Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
File:                     D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft (raw, json)
Hash identifier:          An3/r3gXMI58UoLiccZXEKZ0ljyYtelZOrm9N+nkGdE=
Subject key identifier:   AB:36:C9:34:6E:BF:8F:67:11:28:AD:87:5E:2E:D4:50:26:1B:DC:8A
Authority key identifier: D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94
Certificate issuer:       /CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294
Certificate serial:       34BB5197BA085DC74AB521E64CCAEAF8E156D893
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
Manifest number:          8D
Signing time:             Thu 23 Jul 2026 12:30:21 +0000
Manifest this update:     Thu 23 Jul 2026 12:25:21 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:21 +0000
Files and hashes:         1: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: CTc/I4oATaUgTnMimYPthSK6cv6XoInRJAu88IlIznw=)
                          2: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: Ew+XSXX5kjV3yvQliJbXhg9r/kN5uUZU+7rqkq7LYtw=)
                          3: D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl (hash: anKnTcSKQTZK7bz6BYl5NbId/JkZzANSwZ18p18idWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bb:51:97:ba:08:5d:c7:4a:b5:21:e6:4c:ca:ea:f8:e1:56:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294
        Validity
            Not Before: Jul 23 12:25:21 2026 GMT
            Not After : Jul 24 15:01:21 2026 GMT
        Subject: CN=AB36C9346EBF8F671128AD875E2ED450261BDC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:8f:12:80:a5:62:b4:76:9d:6d:90:8c:f4:
                    52:eb:0f:0d:59:1b:68:67:a5:81:03:5b:5b:7d:9e:
                    6d:2e:3c:4f:b6:25:00:fd:7a:d2:69:c0:ea:e8:46:
                    cc:e0:5c:a4:e1:07:2c:e4:2d:11:91:f8:e4:a6:06:
                    57:c9:06:03:87:b1:18:c2:05:be:39:e3:19:2b:38:
                    ef:4a:da:6c:3e:ff:ee:46:4e:4a:c5:35:20:ea:0c:
                    01:5b:d4:20:5f:6c:a9:c4:92:a3:36:2d:0c:fe:75:
                    cf:4c:58:c0:24:98:f0:90:8c:78:d1:8c:a9:c0:12:
                    46:ce:9e:8d:3c:a1:bb:10:58:da:a5:a1:3b:7c:e9:
                    10:95:fa:41:3c:d7:82:4f:48:ac:d3:fc:ae:03:06:
                    38:a1:be:cd:aa:52:a9:a3:0e:de:e0:97:a8:fc:79:
                    8e:94:03:49:76:3b:64:b4:f4:e9:fa:8b:b2:fe:3e:
                    e9:3c:6c:98:67:b9:54:e0:6f:aa:9b:c6:f5:4d:ca:
                    55:ec:07:a4:16:6b:6f:95:74:9c:78:0a:09:2c:fb:
                    f8:d5:27:01:ad:2a:5a:8b:28:fe:97:86:42:d8:74:
                    e5:7e:64:44:65:98:6f:b4:8a:6c:7a:96:56:a2:71:
                    76:25:1a:0f:97:8a:d4:4d:6f:60:89:f8:99:27:72:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:36:C9:34:6E:BF:8F:67:11:28:AD:87:5E:2E:D4:50:26:1B:DC:8A
            X509v3 Authority Key Identifier:
                keyid:D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:5f:5c:bd:a1:e2:b3:bc:5f:bf:39:50:14:b5:8d:dd:6e:
         ce:f6:85:1f:e1:e8:90:db:01:fb:d8:5b:5c:6f:c6:95:08:22:
         84:d6:1d:42:7f:68:70:9f:c0:2d:53:97:f8:77:93:b3:06:20:
         46:81:90:5f:3d:2e:1b:53:78:63:2a:3b:c0:cb:85:be:d4:48:
         5d:54:9b:c6:9d:2e:9a:4c:ee:09:d5:87:37:24:fd:10:e2:4b:
         68:48:62:ab:a0:a5:31:57:49:92:28:03:93:96:6f:88:3d:e0:
         e6:16:0c:8a:ee:be:94:bb:96:3c:59:30:b1:94:64:cd:bd:a8:
         6c:0a:e3:8d:1c:de:20:d4:1e:26:04:90:2c:17:26:13:32:e8:
         f0:0f:59:9e:ea:99:c1:30:3c:5a:f3:b9:13:a6:e4:90:9c:05:
         8a:b6:52:95:68:3b:fd:1a:b6:26:45:21:c7:89:25:07:93:5e:
         a6:7c:ea:2a:30:76:41:0a:6f:17:fa:4a:f4:84:22:a9:8a:01:
         5f:3d:83:1e:fb:79:53:6c:b6:9b:71:e5:75:d9:f7:e3:ed:5e:
         55:3f:cc:2f:53:3b:fd:3a:0b:59:ab:e5:2c:57:e5:3c:3b:49:
         8e:d3:40:10:b1:fa:f9:27:f6:29:69:38:23:bf:64:1c:95:db:
         14:4a:7b:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNLtRl7oIXcdKtSHmTMrq+OFW2JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjUzMjBCRDI0Rjc3RjAxQ0VENTlCQTQzQjM1MkMx
RkExOTI5NDAeFw0yNjA3MjMxMjI1MjFaFw0yNjA3MjQxNTAxMjFaMDMxMTAvBgNV
BAMTKEFCMzZDOTM0NkVCRjhGNjcxMTI4QUQ4NzVFMkVENDUwMjYxQkRDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDffo8SgKVitHadbZCM9FLrDw1Z
G2hnpYEDW1t9nm0uPE+2JQD9etJpwOroRszgXKThByzkLRGR+OSmBlfJBgOHsRjC
Bb454xkrOO9K2mw+/+5GTkrFNSDqDAFb1CBfbKnEkqM2LQz+dc9MWMAkmPCQjHjR
jKnAEkbOno08obsQWNqloTt86RCV+kE814JPSKzT/K4DBjihvs2qUqmjDt7gl6j8
eY6UA0l2O2S09On6i7L+Puk8bJhnuVTgb6qbxvVNylXsB6QWa2+VdJx4Cgks+/jV
JwGtKlqLKP6XhkLYdOV+ZERlmG+0imx6llaicXYlGg+XitRNb2CJ+JkncplpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqzbJNG6/j2cRKK2HXi7UUCYb3IowHwYDVR0j
BBgwFoAU0M9TIL0k938BztWbpDs1LB+hkpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl
U2UvMC9EMENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0Y1MzIwQkQyNEY3N0Yw
MUNFRDU5QkE0M0IzNTJDMUZBMTkyOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC9E
MENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfRlfXL2h4rO8X785UBS1jd1uzvaFH+HokNsB+9hbXG/GlQgihNYdQn9ocJ/A
LVOX+HeTswYgRoGQXz0uG1N4Yyo7wMuFvtRIXVSbxp0umkzuCdWHNyT9EOJLaEhi
q6ClMVdJkigDk5ZviD3g5hYMiu6+lLuWPFkwsZRkzb2obArjjRzeINQeJgSQLBcm
EzLo8A9ZnuqZwTA8WvO5E6bkkJwFirZSlWg7/Rq2JkUhx4klB5NepnzqKjB2QQpv
F/pK9IQiqYoBXz2DHvt5U2y2m3Hlddn34+1eVT/ML1M7/ToLWavlLFflPDtJjtNA
ELH6+Sf2KWk4I79kHJXbFEp7ww==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:30 2026 by rpki-client