Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
File:                     0667C1E975614C995A6FB737132548928E943717.mft (raw, json)
Hash identifier:          DlIIKVza9no9dDLBJxZ049GsuUlVc0Fp7ZNXdFcWz/Q=
Subject key identifier:   5A:5B:FA:06:0F:27:1D:30:5B:61:ED:9A:36:72:44:CB:2A:C7:2D:BE
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       325235002B912C09984F644D982818209DF5B177
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
Manifest number:          0496
Signing time:             Sun 23 Aug 2026 12:00:32 +0000
Manifest this update:     Sun 23 Aug 2026 11:55:32 +0000
Manifest next update:     Mon 24 Aug 2026 14:00:32 +0000
Files and hashes:         1: 3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (hash: MVPAA1+zOej95lT9A2DX1H55TZCNkfC9Nq4h/FPebP8=)
                          2: 3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (hash: UDc2a11lMXoutrxkVXHv9/P2ZCVJhAIP/APUwqyFI+Y=)
                          3: 3138372e3131312e3131332e302f32342d3234203d3e20323731363830.roa (hash: nrOdqZOfY5Nbn0thVXtoyCD/xS8FjidLJDZuWGGR5DE=)
                          4: 323830343a376635303a3a2f33322d3332203d3e20323731363830.roa (hash: bnwO414T1LRLPR6T/sKh4ARpN3kqcAx+TDkxRSDEV8E=)
                          5: 3138372e3131312e3131342e302f32342d3234203d3e20323731363830.roa (hash: 4oJ8j7Eo/tfzKUBJnAST4f8F1Un31z87oEMr3wBa5P4=)
                          6: 0667C1E975614C995A6FB737132548928E943717.crl (hash: 74LkD5uo+UQSjH4P7Hfb3bvIp2kPlANOGcfPscawuHI=)
                          7: 3138372e3131312e3131352e302f32342d3234203d3e20323731363830.roa (hash: RMbvwC18iTyj5Gt4ssNw/k5Wg3k9+acrNnnOc2JYKA0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:52:35:00:2b:91:2c:09:98:4f:64:4d:98:28:18:20:9d:f5:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Aug 23 11:55:32 2026 GMT
            Not After : Aug 24 14:00:32 2026 GMT
        Subject: CN=5A5BFA060F271D305B61ED9A367244CB2AC72DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:64:83:3c:88:f5:16:b4:59:88:ae:b6:01:
                    04:8e:97:97:f3:a3:3f:ff:36:9b:de:6f:c7:8b:f2:
                    28:41:1b:94:17:f3:fa:68:cd:01:b9:65:43:7c:31:
                    cb:ba:29:0f:13:dc:e5:a6:6a:af:ee:73:23:5e:7f:
                    39:d1:b7:2f:f7:84:79:84:91:e9:6b:59:4f:3c:86:
                    1a:ce:c7:66:da:df:36:22:49:91:1d:a2:2f:91:d5:
                    b7:34:1d:1a:f3:4d:6a:9f:bc:c2:3e:0f:ab:4b:5a:
                    b7:1a:95:43:f9:96:13:11:51:6d:0e:ae:6c:eb:3e:
                    c2:a9:e2:7e:43:98:9b:a3:0a:7f:fb:4a:ce:4e:d4:
                    5e:f0:78:38:f7:4c:57:1c:19:13:39:52:24:a0:6b:
                    e1:9d:4d:e0:ed:95:6d:5c:bd:71:0f:19:f2:3d:8c:
                    b0:87:6b:b1:8c:1d:f0:3e:33:78:b8:fd:0e:da:05:
                    aa:2a:4b:cc:8e:ec:97:87:13:ab:06:de:63:8f:40:
                    21:73:b3:9a:fe:e7:81:00:61:64:9d:39:28:39:f1:
                    9c:f9:9a:62:a1:bd:6b:5f:c9:6d:10:26:9f:da:c3:
                    e7:0e:96:58:c5:7a:90:5c:98:ad:0a:76:f2:36:8b:
                    ae:ba:ef:26:1e:17:c5:4f:51:fb:6c:e1:f4:e8:a6:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5B:FA:06:0F:27:1D:30:5B:61:ED:9A:36:72:44:CB:2A:C7:2D:BE
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:79:b5:85:37:8c:7f:e7:fa:67:a4:1a:7e:fe:cb:1e:8f:20:
         ee:7f:35:1e:96:33:84:a4:c2:be:47:6f:ff:c4:71:dc:53:af:
         d5:60:60:4d:2e:44:bf:f4:f6:55:62:06:6b:f6:f2:3c:d8:a2:
         0d:bc:af:91:05:96:43:21:05:ff:31:62:6b:9c:5a:11:be:8d:
         9b:d4:b7:6d:2e:df:dc:3f:ae:1a:e0:80:48:ce:4a:0d:dc:54:
         a8:19:9e:e6:88:46:f0:a5:51:1c:56:53:33:2b:cb:a9:0a:6f:
         a8:44:69:a7:e1:6b:bc:83:03:43:98:27:d4:f4:c0:58:f3:25:
         e3:5f:fb:7a:cf:a0:15:05:12:5b:c2:e7:ab:bc:ed:51:a5:2c:
         db:4b:71:1e:e6:42:2b:3d:4b:f0:1b:d9:6a:5a:d3:13:b6:2c:
         94:dd:8d:e7:ef:2f:5c:2a:f7:57:67:bb:9d:9c:c3:94:08:00:
         78:64:6e:42:aa:b2:10:d6:83:b6:bc:ab:b1:88:83:db:78:f5:
         b3:4f:9c:31:90:4c:0c:32:cf:56:63:bb:c7:82:e2:39:b8:16:
         f3:4f:f2:80:cb:74:78:41:ef:50:48:56:a4:19:84:d4:7c:51:
         dc:7e:4c:95:cc:d5:7e:00:89:ac:66:98:63:ae:11:7c:74:33:
         e4:d3:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:29:37 2026 by rpki-client