Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
File:                     3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json)
Hash identifier:          lfq4fhvJ+E8fc2VXgrZwnPeVu3Sh9uHKva3Yz/6INKk=
Subject key identifier:   AE:EE:BC:2B:CC:41:6C:99:39:54:7A:4E:DB:93:9E:F4:FF:A3:D0:7D
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Certificate issuer:       /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial:       2777AB83BE9AD544ABD36BFF2016CFDF2CAE5CC5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
Manifest number:          024D
Signing time:             Fri 24 Jul 2026 01:08:20 +0000
Manifest this update:     Fri 24 Jul 2026 01:03:20 +0000
Manifest next update:     Sat 25 Jul 2026 02:41:20 +0000
Files and hashes:         1: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=)
                          2: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=)
                          3: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: B2k8fn4p05jlDlh3OJ45jCfpBu8W/1AYlOTh6I5/BlY=)
                          4: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
                          rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:77:ab:83:be:9a:d5:44:ab:d3:6b:ff:20:16:cf:df:2c:ae:5c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
        Validity
            Not Before: Jul 24 01:03:20 2026 GMT
            Not After : Jul 25 02:41:20 2026 GMT
        Subject: CN=AEEEBC2BCC416C9939547A4EDB939EF4FFA3D07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:fa:fd:3e:2c:ac:74:2a:a5:36:1e:3d:4b:
                    c7:76:8e:e1:50:5a:bf:f6:ae:f9:57:a5:1c:6c:36:
                    41:07:79:bf:5a:b3:a4:b6:b3:81:0b:51:ff:b3:7e:
                    3c:b1:0a:13:88:ff:ce:5f:75:c9:9f:a5:44:f3:3e:
                    4d:eb:c0:ca:fb:27:ab:b6:fc:44:9c:d3:d7:a1:ae:
                    5a:38:e4:a8:e6:fb:58:4f:b2:f2:44:8d:b9:29:de:
                    5d:f1:10:09:25:1c:fa:66:e8:a0:9f:fe:2c:09:0a:
                    d4:19:66:3e:b8:17:33:0e:16:2a:bf:08:d7:32:54:
                    46:1c:89:a7:24:b7:13:20:38:b0:f6:55:24:df:3e:
                    24:f1:d0:5d:12:62:1f:6b:56:8d:80:64:25:99:7a:
                    55:ef:0e:d5:b2:02:6d:ce:f2:0a:34:9e:5d:d1:3d:
                    e3:3f:c8:ae:85:ba:ad:2f:04:4c:46:29:49:37:23:
                    97:9e:71:c4:55:08:15:0f:00:cd:88:b2:f3:f9:93:
                    15:7c:3a:54:82:a0:5b:b0:b1:ac:0a:3d:a5:08:a1:
                    57:1c:21:dd:d2:a9:ea:22:d0:22:9e:2e:1b:ab:97:
                    a7:58:e8:0a:f0:91:35:ab:76:bd:e9:37:4b:94:e4:
                    88:84:64:45:a4:e6:d4:5b:b1:33:27:0a:93:b0:45:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:BC:2B:CC:41:6C:99:39:54:7A:4E:DB:93:9E:F4:FF:A3:D0:7D
            X509v3 Authority Key Identifier:
                keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:39:bd:63:4f:15:67:5e:5b:b1:73:ac:17:0a:ee:b3:6a:e7:
         fb:77:50:c7:85:1a:18:20:bd:c2:ab:ba:d6:22:6b:cc:29:58:
         4c:11:cd:35:f9:d5:64:d5:6c:39:20:26:da:8a:cb:39:fe:66:
         4e:73:72:be:21:a3:a7:8c:04:52:e7:33:6c:e2:c7:cf:a1:33:
         5d:91:4c:b9:33:a3:6f:28:77:a0:46:65:14:93:3d:9c:59:1f:
         4e:e3:63:ea:16:a7:67:9b:19:a0:41:24:d8:28:5c:e4:ff:34:
         1e:28:e7:ee:2b:3c:09:44:4d:6a:44:92:39:42:74:14:0e:8f:
         13:a7:13:9b:c3:92:f6:86:4d:dd:1f:79:27:fd:69:4f:ab:ee:
         fe:54:1c:e0:b4:dc:ad:3b:01:37:d5:e6:63:f9:87:3e:a4:ef:
         47:9f:cc:c8:51:99:40:59:36:72:3b:22:56:6c:11:ff:93:d1:
         3c:74:95:ee:22:d0:61:50:7f:8f:33:7c:88:07:42:3e:ce:1c:
         c5:0b:5a:4b:d7:7b:af:b4:42:09:fe:e2:52:9f:e3:9b:3d:14:
         c3:83:bd:e5:2e:4b:7f:4f:62:08:e5:77:ea:0b:a1:5f:f9:77:
         cc:87:a2:d5:74:8e:d7:65:b9:d6:98:40:95:b2:cd:03:c7:19:
         af:1d:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:16 2026 by rpki-client