Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
File:                     4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json)
Hash identifier:          /f84D6pROwanvWtNpFIj8d5kV/EWURzpzn6kmGmIBD8=
Subject key identifier:   58:63:67:58:05:27:AE:61:CD:6B:C0:F7:01:6E:1B:06:41:D4:C6:03
Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
Certificate issuer:       /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Certificate serial:       1295C1A2C00F909C1F53F888D37BCDE7D0EF0F6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
Manifest number:          0220
Signing time:             Fri 24 Jul 2026 04:10:26 +0000
Manifest this update:     Fri 24 Jul 2026 04:05:26 +0000
Manifest next update:     Sat 25 Jul 2026 07:58:26 +0000
Files and hashes:         1: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: ExiHD3znvo9lR43PsZjcLGPpuB5WBcCsfiut4JTIsn4=)
                          2: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: SxZQAE35KjoIKxtvw4hCd1ykd1xc9GMr7GBWpJeHEWE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl
                          rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:95:c1:a2:c0:0f:90:9c:1f:53:f8:88:d3:7b:cd:e7:d0:ef:0f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
        Validity
            Not Before: Jul 24 04:05:26 2026 GMT
            Not After : Jul 25 07:58:26 2026 GMT
        Subject: CN=586367580527AE61CD6BC0F7016E1B0641D4C603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:09:aa:a6:b1:b9:dc:78:f9:62:6b:ef:c6:
                    f5:ed:4a:f0:05:89:20:46:fc:57:90:23:d2:af:e2:
                    9e:b4:12:68:be:d4:2e:c1:18:c3:ed:e5:f6:39:93:
                    22:2a:48:aa:0d:81:51:32:de:bc:73:f0:4d:2f:b8:
                    46:e3:6e:68:fe:0f:98:cd:bb:3c:98:3a:fd:79:5a:
                    b5:1b:10:81:ed:d2:24:9b:5d:81:ca:06:33:18:d3:
                    2a:ef:fc:60:62:f3:bf:02:8d:76:c2:9a:28:65:aa:
                    ee:de:bb:22:7f:8c:8c:74:38:1d:b8:74:46:95:71:
                    30:96:7b:fa:59:6a:19:3a:7b:48:c2:40:b2:10:ef:
                    6c:36:c6:5d:7c:45:a2:a3:11:82:84:5e:d6:a8:c4:
                    d2:fd:0f:f5:6f:d2:24:ed:29:1c:0b:7c:4a:f0:46:
                    dd:5a:9e:46:52:56:d7:cc:98:04:71:35:ff:7e:aa:
                    0c:30:3b:af:9a:65:7f:79:a5:f2:13:93:ba:88:01:
                    21:54:c3:14:9c:49:c8:0f:75:e8:8d:a5:5d:cf:d0:
                    07:f2:9c:20:1d:e4:6f:ee:8e:ce:da:6e:50:31:61:
                    0c:44:e2:08:0d:5e:81:4f:ff:a3:3f:1c:05:d2:90:
                    0f:64:84:e0:00:f6:c6:1e:95:49:90:d2:c7:72:8f:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:67:58:05:27:AE:61:CD:6B:C0:F7:01:6E:1B:06:41:D4:C6:03
            X509v3 Authority Key Identifier:
                keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:0f:c3:ce:3b:c5:6d:00:fd:86:6f:d3:33:5e:59:70:94:d5:
         a4:1c:7a:06:96:97:55:a5:7f:28:f6:16:e0:5e:1f:f9:c8:8e:
         98:0a:29:b3:f3:37:2b:f5:25:21:19:01:91:9f:a9:e1:39:08:
         ae:a9:e4:ae:c8:ce:9a:23:d9:ce:b0:c8:1b:5b:4e:a2:06:af:
         fa:77:e0:f5:88:0a:7b:da:40:b4:f2:2c:e5:65:aa:21:e2:b7:
         fa:a1:dc:65:0d:19:48:0b:36:b7:6c:2b:30:69:84:44:c0:15:
         9f:ae:c1:b1:ea:b9:1b:9b:67:08:d7:85:15:ed:0d:de:40:0a:
         13:7d:23:3c:95:c4:ae:3e:c1:e9:c8:ac:1b:b0:f8:47:a9:aa:
         f2:33:6e:15:69:d4:c6:73:87:1c:b0:cd:91:1a:2f:ba:ab:67:
         56:39:3a:60:2b:3d:9c:2c:9c:d0:a4:51:21:34:01:4f:f7:f4:
         78:a2:23:1c:e8:74:a6:14:ae:4d:9b:53:01:90:6d:7e:4f:b0:
         09:27:05:91:6c:47:d6:ce:f8:ab:0e:5c:bc:db:81:dc:31:85:
         12:49:53:4e:bc:6d:23:46:0a:0e:2f:9c:1e:69:bd:b6:34:ba:
         6d:eb:d1:87:51:f5:60:33:9e:e9:ea:a6:52:5b:a9:df:b7:47:
         5c:85:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:13:45 2026 by rpki-client