Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
File:                     33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json)
Hash identifier:          4G7BkUgXm4sc2YFRaY6MSdi2MmCHvLq0sIQZErm+K3o=
Subject key identifier:   89:E1:1D:BE:0F:2E:E8:79:57:27:1E:75:00:FA:B5:14:5D:3A:EE:82
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       728143D3D31DA49F822EF17DCA54FC61452A9F61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
Manifest number:          0306
Signing time:             Sun 24 May 2026 02:31:51 +0000
Manifest this update:     Sun 24 May 2026 02:26:51 +0000
Manifest next update:     Mon 25 May 2026 03:07:51 +0000
Files and hashes:         1: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=)
                          2: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: 7+35iwh+waPDu/YR6kWaZ2D9voQm/IuQycueH9BAyhw=)
                          3: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=)
                          4: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=)
                          5: 3138362e3139322e31302e302f32342d3234203d3e20323635393532.roa (hash: Uf99kb3DsMScTA1BM5TERzPIiuTDHtkj7NVJz/GaZHg=)
                          6: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=)
                          7: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 03:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:43:d3:d3:1d:a4:9f:82:2e:f1:7d:ca:54:fc:61:45:2a:9f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: May 24 02:26:51 2026 GMT
            Not After : May 25 03:07:51 2026 GMT
        Subject: CN=89E11DBE0F2EE87957271E7500FAB5145D3AEE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:cb:71:09:d8:85:b8:78:98:fd:65:3d:ae:
                    6d:ae:59:c4:01:b9:98:bf:3b:9b:c0:84:25:c2:49:
                    07:69:04:ea:8b:30:2e:3d:d2:65:ba:ca:84:ea:d5:
                    a8:46:60:71:c4:a0:05:44:43:c9:24:b3:93:f3:3b:
                    3c:4e:73:2b:0c:10:5d:b7:42:33:96:14:2a:58:d3:
                    d7:71:cc:f4:5b:e6:4c:e5:21:7f:bb:74:9b:43:d4:
                    5a:1f:be:ae:f8:fd:13:57:a5:e0:a1:1d:86:c4:3b:
                    c7:c7:d3:71:42:a6:68:e6:c7:ca:e7:40:fe:88:00:
                    80:dd:a7:3a:0b:53:92:ab:ce:31:10:a4:ae:32:04:
                    c5:0a:71:2d:39:c7:ae:c5:34:b3:88:a9:ab:8f:a7:
                    88:56:d3:b9:e8:93:ba:86:29:3b:56:4f:b5:8e:ee:
                    2a:13:e2:f1:07:6a:3e:7a:7d:8b:a8:60:1c:c4:28:
                    e3:13:94:c1:6e:f3:e3:1a:02:33:fd:41:9e:92:03:
                    b9:9c:53:bb:7b:8b:1b:62:17:39:6e:f6:bc:f2:9b:
                    96:6d:fe:80:c5:29:13:7d:58:51:26:55:d7:e9:1f:
                    7b:a9:27:60:f0:c5:25:af:33:0b:99:df:6f:f1:ca:
                    6a:28:35:c2:cd:69:5c:b5:09:b4:45:a9:fd:d3:31:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:1D:BE:0F:2E:E8:79:57:27:1E:75:00:FA:B5:14:5D:3A:EE:82
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:8a:db:25:73:69:82:16:a3:90:89:4b:2a:44:77:81:be:50:
         b0:61:0a:84:76:dc:37:c0:e6:90:19:8c:26:d8:89:b0:f4:8a:
         3d:9c:8b:4e:ab:61:23:bf:71:f8:3a:af:e1:05:86:a9:0c:e9:
         2b:ef:92:de:85:ee:98:e6:65:90:ce:17:27:1d:5b:91:83:4d:
         2f:63:aa:a1:e0:c2:f3:72:b2:99:f1:1f:d7:0f:c0:2d:cb:65:
         24:07:eb:43:fe:1d:ab:ff:5e:d9:2a:b6:64:e5:68:3f:31:ef:
         70:3e:ba:9d:52:30:60:af:24:0f:52:60:c5:31:4d:d8:cd:80:
         0c:3b:13:7c:86:c7:ca:35:36:dc:a3:d7:f8:61:dd:e5:dd:94:
         df:7a:ca:21:1f:4a:da:1d:b8:8e:b6:74:fb:ce:95:1d:a9:b9:
         ac:f6:dd:8a:67:4b:49:ce:d8:76:2f:52:a7:f9:77:36:b2:10:
         6c:4a:fb:41:66:ce:43:a1:cc:0a:a6:cb:27:20:72:7e:e9:4e:
         42:91:c1:c7:6d:2c:38:69:da:18:19:9e:e9:04:7c:c2:00:7d:
         95:85:19:48:3d:fd:1c:0d:50:a8:7d:c2:5c:cc:55:ca:40:8c:
         38:5b:89:ed:ea:de:97:03:f4:c1:b7:10:97:ca:ba:37:2e:0b:
         f6:d8:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:51:53 2026 by rpki-client