Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
File:                     4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft (raw, json)
Hash identifier:          gtWCep1J9A7p64W5hfATaMtlYIzopnil+7ODInIPg4M=
Subject key identifier:   E4:E8:3B:BF:68:C9:41:09:4F:1D:EB:8B:64:A2:65:F2:F4:4F:41:36
Authority key identifier: 49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3
Certificate issuer:       /CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3
Certificate serial:       48FA25AAD120A2356DFD2C85F45B512F5ED9160E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
Manifest number:          AF
Signing time:             Fri 24 Jul 2026 06:11:14 +0000
Manifest this update:     Fri 24 Jul 2026 06:06:14 +0000
Manifest next update:     Sat 25 Jul 2026 09:05:14 +0000
Files and hashes:         1: 323830343a393365633a3a2f33322d313238203d3e20323734383039.roa (hash: YhpJz8sonIu/hzKMiB2EPpkfdbYwzSA+RMx+5kCoTmQ=)
                          2: 4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl (hash: lardhXiBN50YrLoAr7MGL5ce/oB3Xq7ZMbPHbLwz6LQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl
                          rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fa:25:aa:d1:20:a2:35:6d:fd:2c:85:f4:5b:51:2f:5e:d9:16:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3
        Validity
            Not Before: Jul 24 06:06:14 2026 GMT
            Not After : Jul 25 09:05:14 2026 GMT
        Subject: CN=E4E83BBF68C941094F1DEB8B64A265F2F44F4136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:0b:ce:28:5d:f0:63:f1:a5:e6:e2:24:9c:
                    fe:da:8e:b1:bb:82:4d:d7:83:86:2f:97:7a:97:37:
                    14:8e:1f:93:57:df:43:d1:c4:54:e9:52:99:1e:7a:
                    82:95:3a:a0:8e:69:42:b4:0b:6b:7e:be:63:73:81:
                    a7:c4:33:f6:45:6d:b9:5c:0b:c0:6d:d3:5b:92:ee:
                    ee:b8:2e:7a:38:39:00:ed:ff:f5:6d:16:42:09:58:
                    75:9d:cd:58:0d:ab:ed:e2:5b:f8:b6:2e:1d:8e:21:
                    c1:63:4b:79:7e:8d:86:1a:ee:17:e4:61:08:7e:f2:
                    bd:fd:46:8a:79:ff:51:d3:a2:d1:e6:92:0b:e4:32:
                    95:89:07:ed:12:f0:89:13:8a:62:ef:24:6d:ac:b4:
                    fd:d9:5d:f9:f3:e5:d0:94:10:b5:32:dd:7d:30:24:
                    a0:cc:35:54:ae:cb:b8:10:42:44:e2:70:85:e3:5a:
                    d7:ec:fa:d9:9b:fb:ef:8b:31:f1:5c:66:99:40:a3:
                    61:a6:31:68:ab:ac:e9:0b:0e:92:cf:dc:d4:a7:6d:
                    dd:96:02:2a:e1:5e:a2:9c:63:ab:42:96:0e:f9:7b:
                    04:8b:e7:ca:0e:c4:c5:43:be:bd:d7:20:ce:6b:12:
                    bb:c1:ee:7f:b8:f0:83:8e:7d:fd:2d:67:49:88:f0:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E8:3B:BF:68:C9:41:09:4F:1D:EB:8B:64:A2:65:F2:F4:4F:41:36
            X509v3 Authority Key Identifier:
                keyid:49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7c:d9:f3:ac:c4:14:22:9c:e4:3d:ce:d2:88:16:1f:dc:b2:
         45:b6:4a:2c:86:3a:16:35:2c:e0:04:83:61:3c:bb:0b:1d:e9:
         31:29:d7:ba:12:72:c9:ab:c3:3c:47:43:70:9a:1f:fd:6a:66:
         76:d8:ee:14:27:86:09:fb:00:ee:6f:c3:1c:67:f4:7f:e9:c2:
         12:fd:fa:6e:e1:4e:a0:e2:69:33:1b:01:84:9c:63:34:e7:1a:
         f8:13:f3:1a:30:3a:3e:da:dc:fb:fd:22:4a:f5:2d:fc:cc:20:
         5a:28:13:32:12:df:b3:24:ee:22:84:e0:cb:41:b5:cb:01:b2:
         00:ae:9f:e2:ce:27:70:c1:e0:5f:aa:be:1c:06:4a:0c:7b:1b:
         ab:41:4c:43:92:5c:75:2a:0f:b7:10:97:1e:a0:01:42:f9:56:
         9f:a1:58:f8:15:06:c0:02:7c:82:e8:b8:3b:17:c8:17:4f:74:
         e6:f9:b0:b0:71:cd:b5:dd:b8:58:ea:08:59:fe:26:75:9e:f2:
         05:5f:da:f7:a6:75:30:21:52:4f:31:2d:d2:32:66:69:54:d7:
         ae:54:2c:da:ee:79:b6:d0:7c:dc:f4:60:d5:27:15:66:68:02:
         19:0b:ac:35:c9:71:aa:fe:3a:0b:e9:8b:be:c3:b7:04:1f:4a:
         6c:86:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:34:43 2026 by rpki-client