Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
File:                     DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json)
Hash identifier:          u7RkVS7qzUJOEGhXWHpPk7QAkSu7laDfaVlZNGcSkXY=
Subject key identifier:   8C:9D:3D:9D:BC:D8:9F:CA:BA:B0:25:B8:97:02:A3:4D:2B:2C:9E:28
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       459BDBEDB532C4307612B9D31F5B8BC2130BAAD9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
Manifest number:          045C
Signing time:             Fri 24 Jul 2026 05:10:04 +0000
Manifest this update:     Fri 24 Jul 2026 05:05:04 +0000
Manifest next update:     Sat 25 Jul 2026 06:03:04 +0000
Files and hashes:         1: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: QIVxHVauEvqV4mYKX09XWLG6LMGXBqT6ako7wX7wXNg=)
                          2: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: r1XY4nAAMQiPedQTv2UyPVyhHWeEghFuH/Sa8IGwww8=)
                          3: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: i4vOZ5jbbLD0oYiy/k3J6OX7KRNwSiY7Tfa27r5KvNs=)
                          4: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: +4wDLLLOGkwUIsFVoAEQ6CNJX/3siyCCrRFT56PPZ/M=)
                          5: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: BsLLZ9KkH4Zj74RdZ0/HI2fM5L9/mlUsxVqy4uRFoIM=)
                          6: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: Up5c3Zrkl/h4NMxezx9vicK8H0zNaqvBqFAGULiwrgY=)
                          7: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: gwYn/is6VhcQvnMynOevGThyvSq+sHyeol7Ooarj7r8=)
                          8: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: SenK1jmwRDLUh8fN2HBnAiAqBo7jN1L29eDWq7Mi8UU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:db:ed:b5:32:c4:30:76:12:b9:d3:1f:5b:8b:c2:13:0b:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Jul 24 05:05:04 2026 GMT
            Not After : Jul 25 06:03:04 2026 GMT
        Subject: CN=8C9D3D9DBCD89FCABAB025B89702A34D2B2C9E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:34:0a:fc:00:90:31:2c:36:90:38:03:13:
                    a2:7f:c7:54:87:e9:04:df:46:bb:00:b3:3d:45:01:
                    e6:e7:62:8e:5e:c0:73:cf:8f:db:51:26:7d:59:cd:
                    c9:e5:74:b1:67:d1:3f:38:b6:52:67:b8:fc:68:43:
                    1d:da:47:11:28:4e:51:78:56:48:e2:4c:67:a9:41:
                    85:3f:7a:8e:e3:38:fd:c6:42:91:04:5f:66:69:9c:
                    dd:c2:e9:30:b5:bc:4e:b7:82:27:2b:f3:ee:f0:40:
                    65:71:b8:91:f8:94:f3:e8:12:02:3b:6d:79:bc:62:
                    19:ee:6e:34:3c:41:cb:22:ce:b3:e9:c2:5c:27:f3:
                    ec:32:38:82:cc:7c:75:4a:d9:ed:3a:50:ae:a5:cb:
                    dd:be:cf:74:9d:9b:7f:31:bb:73:61:c5:b9:a5:69:
                    8c:ce:7b:23:6e:fe:d8:b8:ce:d4:d0:0f:76:79:55:
                    cd:a7:b9:66:21:e1:70:fd:cf:13:40:68:12:c3:95:
                    15:df:75:35:86:bc:b4:2b:23:77:bf:31:32:48:7a:
                    b4:7b:4e:09:87:b1:84:63:55:22:68:8d:cf:a3:a3:
                    44:6d:7f:28:75:03:23:45:e6:98:28:31:c8:6e:43:
                    c8:f4:e9:c5:c4:62:3e:a2:c4:2a:f5:f1:84:2f:fd:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:3D:9D:BC:D8:9F:CA:BA:B0:25:B8:97:02:A3:4D:2B:2C:9E:28
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:24:01:b7:4e:b5:ad:63:41:d6:c8:34:ba:0c:21:67:d5:0f:
         62:7e:2d:07:e9:be:5b:fa:f1:5c:9d:b6:99:63:3a:9b:1f:22:
         f3:a6:85:b1:9b:bb:14:a1:aa:be:20:55:d1:d5:2a:6a:8d:ca:
         61:3a:7e:3a:45:d1:76:84:b6:59:dd:13:5f:fa:5c:88:18:ef:
         27:5b:d0:04:9a:82:d1:a6:11:55:f3:23:41:bc:de:29:4b:4b:
         66:24:24:2c:b5:46:1a:a8:4c:28:b0:20:3a:af:9e:96:5c:ab:
         8e:99:04:72:53:cd:8c:96:d7:5b:b8:4f:8c:65:8b:87:5a:e9:
         70:4a:47:d3:a4:4e:fa:aa:e7:50:16:88:46:a6:aa:34:9e:95:
         6a:40:81:23:da:47:5f:fc:2f:41:f0:f6:22:a3:14:f0:de:bf:
         24:f6:eb:37:d5:01:63:27:d8:2d:1f:5e:19:21:58:6e:a5:79:
         cb:fa:21:f4:54:c6:fa:64:68:5c:6f:35:aa:34:34:ee:d2:be:
         7c:4e:7f:bd:fc:53:3c:8e:90:a3:96:cc:6d:85:f9:15:aa:57:
         45:d4:f3:86:da:96:b6:0b:41:a2:7e:1b:f8:ea:c2:bb:71:23:
         17:2d:69:27:4c:3b:8c:13:dc:1c:c9:e1:e2:24:8c:a2:ea:ca:
         2c:3e:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:44 2026 by rpki-client