Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/jUTaTeFUvLZP2tWp1iEPWuvxiheVRJbNozicLDJa3FR/0/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.mft
File:                     58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.mft (raw, json)
Hash identifier:          RTQmVw13p8TGzQ5bNsQEdX8i8YUwrJFNgO55qY7atLc=
Subject key identifier:   41:FA:90:33:2A:ED:23:58:3A:F1:26:0B:15:EF:23:F3:2E:B1:3C:9F
Authority key identifier: 58:C4:71:9A:EC:FA:7A:9F:92:7B:47:60:BA:34:1D:0C:99:DB:FD:3F
Certificate issuer:       /CN=58C4719AECFA7A9F927B4760BA341D0C99DBFD3F
Certificate serial:       0D9454CDB20C2F0DA223CBF090AC41EB830C8F2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jUTaTeFUvLZP2tWp1iEPWuvxiheVRJbNozicLDJa3FR/0/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.mft
Manifest number:          2A
Signing time:             Thu 23 Jul 2026 20:31:39 +0000
Manifest this update:     Thu 23 Jul 2026 20:26:39 +0000
Manifest next update:     Fri 24 Jul 2026 20:59:39 +0000
Files and hashes:         1: 34352e3232382e322e302f32332d3332203d3e20323733353131.roa (hash: 6UbKd3ymne/unfXX0U95zW2UGCmB29lgJpqgob2MhTw=)
                          2: 58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.crl (hash: HFIdttOBHg88meagjdfKdfnwE+Ztwf5/L145gOiR3JM=)
                          3: 323830343a386663383a3a2f33322d313238203d3e20323733353131.roa (hash: NJZwW5riVeUsWZDp7UMpt7s1tiUd+hQCZDO1RjnSMns=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jUTaTeFUvLZP2tWp1iEPWuvxiheVRJbNozicLDJa3FR/0/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.crl
                          rsync://rpki-repo.registro.br/repo/jUTaTeFUvLZP2tWp1iEPWuvxiheVRJbNozicLDJa3FR/0/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 20:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:94:54:cd:b2:0c:2f:0d:a2:23:cb:f0:90:ac:41:eb:83:0c:8f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C4719AECFA7A9F927B4760BA341D0C99DBFD3F
        Validity
            Not Before: Jul 23 20:26:39 2026 GMT
            Not After : Jul 24 20:59:39 2026 GMT
        Subject: CN=41FA90332AED23583AF1260B15EF23F32EB13C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:2e:00:e6:3f:3f:56:53:c9:06:d5:ba:24:
                    7f:1b:a2:9c:87:90:23:97:e0:81:37:e2:03:fd:eb:
                    b7:d3:46:c9:ac:4e:e9:9b:d5:03:43:95:44:72:45:
                    20:f7:dd:e2:0c:fd:ce:8f:95:7b:58:f2:6d:b3:f4:
                    61:a9:02:ac:61:de:dd:d9:f9:b8:4f:63:68:8b:e5:
                    5c:c9:9c:c2:67:e4:a8:ef:57:87:3d:cb:14:ae:76:
                    5e:57:42:ed:1e:37:95:be:b6:39:b1:09:94:56:60:
                    13:5c:c8:e0:83:89:b3:af:5d:1e:dc:41:2a:74:15:
                    83:d8:93:6a:a6:d3:4e:10:e0:76:0b:34:3b:81:90:
                    d0:43:17:b7:44:44:54:b9:be:f2:9c:f8:4a:d5:e4:
                    cc:92:08:f1:32:0e:8a:56:e2:74:87:8f:f7:e7:7e:
                    2d:74:4d:ac:71:68:c9:a4:60:94:ac:f4:d7:b5:e8:
                    ae:3d:25:26:84:2c:b9:ad:c0:b4:fd:55:28:e7:75:
                    c2:e8:99:a1:4b:45:bb:de:57:ee:88:3c:38:45:8d:
                    52:7a:6f:42:7d:83:e3:be:73:b7:05:24:09:97:e5:
                    23:d4:f0:f2:61:ed:18:8c:b7:58:d6:77:d4:cc:92:
