Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.mft (raw, json)
Hash identifier:          gQRz93y7OOtzLxOq+O1QM2Omn49s+QOtlttKC9EeogU=
Subject key identifier:   98:04:B5:20:AB:1F:9C:0E:71:85:02:BF:9C:6A:D4:DA:95:C7:24:FB
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       6CE133C2005A08070CACDDF8EEAF5C405474B73B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
Manifest number:          02D9
Signing time:             Fri 24 Jul 2026 11:08:58 +0000
Manifest this update:     Fri 24 Jul 2026 11:03:58 +0000
Manifest next update:     Sat 25 Jul 2026 12:39:58 +0000
Files and hashes:         1: 3138372e39342e31322e302f32332d3233203d3e20323730353737.roa (hash: GJDM9MFPyPVHxUz5zVPRfZ5wmC/1XF0+4gaNs6pFJJU=)
                          2: 3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (hash: SAzzr9+ejHqkM4nyx7EXlfmVQnmvipgVooUb4stCQt4=)
                          3: 3138372e39342e31352e302f32342d3234203d3e20323730353737.roa (hash: t51EM43vjI9AH++j7Rs/ygfSZoRT5WJ3Iv34Kh+KzsI=)
                          4: 323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (hash: sxDvWTX2pXC3dWfXyX6Enbx1cQl872IPWH+FtvNWjcw=)
                          5: 24C0BF59215339684BA80028158EEDE0FD534D91.crl (hash: aW2Dx4GeNuP4uW/ynA6+NOQTN3phcoqAxd3UatD007s=)
                          6: 323830343a366532303a633030303a3a2f33342d3334203d3e20323730353737.roa (hash: usmoePKMpZ1UsKA/8+akkmQX1IZNkaVLRw77pXg2Qtg=)
                          7: 3138372e39342e31322e302f32322d3232203d3e20323730353737.roa (hash: gQgFfcgmIDDGG/jhNAleQTzlvifPLO2Gf+f4CO89LTk=)
                          8: 3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (hash: 6us2oOVEzPiUpRDcGpf0U8IwO15npQEszTfX51xUV7c=)
                          9: 3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (hash: Axy9O4qLsTaci5WGK0jtdFXtX+xW3YdhN0NSSMXAQfM=)
                          10: 3138372e39342e31342e302f32332d3233203d3e20323730353737.roa (hash: EOPFEY/ANraqr7ejSVdvjS6zv2T5AIorf861IvYjHU8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e1:33:c2:00:5a:08:07:0c:ac:dd:f8:ee:af:5c:40:54:74:b7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jul 24 11:03:58 2026 GMT
            Not After : Jul 25 12:39:58 2026 GMT
        Subject: CN=9804B520AB1F9C0E718502BF9C6AD4DA95C724FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:5e:64:7f:ee:c7:dc:ab:1f:9d:98:6f:fd:
                    3d:50:7b:8c:ed:94:54:ef:08:a2:b8:2d:27:ba:f7:
                    a2:2c:0c:d9:d6:3e:0d:48:d7:f7:55:6e:26:4f:eb:
                    3c:35:3f:8f:94:c4:0f:41:26:f3:c5:bb:78:ac:91:
                    71:0c:f9:0a:90:07:6f:97:1d:21:ba:96:76:ef:10:
                    ee:51:c3:57:e5:91:aa:9c:58:e7:c2:10:69:61:b3:
                    95:8f:12:44:1e:93:19:f3:bb:43:2a:ba:64:4e:99:
                    2b:3d:eb:d1:00:02:51:2d:df:43:d8:fc:94:bb:98:
                    f7:a3:6f:c8:42:4d:ce:41:3f:41:d9:84:0f:e7:38:
                    9d:3c:25:f7:a2:f1:c5:76:26:a7:91:6a:64:f7:ef:
                    33:fa:62:e3:b3:7d:89:62:66:ae:5b:4d:77:60:6f:
                    63:16:1d:29:8d:7b:56:d0:32:07:98:64:cf:b7:b8:
