15:f6:58:bd:d2:bd:41:d9:82:6c:
         b8:72:fd:90:63:33:a3:70:e9:e7:31:e9:3d:01:cd:27:8e:b1:
         8b:06:91:72:4a:b6:35:f5:7b:33:94:52:1c:9c:fe:27:73:03:
         e4:39:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:14:26 2026 by rpki-client