                    03:41:16:a2:59:ff:a2:ad:4d:eb:0c:6b:69:66:d3:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FA:90:33:2A:ED:23:58:3A:F1:26:0B:15:EF:23:F3:2E:B1:3C:9F
            X509v3 Authority Key Identifier:
                keyid:58:C4:71:9A:EC:FA:7A:9F:92:7B:47:60:BA:34:1D:0C:99:DB:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jUTaTeFUvLZP2tWp1iEPWuvxiheVRJbNozicLDJa3FR/0/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jUTaTeFUvLZP2tWp1iEPWuvxiheVRJbNozicLDJa3FR/0/58C4719AECFA7A9F927B4760BA341D0C99DBFD3F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:34:78:c3:73:7b:c8:cf:9c:d4:e8:f9:8e:8e:4d:db:ef:
         1d:0e:14:b9:8d:4f:e0:6a:8b:4a:7f:1e:f3:d4:48:67:35:94:
         bb:59:9a:58:ba:f7:58:d3:75:4d:a5:db:ff:f2:1a:60:8c:c3:
         0e:17:05:8e:8b:b9:fd:8c:54:d3:db:a0:3a:eb:88:ae:1b:7a:
         57:56:e7:6a:9a:75:08:f5:bf:60:8f:33:55:d4:32:a7:20:35:
         22:f1:8b:0a:62:7d:c4:8f:29:df:58:c0:ac:09:1a:2c:23:6d:
         2b:98:f9:4e:29:e0:db:d4:7c:cf:7c:e0:9b:fb:6a:b5:4b:57:
         81:bc:e1:38:e1:da:92:0a:da:49:a6:bf:a4:3c:e7:8c:ef:89:
         91:61:57:42:4e:b1:fa:67:7b:89:e1:e0:98:ac:d1:c2:90:3f:
         88:4c:90:b4:61:46:8e:a7:1c:d8:bd:2e:6b:d4:11:e4:d2:1f:
         c2:72:35:ce:29:df:80:7d:0d:ad:36:67:b3:5b:8f:8a:b4:67:
         20:b1:02:b1:b1:3c:7a:84:8b:91:68:35:73:50:ba:98:1a:8c:
         58:5e:d9:a0:1e:26:e1:fc:6f:71:d1:01:9e:80:18:4a:cc:d3:
         a4:f6:11:59:6e:f3:47:e7:2e:6d:c0:4c:ec:26:1d:b3:72:0b:
         95:cc:0c:36
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUDZRUzbIMLw2iI8vwkKxB64MMjy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThDNDcxOUFFQ0ZBN0E5RjkyN0I0NzYwQkEzNDFEMEM5
OURCRkQzRjAeFw0yNjA3MjMyMDI2MzlaFw0yNjA3MjQyMDU5MzlaMDMxMTAvBgNV
BAMTKDQxRkE5MDMzMkFFRDIzNTgzQUYxMjYwQjE1RUYyM0YzMkVCMTNDOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdli4A5j8/VlPJBtW6JH8bopyH
kCOX4IE34gP967fTRsmsTumb1QNDlURyRSD33eIM/c6PlXtY8m2z9GGpAqxh3t3Z
+bhPY2iL5VzJnMJn5KjvV4c9yxSudl5XQu0eN5W+tjmxCZRWYBNcyOCDibOvXR7c
QSp0FYPYk2qm004Q4HYLNDuBkNBDF7dERFS5vvKc+ErV5MySCPEyDopW4nSHj/fn
fi10TaxxaMmkYJSs9Ne16K49JSaELLmtwLT9VSjndcLomaFLRbveV+6IPDhFjVJ6
b0J9g+O+c7cFJAmX5SPU8PJh7RiMt1jWd9TMkgNBFqJZ/6KtTesMa2lm0+RpAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUQfqQMyrtI1g68SYLFe8j8y6xPJ8wHwYDVR0j
BBgwFoAUWMRxmuz6ep+Se0dgujQdDJnb/T8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qVVRhVGVGVXZMWlAydFdwMWlFUFd1dnhpaGVWUkpiTm96aWNMREphM0ZS
LzAvNThDNDcxOUFFQ0ZBN0E5RjkyN0I0NzYwQkEzNDFEMEM5OURCRkQzRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81OEM0NzE5QUVDRkE3QTlGOTI3
QjQ3NjBCQTM0MUQwQzk5REJGRDNGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2pV
VGFUZUZVdkxaUDJ0V3AxaUVQV3V2eGloZVZSSmJOb3ppY0xESmEzRlIvMC81OEM0
NzE5QUVDRkE3QTlGOTI3QjQ3NjBCQTM0MUQwQzk5REJGRDNGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
Dzo0eMNze8jPnNTo+Y6OTdvvHQ4UuY1P4GqLSn8e89RIZzWUu1maWLr3WNN1TaXb
//IaYIzDDhcFjou5/YxU09ugOuuIrht6V1bnapp1CPW/YI8zVdQypyA1IvGLCmJ9
xI8p31jArAkaLCNtK5j5Ting29R8z3zgm/tqtUtXgbzhOOHakgraSaa/pDznjO+J
kWFXQk6x+md7ieHgmKzRwpA/iEyQtGFGjqcc2L0ua9QR5NIfwnI1zinfgH0NrTZn
s1uPirRnILECsbE8eoSLkWg1c1C6mBqMWF7ZoB4m4fxvcdEBnoAYSszTpPYRWW7z
R+cubcBM7CYds3ILlcwMNg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:22 2026 by rpki-client