                    69:67:31:0b:22:6c:0d:b2:42:34:ce:01:80:8b:9a:
                    7d:47:77:3d:6e:c5:e3:39:16:98:34:ef:0b:68:79:
                    dd:03:0f:02:e5:52:96:e3:75:fa:ba:c7:7d:2f:10:
                    b3:7e:eb:ef:09:15:6e:e2:89:de:b3:18:3a:55:e6:
                    d6:2d:07:c9:df:7f:0c:5f:e8:3d:6c:c7:3c:4a:45:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:B5:20:AB:1F:9C:0E:71:85:02:BF:9C:6A:D4:DA:95:C7:24:FB
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:a9:44:23:38:10:25:ce:4a:69:30:c8:49:31:23:8e:02:
         01:b0:68:e0:63:44:10:db:e5:3f:37:50:e4:45:ec:06:9e:d8:
         60:ef:ff:1a:0c:77:50:51:89:3c:08:6a:42:c0:ee:03:52:be:
         74:53:37:e3:87:9b:9a:e0:70:af:ec:42:0b:bb:73:28:91:d1:
         61:5e:98:dd:31:b8:cb:7b:95:a8:90:78:0c:f9:37:27:8f:7a:
         f2:fd:42:7f:4e:bc:c1:be:ee:e8:25:d2:b3:3e:ec:fd:7b:03:
         0a:5c:0f:82:57:78:b9:61:62:a5:81:7e:47:3c:a2:c1:49:82:
         61:e7:80:11:3c:7e:ca:78:46:fa:9b:db:65:a8:8c:41:85:aa:
         74:fd:07:63:5b:d4:a4:4f:9c:92:45:52:56:3f:a6:d6:80:83:
         13:b0:6a:c7:80:64:09:1b:a2:0a:a5:3a:00:82:ac:7b:7c:cc:
         2d:cd:6e:47:a8:13:fa:a0:69:47:73:3a:1e:88:7e:84:58:84:
         4d:11:37:b4:34:d9:63:f1:f8:bd:2b:b1:2c:a2:d8:a8:9c:cd:
         0a:39:9d:77:8c:4b:fe:54:8f:8f:94:bc:14:ec:44:2d:a2:26:
         ef:51:a7:06:de:99:12:46:e7:2c:f9:88:00:e0:87:2e:f7:e2:
         dc:a5:d6:1e
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUbOEzwgBaCAcMrN347q9cQFR0tzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRDMEJGNTkyMTUzMzk2ODRCQTgwMDI4MTU4RUVERTBG
RDUzNEQ5MTAeFw0yNjA3MjQxMTAzNThaFw0yNjA3MjUxMjM5NThaMDMxMTAvBgNV
BAMTKDk4MDRCNTIwQUIxRjlDMEU3MTg1MDJCRjlDNkFENERBOTVDNzI0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCil15kf+7H3KsfnZhv/T1Qe4zt
lFTvCKK4LSe696IsDNnWPg1I1/dVbiZP6zw1P4+UxA9BJvPFu3iskXEM+QqQB2+X
HSG6lnbvEO5Rw1flkaqcWOfCEGlhs5WPEkQekxnzu0MqumROmSs969EAAlEt30PY
/JS7mPejb8hCTc5BP0HZhA/nOJ08Jfei8cV2JqeRamT37zP6YuOzfYliZq5bTXdg
b2MWHSmNe1bQMgeYZM+3uGlnMQsibA2yQjTOAYCLmn1Hdz1uxeM5Fpg07wtoed0D
DwLlUpbjdfq6x30vELN+6+8JFW7iid6zGDpV5tYtB8nffwxf6D1sxzxKRWZ1AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUmAS1IKsfnA5xhQK/nGrU2pXHJPswHwYDVR0j
BBgwFoAUJMC/WSFTOWhLqAAoFY7t4P1TTZEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HSDRpcTl5dmd6ejMzaHExb2Q2eE1TcG94bTlTeGZmdWVyTmdMNktYdldz
LzAvMjRDMEJGNTkyMTUzMzk2ODRCQTgwMDI4MTU4RUVERTBGRDUzNEQ5MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNEMwQkY1OTIxNTMzOTY4NEJB
ODAwMjgxNThFRURFMEZENTM0RDkxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dI
NGlxOXl2Z3p6MzNocTFvZDZ4TVNwb3htOVN4ZmZ1ZXJOZ0w2S1h2V3MvMC8yNEMw
QkY1OTIxNTMzOTY4NEJBODAwMjgxNThFRURFMEZENTM0RDkxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
hNWpRCM4ECXOSmkwyEkxI44CAbBo4GNEENvlPzdQ5EXsBp7YYO//Ggx3UFGJPAhq
QsDuA1K+dFM344ebmuBwr+xCC7tzKJHRYV6Y3TG4y3uVqJB4DPk3J4968v1Cf068
wb7u6CXSsz7s/XsDClwPgld4uWFipYF+RzyiwUmCYeeAETx+ynhG+pvbZaiMQYWq
dP0HY1vUpE+ckkVSVj+m1oCDE7Bqx4BkCRuiCqU6AIKse3zMLc1uR6gT+qBpR3M6
Hoh+hFiETRE3tDTZY/H4vSuxLKLYqJzNCjmdd4xL/lSPj5S8FOxELaIm71GnBt6Z
EkbnLPmIAOCHLvfi3KXWHg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:16:19 2026 by rpki-client