Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          oAKUtzpeiUXw5V6gb1bpLHtrBO5rs5aoYYW1zquhHtY=
Subject key identifier:   C5:43:D0:D9:0D:06:C5:74:EF:DF:85:CD:3F:0D:BA:0F:61:4B:C6:58
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       499A75F8428956D8F010A77ADA457D6E860BFE0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          02F1
Signing time:             Wed 08 Jul 2026 05:22:50 +0000
Manifest this update:     Wed 08 Jul 2026 05:17:50 +0000
Manifest next update:     Thu 09 Jul 2026 08:37:50 +0000
Files and hashes:         1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=)
                          2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: vaUNCHCyHLV8XPJ1IgQIrQfn84ZqxtbQftLZwpY+P3Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9a:75:f8:42:89:56:d8:f0:10:a7:7a:da:45:7d:6e:86:0b:fe:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Jul  8 05:17:50 2026 GMT
            Not After : Jul  9 08:37:50 2026 GMT
        Subject: CN=C543D0D90D06C574EFDF85CD3F0DBA0F614BC658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:91:29:c7:79:21:22:68:c3:2f:e2:fd:fc:
                    66:ee:66:4c:66:99:d7:3e:c6:e5:9e:86:5c:2f:eb:
                    fd:22:2b:fe:fd:8e:bc:f5:f3:52:0c:39:4c:0a:f9:
                    5c:86:75:bb:48:f2:53:d9:6c:61:30:0b:fc:79:7b:
                    5e:92:04:8f:ae:b2:70:f0:2b:c1:08:04:2c:aa:1f:
                    07:75:73:40:33:e7:4c:7c:06:f7:e7:0d:f3:36:c2:
                    bb:5d:8f:c6:38:3d:5a:ae:29:cc:ba:4a:e3:bc:4c:
                    3b:88:a8:d5:20:66:c4:46:38:b2:11:1c:bd:8f:99:
                    91:be:c3:51:83:d9:f6:0d:a6:76:7c:39:17:a6:5a:
                    4d:a8:2b:99:a5:ca:d0:5c:16:c8:a0:b9:83:3d:89:
                    55:a0:c6:84:f8:a0:86:db:cb:27:5c:e2:97:19:4f:
                    d8:db:c8:c5:e2:2a:74:5e:4f:66:48:39:f1:49:64:
                    05:0a:97:7a:36:df:f8:46:74:4e:a1:37:dc:d0:f4:
                    64:11:92:6d:8d:b1:2f:25:77:81:65:db:ec:37:05:
                    b4:bf:05:8f:09:34:5f:3d:11:0d:e3:2d:22:25:fb:
                    c9:bf:79:7e:4d:04:b8:d5:35:57:7c:ad:c8:9f:f9:
                    b0:03:69:b7:76:07:9b:0c:27:e5:87:b9:07:fb:8a:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:D0:D9:0D:06:C5:74:EF:DF:85:CD:3F:0D:BA:0F:61:4B:C6:58
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:01:0b:28:ea:fe:be:d0:e6:7c:a0:c1:e7:95:76:71:34:
         e7:ab:45:25:4a:5b:95:ba:57:bd:b0:2b:03:fa:a4:95:73:06:
         f1:12:4f:64:79:60:ec:ac:da:36:1e:93:92:0f:72:c2:5f:4f:
         19:31:11:ce:45:ae:1c:3e:1e:41:f4:2e:9d:f9:43:ac:d3:33:
         ae:89:60:1a:36:eb:e3:2b:11:fb:a5:07:9f:d0:0b:ae:81:a7:
         c9:3b:98:14:49:15:8b:e3:07:2e:23:ef:8e:c2:de:a6:2b:3e:
         f0:d7:86:ed:ee:04:82:8e:1a:c7:a4:57:84:bf:2c:3b:8e:e5:
         a7:ca:e4:60:6f:63:f5:16:40:b2:9e:d7:9c:d1:15:0a:68:17:
         79:94:89:97:30:7a:37:37:f2:85:d4:46:07:35:5a:a1:86:ca:
         3c:2c:2b:3c:d1:fb:3d:6b:8d:25:55:11:ec:d0:c9:26:70:47:
         74:b9:a6:53:c2:2c:59:c0:be:97:d3:fe:27:ff:4e:9e:f9:38:
         e9:e5:4b:15:5d:49:4d:ff:0e:90:23:91:4e:e3:20:f5:35:f6:
         38:97:0d:0e:1c:2e:73:88:91:1b:88:00:ad:e5:57:4d:41:ab:
         1c:36:f5:ac:58:ab:00:55:29:7b:22:be:b4:4f:e0:83:32:88:
         59:14:d3:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSZp1+EKJVtjwEKd62kV9boYL/g0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx
QjIzRUEwMTAeFw0yNjA3MDgwNTE3NTBaFw0yNjA3MDkwODM3NTBaMDMxMTAvBgNV
BAMTKEM1NDNEMEQ5MEQwNkM1NzRFRkRGODVDRDNGMERCQTBGNjE0QkM2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZepEpx3khImjDL+L9/GbuZkxm
mdc+xuWehlwv6/0iK/79jrz181IMOUwK+VyGdbtI8lPZbGEwC/x5e16SBI+usnDw
K8EIBCyqHwd1c0Az50x8BvfnDfM2wrtdj8Y4PVquKcy6SuO8TDuIqNUgZsRGOLIR
HL2PmZG+w1GD2fYNpnZ8ORemWk2oK5mlytBcFsiguYM9iVWgxoT4oIbbyydc4pcZ
T9jbyMXiKnReT2ZIOfFJZAUKl3o23/hGdE6hN9zQ9GQRkm2NsS8ld4Fl2+w3BbS/
BY8JNF89EQ3jLSIl+8m/eX5NBLjVNVd8rcif+bADabd2B5sMJ+WHuQf7ipqDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxUPQ2Q0GxXTv34XNPw26D2FLxlgwHwYDVR0j
BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI
NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1
NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80
MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKkUBCyjq/r7Q5nygweeVdnE056tFJUpblbpXvbArA/qklXMG8RJPZHlg7Kza
Nh6Tkg9ywl9PGTERzkWuHD4eQfQunflDrNMzrolgGjbr4ysR+6UHn9ALroGnyTuY
FEkVi+MHLiPvjsLepis+8NeG7e4Ego4ax6RXhL8sO47lp8rkYG9j9RZAsp7XnNEV
CmgXeZSJlzB6NzfyhdRGBzVaoYbKPCwrPNH7PWuNJVUR7NDJJnBHdLmmU8IsWcC+
l9P+J/9Onvk46eVLFV1JTf8OkCORTuMg9TX2OJcNDhwuc4iRG4gAreVXTUGrHDb1
rFirAFUpeyK+tE/ggzKIWRTTww==
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:22:13 2026 by rpki-client