Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
File:                     8B61F412D9491EE5358447F35A3653BE4A23D667.mft (raw, json)
Hash identifier:          rb1CElRC31EZDAT3p39WHIocXY391mWS2CWQ8Fn8tuk=
Subject key identifier:   F4:89:38:ED:D1:EE:FF:08:8F:E2:46:00:59:F5:BC:57:DB:97:2B:6F
Authority key identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67
Certificate issuer:       /CN=8B61F412D9491EE5358447F35A3653BE4A23D667
Certificate serial:       3B640EC9ECE2D266191660A50BA9734528CC9323
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
Manifest number:          A3
Signing time:             Fri 24 Jul 2026 10:06:22 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:22 +0000
Manifest next update:     Sat 25 Jul 2026 12:07:22 +0000
Files and hashes:         1: 323830343a343863303a3a2f33322d3332203d3e20323637313432.roa (hash: PDc/wGCkUhyPVPByVO0CUFgWwn+FjMVI+nAQmftd++M=)
                          2: 3137372e3132382e38392e302f32342d3234203d3e20323637313432.roa (hash: zgm/FpVkN2XxOh6cKVVAnB/f6b5o96NFG9lrM82TKME=)
                          3: 323830343a343863303a313030303a3a2f33372d3337203d3e20323637313432.roa (hash: 79niAxK6PgCZjiEJA2MZNtUFuKdvQJ+RLeAw9KM7jo0=)
                          4: 8B61F412D9491EE5358447F35A3653BE4A23D667.crl (hash: +bpBNe5DocvHQ8CQDTaoctt0Hilkn+zmeHNxE9Wc1xc=)
                          5: 3137372e3132382e39302e302f32342d3234203d3e20323637313432.roa (hash: gAVJoCU9HYjERIhlvpEhCmC4aQdkAVc7tyhxF/H8w+8=)
                          6: 323830343a343863303a323030303a3a2f33372d3337203d3e20323637313432.roa (hash: 42Jpt2Y1TQ0FO7kImAzhzwj8ADoKzAieR8xsIvQChRo=)
                          7: 3137372e3132382e38382e302f32322d3232203d3e20323637313432.roa (hash: fpfEBraRzK4BaJtKoNiB0O0VJtIqQeNTRaonxXFwrxk=)
                          8: 323830343a343863303a313030303a3a2f33362d3336203d3e20323637313432.roa (hash: rafztA9ogwNXf2fY9dkIVH7dR+J+9rLF7h4ZrxPPr4E=)
                          9: 34352e3232392e3234302e302f32322d3232203d3e20323637313432.roa (hash: HCLdkfI4Z4OyDXcZBPc0+4nsarlUClntHgqh4SZCztQ=)
                          10: 3137372e3132382e38382e302f32342d3234203d3e20323637313432.roa (hash: +Dw2vdyilneAyycRgUiw1RGLCbELsFa0D1D+XJmdbJg=)
                          11: 323830343a343863303a313830303a3a2f33372d3337203d3e20323637313432.roa (hash: dJAQCh84kQjLo7/1oT3F9qPBc6WHUEVL15NInaU+SKk=)
                          12: 3137372e3132382e39312e302f32342d3234203d3e20323637313432.roa (hash: 8fslhcMUo7pLUOt2orCJdRmpZgWkUO2gAEb1lulQYZs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl
                          rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:64:0e:c9:ec:e2:d2:66:19:16:60:a5:0b:a9:73:45:28:cc:93:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B61F412D9491EE5358447F35A3653BE4A23D667
        Validity
            Not Before: Jul 24 10:01:22 2026 GMT
            Not After : Jul 25 12:07:22 2026 GMT
        Subject: CN=F48938EDD1EEFF088FE2460059F5BC57DB972B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3c:2e:f3:ce:bf:df:84:1c:6d:ee:76:cd:b0:
                    03:fc:64:9c:61:fb:f4:cd:86:96:5b:ea:12:31:2b:
                    eb:bd:2a:d2:83:da:2e:e1:8e:b8:cf:e6:31:34:5d:
                    e2:3a:9e:f1:a7:5f:10:46:3a:85:39:05:3a:c7:29:
                    b5:40:cb:58:9d:26:d9:da:ee:23:f5:ba:c8:15:0a:
                    80:35:87:c6:2d:82:b7:0d:46:a3:4f:0f:fc:53:04:
                    dd:21:f8:d1:3c:4d:6c:c0:9b:20:5b:09:ec:12:9d:
                    8f:b4:9b:c8:fa:50:5d:7f:d6:e1:e4:16:ce:04:7b:
                    d7:95:06:52:8b:ab:87:54:09:6f:8f:28:6a:28:53:
                    5e:88:25:a6:96:25:49:9d:17:46:ad:ca:11:57:b1:
                    9d:ac:53:62:0b:53:f2:0a:3d:13:7c:9b:b1:37:35:
                    79:60:99:ab:50:88:8d:04:a7:f5:0c:f4:bd:48:6c:
                    50:05:97:35:a1:33:26:83:b8:1a:e2:24:5d:3e:25:
                    20:17:c5:68:41:64:e2:72:08:38:1c:db:78:22:db:
                    c1:a0:67:2c:4e:6c:3c:25:63:50:29:97:57:f8:d3:
                    0d:5a:c8:2d:2b:da:b3:71:7b:72:c8:c0:af:1e:aa:
                    e6:be:f6:6a:9f:4f:e8:7d:69:e8:b0:4b:69:19:92:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:38:ED:D1:EE:FF:08:8F:E2:46:00:59:F5:BC:57:DB:97:2B:6F
            X509v3 Authority Key Identifier:
                keyid:8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:e4:cf:59:d9:72:f7:ee:6d:c1:20:43:f6:92:4d:86:54:
         91:04:fe:a8:cb:18:f8:4e:0b:97:9c:d8:e8:13:93:ff:d2:0b:
         ea:44:c3:46:eb:9d:a6:57:57:de:46:04:b8:cf:b9:09:01:04:
         2a:c3:0e:c0:3c:f7:b3:14:e0:c9:38:8f:c5:29:8e:7c:70:d6:
         88:79:8f:62:13:9f:32:68:64:8f:b2:2b:7e:df:0c:b6:91:66:
         f4:b1:a3:e0:c8:4a:35:b4:44:a7:27:d0:00:c4:78:d0:7a:12:
         93:8b:c4:89:60:cc:f8:d3:5f:02:16:f1:04:a2:36:ab:d1:e9:
         37:20:24:07:12:01:38:5c:94:e4:f2:72:14:bf:23:b6:56:63:
         49:94:c2:9b:dc:0c:a9:c3:cc:da:f1:14:0a:5e:bf:16:01:bf:
         74:25:2b:97:e8:08:e4:f7:f0:2c:20:58:2c:81:78:d0:8d:c2:
         0a:ee:03:3e:32:77:ed:33:b2:94:da:32:50:e2:55:3a:ed:f4:
         f1:fa:1a:04:2d:fa:9a:f7:cd:27:91:34:fb:d3:2f:94:b3:f8:
         48:a0:4e:3c:f8:f4:91:9b:11:0f:aa:42:a0:2f:f5:82:2a:eb:
         bc:c2:20:5a:ed:9a:20:d5:40:e4:c5:49:ae:3a:2a:39:5a:3e:
         cb:f6:65:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:21:32 2026 by rpki-client