Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
File:                     E623553538E00E63657BFD8F27CC352EDDF522D9.mft (raw, json)
Hash identifier:          z8GKdSuKT/ZAFyuobwQSRyUXZmDSgrJfdTePAo262iM=
Subject key identifier:   41:D7:A9:D7:3D:AD:E0:8E:F1:A5:E6:4A:3E:C0:68:09:A2:66:37:6F
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       3A61B8E2BDBE7B035382FD4A4CF89458EE761160
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
Manifest number:          01A8
Signing time:             Thu 23 Jul 2026 12:44:00 +0000
Manifest this update:     Thu 23 Jul 2026 12:39:00 +0000
Manifest next update:     Fri 24 Jul 2026 14:29:00 +0000
Files and hashes:         1: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (hash: 6e/IZiUwN3cagwlm1A9swSt9svV15UaC2xZjjS1hZTg=)
                          2: 34352e3233362e34382e302f32322d3232203d3e20323638323035.roa (hash: gnACK1w8rDrazD2AZoFvrb3QiEacNPJmuPlUq691Rno=)
                          3: E623553538E00E63657BFD8F27CC352EDDF522D9.crl (hash: CiNULLamD/2vaIF6ahgBn1Jdy0wL0YVUw7vbfx9y+4U=)
                          4: 34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (hash: ZYEbTTNDISMDXw6fnynq7/a2RcS00aDVV94gxzgG1Wg=)
                          5: 323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (hash: T2MQ6pxyuHe4Ql1J68yINGO4jRY7Zn6W7ydm2OODLoI=)
                          6: 34352e3233362e34392e302f32342d3234203d3e20323638323035.roa (hash: D8hykTeghL3V0AYqnfS4I0lhRIt0ghz1fGgqGIHBj78=)
                          7: 34352e3233362e35302e302f32342d3234203d3e20323638323035.roa (hash: uEI/Pc7T9T4L6s0WTzsrOQlPb9MufOEv4eKIWpm+wSM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 14:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:61:b8:e2:bd:be:7b:03:53:82:fd:4a:4c:f8:94:58:ee:76:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul 23 12:39:00 2026 GMT
            Not After : Jul 24 14:29:00 2026 GMT
        Subject: CN=41D7A9D73DADE08EF1A5E64A3EC06809A266376F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:b2:f3:76:a5:b0:ea:0f:a2:3f:3c:0e:eb:
                    78:fa:4a:41:02:68:f3:c9:f2:b2:cd:63:a3:da:85:
                    42:1d:4e:7e:1e:d9:93:f9:15:c0:20:e6:72:48:11:
                    0d:3e:e1:cc:b2:f1:40:b5:d0:77:67:13:22:70:f7:
                    09:b5:e0:79:9c:56:b7:13:22:d0:85:e0:0c:44:1e:
                    51:7f:9f:db:e6:cc:79:8f:18:73:33:36:f0:45:3e:
                    fd:67:91:4e:2e:fd:ec:b8:7d:94:6c:23:91:cc:ce:
                    8c:0c:f7:b4:71:a3:d6:57:89:83:4a:5e:dd:94:c5:
                    ec:74:c5:d8:29:bd:01:dc:ff:2a:a3:47:8e:b1:95:
                    ba:ac:e8:ba:a4:7f:83:34:24:cb:80:f3:22:6e:ea:
                    51:a5:e6:ff:5c:f4:a0:75:36:d9:84:80:b9:8e:8b:
                    c3:47:3e:91:9c:e2:ce:90:42:23:3b:ff:7d:9a:89:
                    4e:54:d9:83:f6:90:95:c7:d3:6f:54:39:c5:a9:98:
                    35:7f:28:37:11:dc:29:75:6e:0b:20:04:bf:99:f4:
                    93:43:93:ca:12:7e:7f:76:ad:14:5b:26:90:7f:a3:
                    57:61:0a:69:b4:c1:18:25:50:a4:44:13:c7:44:19:
                    47:73:52:03:86:ba:5b:18:5e:a1:73:41:64:9a:d5:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:A9:D7:3D:AD:E0:8E:F1:A5:E6:4A:3E:C0:68:09:A2:66:37:6F
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b2:5e:0c:85:4f:1c:ff:16:19:95:2f:ee:1d:0f:ae:94:50:
         e2:40:6b:98:2f:4e:b1:77:66:f6:27:ce:82:d4:a7:75:21:20:
         cc:79:2a:39:d2:f6:c8:3e:87:e9:36:64:c9:e7:7e:ff:fd:d4:
         c7:d0:32:af:99:12:80:2b:f4:80:db:71:d1:cd:e1:58:35:18:
         0b:4a:75:0a:79:f7:fb:13:e1:6f:42:18:8f:0c:4d:22:9e:2b:
         15:41:87:fd:ca:d7:89:6a:ed:af:77:8d:8c:2b:54:08:48:00:
         da:8e:84:8d:1b:65:98:6b:fc:64:73:09:e9:f6:19:7d:40:32:
         36:3c:9c:6a:87:da:61:70:42:c8:67:15:54:4d:33:69:dc:70:
         d6:df:55:ba:05:b0:17:58:cb:7f:5a:e3:04:34:00:24:49:72:
         b9:67:4f:c6:21:97:4f:bd:9a:79:80:b0:20:84:f3:e5:fa:ba:
         96:f9:b6:a9:54:1e:88:02:3d:0b:72:e8:95:fb:c2:de:20:82:
         21:b5:27:2e:88:22:8a:fe:60:1b:c8:5a:5f:07:cf:53:52:20:
         13:dc:c0:f0:a4:4c:36:57:17:74:07:80:e6:3f:20:27:0f:2b:
         36:80:85:3a:06:e1:2e:fb:fd:d1:27:e7:7f:15:3b:2f:a7:0e:
         da:16:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:17 2026 by rpki-client