Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
File:                     422625563D5C776AFD91FC7267113152605F299D.mft (raw, json)
Hash identifier:          bKXNwFz4Do6G8o4xi0TUXqrppci8kP1dpXEWsM7+5jI=
Subject key identifier:   77:D0:4C:4A:83:99:12:07:B3:66:5A:B4:76:7F:43:C0:E5:58:9C:0E
Authority key identifier: 42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Certificate issuer:       /CN=422625563D5C776AFD91FC7267113152605F299D
Certificate serial:       1ABB0F5253DBADC174A22BB795F7FD59A5472AE9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
Manifest number:          AA
Signing time:             Thu 23 Jul 2026 12:24:23 +0000
Manifest this update:     Thu 23 Jul 2026 12:19:23 +0000
Manifest next update:     Fri 24 Jul 2026 12:45:23 +0000
Files and hashes:         1: 3230312e3135382e382e302f32332d3233203d3e203631393336.roa (hash: 1DW+uuKrRPNZkrAq+VtMf/NF5+ym4kfzBDfxKffYvWw=)
                          2: 422625563D5C776AFD91FC7267113152605F299D.crl (hash: KyykTRcYnqMFCPYcT8Sztd28U4Edxea6u0hwiq7K46M=)
                          3: 3230312e3135382e31342e302f32332d3233203d3e203631393336.roa (hash: VxPKv2rFNP2lXyBJgKGn0vc8lliWRZ1s/6dbRCzfT+U=)
                          4: 3230312e3135382e31302e302f32332d3233203d3e203631393336.roa (hash: D2nmgTfSk9+l+mWVxBrj+okWVygmYoFCdGNMkEtz12A=)
                          5: 3230312e3135382e382e302f32322d3232203d3e203631393336.roa (hash: 3uv4dIDtTqG7xVx2xI5fHnr65RKPLXVcfSX5+XX8Bsw=)
                          6: 323830343a313838303a383030303a3a2f33342d3334203d3e203631393336.roa (hash: ohSXBJve1hTikPIHbgcdobeKv3mcdk45f8QdombUwW0=)
                          7: 323830343a313838303a3a2f33322d3332203d3e203631393336.roa (hash: KDCG0VQuyKGqozrojLOCVwruA/Y4ugNRtBA8aGO8sa8=)
                          8: 323830343a313838303a343030303a3a2f33342d3334203d3e203631393336.roa (hash: hMTnjVR0vOQQ022G/bjSNFhKtvr1rySFc85hMbrAmkI=)
                          9: 323830343a313838303a383030303a3a2f33332d3333203d3e203631393336.roa (hash: 0yWD5bcv2tii7mPN5WyC4X3gwOKnbeXmnx8g0dK9Hi4=)
                          10: 323830343a313838303a3a2f33332d3333203d3e203631393336.roa (hash: /3/OJgJ8+LLgOnty5Slm9oGHJNWiK3pIsy4J6fk8dlk=)
                          11: 3230312e3135382e31322e302f32332d3233203d3e203631393336.roa (hash: IkdR4yNoz7g4vC+cNNrXLhzYMlIqBXU4yq+trsSy80w=)
                          12: 3230312e3135382e31322e302f32322d3232203d3e203631393336.roa (hash: 2e6yUpI6xBzU/hurSY0DsT/D7ZPxcDUF1LLxasWQ/G0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bb:0f:52:53:db:ad:c1:74:a2:2b:b7:95:f7:fd:59:a5:47:2a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422625563D5C776AFD91FC7267113152605F299D
        Validity
            Not Before: Jul 23 12:19:23 2026 GMT
            Not After : Jul 24 12:45:23 2026 GMT
        Subject: CN=77D04C4A83991207B3665AB4767F43C0E5589C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:46:f8:de:96:f9:78:91:b0:78:46:82:79:
                    a8:84:47:09:20:ef:b3:18:dd:44:48:99:3a:eb:e3:
                    2d:12:2a:9e:ea:9e:66:fd:4a:7b:43:f4:58:01:6c:
                    f6:2e:c5:22:b7:7c:d2:2d:22:36:0f:ca:54:e2:57:
                    21:40:d4:8a:7c:5b:b5:ab:65:34:6d:b0:99:91:1a:
                    1e:96:57:b3:d6:f7:88:80:e0:ec:91:60:5d:c3:e0:
                    8f:d7:bf:f0:29:6e:99:2d:08:2b:0b:eb:c1:4d:a2:
                    f9:8d:44:da:61:e9:b9:3d:b5:0f:f7:d7:24:4a:d8:
                    54:43:09:92:78:0b:73:77:3e:60:7f:e6:d7:ec:e3:
                    ea:99:37:08:3b:fe:8d:68:33:78:e3:85:9c:1f:53:
                    34:af:cf:04:7d:c0:4c:01:f9:77:39:cb:25:bc:9b:
                    28:e6:56:3e:09:29:be:c1:7e:7e:40:6c:be:c5:dd:
                    09:99:74:3e:6a:3a:b3:da:8e:3a:13:89:97:13:08:
                    1a:ee:96:02:b1:43:a4:1e:05:d4:15:a6:ad:90:46:
                    6c:be:71:2c:b3:ce:12:fa:ee:6d:46:80:3f:57:0e:
                    bb:2c:1d:5f:8b:b8:dc:4f:81:33:23:d4:88:0d:29:
                    e6:54:22:e2:e8:ab:ec:68:76:f7:1c:8b:7b:36:7b:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D0:4C:4A:83:99:12:07:B3:66:5A:B4:76:7F:43:C0:E5:58:9C:0E
            X509v3 Authority Key Identifier:
                keyid:42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:0b:3d:fb:55:4d:d7:0a:65:54:42:e6:51:73:9c:e9:aa:
         b9:2a:0a:3e:43:85:a0:ac:d1:b6:0a:8e:64:d2:36:66:98:85:
         92:85:13:58:fd:0e:b8:3e:1e:7a:e4:76:2c:91:8b:2c:e7:11:
         75:93:a8:74:b3:37:6e:d3:d6:7e:a6:ab:92:79:2e:fb:23:15:
         ee:c2:4f:43:7b:e0:05:4a:21:4f:52:bd:58:8e:b4:90:8b:04:
         fa:52:f0:4d:65:a0:3f:02:80:b9:c0:5a:e6:47:24:60:0a:e9:
         60:08:37:57:62:34:8f:24:5e:f1:3b:1f:8d:8f:97:c0:13:7e:
         42:e4:2a:55:bd:64:46:29:da:0c:b5:9b:10:dd:91:67:84:74:
         72:58:ba:54:5f:0f:88:59:d5:d8:26:65:d0:be:1b:35:08:35:
         04:79:6d:bf:59:d1:20:20:64:53:73:81:af:8a:d5:37:e2:08:
         e5:3f:20:bb:d0:4c:f7:e8:76:ec:81:18:3c:f8:8a:4e:27:37:
         e0:0c:97:7b:8f:eb:c3:0f:33:e0:88:65:56:83:07:a4:02:f9:
         98:2a:36:05:22:ca:68:08:31:70:f7:38:44:6a:6f:e9:31:2a:
         ab:8b:58:ab:fb:98:fd:24:95:74:7a:cb:b5:5a:41:a6:db:0f:
         d9:5b:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:18 2026 by rpki-client