Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.mft
File:                     B3516EB774935A87013A509DC395B99B1CF2E06E.mft (raw, json)
Hash identifier:          RVN1fmnb6TVenMHZn/FjfBuW0izarJ0glq0fltDFgVM=
Subject key identifier:   92:89:95:A7:05:1E:6D:B4:C5:6C:26:C5:7B:F7:64:83:AE:E1:49:00
Authority key identifier: B3:51:6E:B7:74:93:5A:87:01:3A:50:9D:C3:95:B9:9B:1C:F2:E0:6E
Certificate issuer:       /CN=B3516EB774935A87013A509DC395B99B1CF2E06E
Certificate serial:       74EBC05FB49C9E5D19F434FA0825BD4D34BBA66B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.mft
Manifest number:          AF
Signing time:             Fri 24 Jul 2026 13:42:04 +0000
Manifest this update:     Fri 24 Jul 2026 13:37:04 +0000
Manifest next update:     Sat 25 Jul 2026 17:17:04 +0000
Files and hashes:         1: 3137302e3234372e38302e302f32322d3332203d3e203631383035.roa (hash: DR6khs2yYiAw+BcFOk9CPax2Iju8DOP9E+gc5BpfsVI=)
                          2: 3230302e3232392e3135362e302f32322d3332203d3e203631383035.roa (hash: lnza7vc0v99582acyGPp4niTunmKJt/v6+0ebAYCqts=)
                          3: 3133312e3136312e3135362e302f32322d3332203d3e203631383035.roa (hash: 56gOHJHUZGe+CJRIL8CenIK2j/EMqrixxUgw3gai/v8=)
                          4: 34352e3233392e3232342e302f32322d3332203d3e203631383035.roa (hash: f6w+uAGlcE7m4ZhLHo6lN4Nrg3wqZmQvU1JF9JX/JxA=)
                          5: 323830343a313939383a3a2f33322d313238203d3e203631383035.roa (hash: 7g3xklMYhQX8k+aBGODcquRxzontPd1waAoW94UtGYc=)
                          6: 3137302e3234362e33322e302f32322d3332203d3e203631383035.roa (hash: AkB1nFfE6THFkmk6nDjSb3A9QIG60yCeubkjmND6Zis=)
                          7: B3516EB774935A87013A509DC395B99B1CF2E06E.crl (hash: B0yXYi99+6Y+kT5hbGztKMTXLmtmgFXWhyckeDjDUDc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:eb:c0:5f:b4:9c:9e:5d:19:f4:34:fa:08:25:bd:4d:34:bb:a6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3516EB774935A87013A509DC395B99B1CF2E06E
        Validity
            Not Before: Jul 24 13:37:04 2026 GMT
            Not After : Jul 25 17:17:04 2026 GMT
        Subject: CN=928995A7051E6DB4C56C26C57BF76483AEE14900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:01:d5:34:d5:d0:5a:5f:50:71:fc:c3:fa:
                    98:c3:d5:d4:f5:77:05:ae:82:c8:39:88:ef:df:dd:
                    a9:02:94:5d:b5:40:41:21:74:03:f8:17:e7:d4:ba:
                    8e:19:0b:51:07:68:c5:14:56:73:6f:74:b0:48:4b:
                    02:53:d2:03:e2:3f:de:d4:7d:a2:5a:b3:1c:af:eb:
                    a8:01:63:72:af:bb:a5:0b:14:eb:29:2e:b8:e9:ed:
                    12:51:a6:60:91:05:5f:31:71:1f:85:37:10:c4:3e:
                    be:2a:54:db:f7:1d:77:a5:5d:98:ff:15:26:3b:08:
                    2f:ce:3d:35:d8:5f:0d:48:1a:e1:cb:24:bc:4d:1f:
                    de:58:48:de:0c:78:e7:ac:c1:02:25:ac:cc:8a:04:
                    31:4a:67:ad:0a:0f:bf:bd:63:01:cd:9f:83:90:c8:
                    96:65:9a:c7:95:c3:1a:c9:ee:d2:82:18:19:8d:69:
                    e3:0d:d8:15:78:8d:3f:6b:91:9c:5e:86:9b:68:d1:
                    2c:70:48:81:c6:35:d1:aa:52:ca:ac:6e:48:a0:21:
                    55:53:c7:e3:8f:c5:a3:66:1e:56:55:09:fe:cf:6a:
                    a5:78:25:ff:57:9b:a2:67:6f:d3:95:19:42:e2:de:
                    e1:c0:98:f9:f4:da:7c:e9:b7:5d:36:6e:1f:90:bb:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:89:95:A7:05:1E:6D:B4:C5:6C:26:C5:7B:F7:64:83:AE:E1:49:00
            X509v3 Authority Key Identifier:
                keyid:B3:51:6E:B7:74:93:5A:87:01:3A:50:9D:C3:95:B9:9B:1C:F2:E0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:f1:ec:15:15:c4:02:12:b2:6c:69:0b:d6:fc:58:68:85:
         b0:61:02:fd:7f:bf:b8:6d:f8:13:58:65:5e:53:2b:ea:57:bc:
         c4:32:d3:fb:81:95:dc:d1:26:82:88:1c:85:4a:f1:93:ea:45:
         bd:ca:d1:12:80:0c:44:f0:d7:3a:77:46:50:05:36:40:cf:49:
         a2:48:3f:68:08:56:78:54:82:b2:71:8b:cc:a0:f8:24:f0:da:
         95:73:c7:3b:ff:26:36:d5:92:8e:8e:e8:8b:d3:e8:82:dc:a6:
         c4:1a:04:77:28:ad:92:98:51:e9:59:8a:88:3b:a8:28:76:22:
         89:e8:55:d0:39:ea:0b:4e:cd:da:07:b3:ad:eb:9d:a2:97:cc:
         a7:90:0c:26:aa:67:92:a8:95:31:1e:9c:5e:6d:30:e9:f0:22:
         cb:0d:43:af:84:39:6e:57:88:a0:4a:b1:27:41:2a:ea:32:8c:
         d6:18:16:ba:09:3d:f1:24:b1:ca:48:a8:a9:8e:e5:e6:e9:bb:
         52:ca:73:c9:60:35:2e:1a:37:a3:a8:cc:12:21:7a:d5:9f:4c:
         6b:2e:12:38:de:20:69:7f:07:07:8a:0d:4c:ec:93:c8:90:58:
         ff:11:bf:8b:cd:35:b3:33:df:68:be:62:22:25:7e:da:18:30:
         e5:26:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:18:58 2026 by rpki-client