Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
File:                     3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json)
Hash identifier:          KHSTOIXtYhWe4ePRqccxTwhQQ7ZMUts/BHz4ck0pKFc=
Subject key identifier:   2E:F6:ED:53:7A:26:A2:DC:1A:C7:BC:96:09:E5:33:98:86:53:AB:33
Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1
Certificate issuer:       /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
Certificate serial:       354383ECC6C3B7BCA7D8A4A187555BCD07A1D132
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
Manifest number:          044C
Signing time:             Wed 08 Jul 2026 02:01:22 +0000
Manifest this update:     Wed 08 Jul 2026 01:56:22 +0000
Manifest next update:     Thu 09 Jul 2026 02:46:22 +0000
Files and hashes:         1: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=)
                          2: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=)
                          3: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=)
                          4: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=)
                          5: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: EwkbmZDgedJWGHQrGLdRJKXY46bnxiIX9kgJnlVJ9/0=)
                          6: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=)
                          7: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=)
                          8: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=)
                          9: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl
                          rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:43:83:ec:c6:c3:b7:bc:a7:d8:a4:a1:87:55:5b:cd:07:a1:d1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1
        Validity
            Not Before: Jul  8 01:56:22 2026 GMT
            Not After : Jul  9 02:46:22 2026 GMT
        Subject: CN=2EF6ED537A26A2DC1AC7BC9609E533988653AB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:30:00:b6:23:a1:49:b0:48:fe:35:ea:64:
                    be:a4:64:2b:40:9e:22:38:f3:e1:55:41:2f:24:49:
                    97:fd:cb:fb:50:2c:34:67:0a:71:7d:f1:5d:d1:b0:
                    11:43:66:cf:ab:d2:04:64:2a:fc:8c:cf:00:b1:63:
                    a9:9c:1e:a1:40:7f:7c:cb:43:02:0c:62:fd:e8:c9:
                    59:f7:d6:62:3f:47:af:11:c9:22:7d:eb:4a:d6:e6:
                    59:c3:45:c9:cd:96:50:83:7e:bd:c6:c2:39:78:12:
                    03:0d:a3:7d:a8:b0:61:7c:e6:0a:3f:68:e7:8f:8f:
                    c5:f6:b3:0b:00:c8:ec:d3:52:90:0b:c1:25:9b:27:
                    03:58:ed:e0:c8:f3:75:fe:97:51:ce:94:af:6b:bb:
                    e7:c1:85:78:6a:5a:84:a1:9f:79:71:26:fb:1f:f5:
                    18:2e:3d:c1:7c:c8:da:3f:fc:16:5c:ad:e4:ec:f3:
                    55:41:62:08:ee:5f:ee:f2:1d:44:3e:f3:e3:90:3c:
                    fe:65:89:af:12:92:2b:ff:05:eb:a2:22:2e:8b:ed:
                    58:4b:8d:30:df:6e:c3:13:d1:26:d7:de:b1:20:d7:
                    9a:40:ef:b5:bc:b8:f3:b0:d8:19:ab:49:05:de:7b:
                    19:3e:dd:e7:ae:41:1e:8d:51:6c:78:ea:31:a9:63:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:ED:53:7A:26:A2:DC:1A:C7:BC:96:09:E5:33:98:86:53:AB:33
            X509v3 Authority Key Identifier:
                keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:9d:48:cb:69:f9:62:36:b2:ad:6d:7b:e2:1a:e9:1c:70:
         2e:c3:e2:dc:3b:04:4d:ef:07:d0:e6:ad:cc:8f:fc:df:6b:17:
         fc:0c:a1:bc:d4:e8:dd:07:0d:e0:0c:f3:b1:fb:73:34:86:02:
         95:c1:36:06:4e:57:f3:fd:ab:48:b8:cf:a4:1c:d4:0c:82:71:
         88:8f:78:cc:1a:22:e5:54:5c:36:97:12:30:a7:93:76:6c:3d:
         fd:e5:fc:60:3d:a5:f9:ba:74:df:4c:6d:f0:e4:e9:93:53:a5:
         d4:5e:e3:ac:4a:ee:7a:10:1f:37:75:5a:2e:e4:2a:57:24:ea:
         ad:2b:c6:04:72:9a:ac:62:ce:ca:60:6b:f9:98:12:76:3b:21:
         51:40:6d:4d:8f:4a:a2:4a:f1:50:f4:f8:50:72:e9:0e:bf:14:
         90:2b:69:ad:a1:21:80:7d:10:a0:1a:b4:75:78:e4:0f:9e:8c:
         c0:4f:c7:b7:b4:d4:de:80:16:19:8f:f9:3f:aa:06:56:31:d6:
         1d:ba:14:38:ee:b1:8d:86:77:78:21:b2:75:0d:b3:b5:04:91:
         d7:55:04:d1:eb:a5:6e:09:86:a1:fb:d6:45:11:72:fd:1f:d0:
         3f:90:4f:13:fb:8f:26:0a:9d:bf:d4:9b:2a:32:6e:d6:5f:20:
         02:10:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:12:45 2026 by rpki-client