Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
File:                     EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft (raw, json)
Hash identifier:          2zPgrRzu40ta+zp849iNOPQmESjApM9+0tqvYO1yI5A=
Subject key identifier:   51:0E:B1:24:73:75:4D:33:54:7B:2F:85:1A:97:9E:FC:96:9F:11:33
Authority key identifier: EE:3D:63:52:0B:90:79:DE:7C:43:92:9F:1B:5D:5F:6B:10:FB:B2:62
Certificate issuer:       /CN=EE3D63520B9079DE7C43929F1B5D5F6B10FBB262
Certificate serial:       3C35C989C03F5722E4F1E80B70195C166B31989B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
Manifest number:          0422
Signing time:             Wed 08 Jul 2026 09:39:16 +0000
Manifest this update:     Wed 08 Jul 2026 09:34:16 +0000
Manifest next update:     Thu 09 Jul 2026 12:08:16 +0000
Files and hashes:         1: 3137392e34322e36342e302f32322d3234203d3e20323733353735.roa (hash: 4LGPVWasegkM9rDZI9/4/tAJxF5hz8Kyf9IiZ6YGfKM=)
                          2: 323830343a383930343a3a2f33322d3334203d3e20323733353735.roa (hash: hYzsnRX/84q5nPY0n3UK7LiipylX0Q2VaAfzB1fCghQ=)
                          3: EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl (hash: VeTpJuGz+/6OAa220f3c8bd1tzhvR+m+egkCQnIJ5T8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl
                          rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:35:c9:89:c0:3f:57:22:e4:f1:e8:0b:70:19:5c:16:6b:31:98:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3D63520B9079DE7C43929F1B5D5F6B10FBB262
        Validity
            Not Before: Jul  8 09:34:16 2026 GMT
            Not After : Jul  9 12:08:16 2026 GMT
        Subject: CN=510EB12473754D33547B2F851A979EFC969F1133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:15:94:10:b3:83:27:cd:b0:54:7d:ae:63:
                    13:97:e9:6b:3c:3e:53:89:12:e6:57:6d:f6:75:7a:
                    71:6e:c9:c7:c4:f6:f2:ce:4d:12:43:b0:2c:2b:16:
                    7c:31:56:dd:05:c9:7c:8e:79:ca:73:93:9b:75:ba:
                    1e:bc:a0:ae:97:d6:d3:c0:79:ef:da:36:07:4a:c0:
                    7e:b7:1c:c6:9d:0e:06:9c:c4:c4:d2:d3:72:92:c2:
                    59:2f:bc:95:83:5d:ba:e2:a6:63:f4:a7:ec:62:80:
                    46:c7:32:a1:4e:72:06:2f:c6:7b:8c:54:4b:d1:a7:
                    5e:35:c5:58:35:b5:6b:c5:3c:d7:ff:a8:eb:ac:b9:
                    f8:7d:4d:f5:07:a0:8e:67:71:bc:1f:f0:4a:8c:21:
                    b1:5d:71:21:2a:dc:2c:b2:e4:96:0a:a9:9a:d1:a0:
                    e6:d2:9b:2b:f0:8e:b0:ac:87:91:ca:6b:56:69:1b:
                    01:00:80:8b:c7:b5:fc:f6:15:af:db:e0:a8:0e:dd:
                    20:fb:6e:e8:c4:91:d4:7d:35:84:92:b2:0e:f8:23:
                    e7:14:af:33:24:61:77:0c:47:6b:4d:ac:92:55:d7:
                    39:6a:6b:bf:0d:f5:10:a4:48:9f:4f:d4:7f:e7:e6:
                    24:bd:6b:6b:1b:01:54:61:e1:b0:e0:48:6d:00:e4:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0E:B1:24:73:75:4D:33:54:7B:2F:85:1A:97:9E:FC:96:9F:11:33
            X509v3 Authority Key Identifier:
                keyid:EE:3D:63:52:0B:90:79:DE:7C:43:92:9F:1B:5D:5F:6B:10:FB:B2:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/EE3D63520B9079DE7C43929F1B5D5F6B10FBB262.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:2d:4c:35:e5:b2:75:c2:d6:69:a9:9d:ca:b2:49:cd:32:
         55:c7:a4:ed:46:d2:b9:1d:26:34:02:89:4e:5c:07:b2:bc:d2:
         da:fb:bc:4f:2a:ee:0c:ef:71:d5:bf:d5:65:86:8d:a4:7c:78:
         43:69:a5:bb:32:83:23:bc:ad:a0:95:c8:2e:8d:83:22:23:70:
         f5:2e:6d:18:a0:50:0a:b4:03:f1:24:f3:02:ba:cc:9d:a6:35:
         e4:8e:bc:65:73:24:e1:16:78:e8:e0:61:ed:72:29:34:5f:54:
         39:dc:55:ac:54:07:3b:2e:88:61:e7:52:ed:14:11:80:eb:12:
         53:1f:96:92:62:aa:bd:b2:2a:f5:73:10:f5:5e:c4:10:a8:c6:
         b4:ef:9d:58:d1:1f:d7:f4:6a:2e:bf:dc:bd:8e:a1:b7:a1:bb:
         31:96:3c:c1:5c:c4:04:15:f7:99:18:de:63:ca:f2:5c:fb:64:
         3b:61:1a:8f:f4:fe:fc:66:cd:7a:6a:71:9e:b5:2c:f5:39:8d:
         9c:84:b9:32:2a:0c:09:98:16:dd:c6:09:97:f8:5b:3a:7e:74:
         d4:1d:a9:ac:cb:a5:27:ef:d9:f6:01:88:2c:12:66:10:f8:bd:
         a8:89:30:8e:39:55:ac:02:2f:b2:5b:7b:f7:ca:a5:44:23:a1:
         b8:b1:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:42 2026 by rpki-client