Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
File:                     CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json)
Hash identifier:          Cwmh+XTOVgeFKKUkT2nLHHUR2W1RA0GKJmbh6kPDupA=
Subject key identifier:   73:3C:C5:94:28:02:5B:00:D5:8B:C3:57:20:6C:F7:39:25:6B:39:A3
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       222C02AD627921217240DF30C9D5E040136FF967
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
Manifest number:          03B5
Signing time:             Mon 24 Aug 2026 04:24:25 +0000
Manifest this update:     Mon 24 Aug 2026 04:19:25 +0000
Manifest next update:     Tue 25 Aug 2026 06:20:25 +0000
Files and hashes:         1: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: AJeEclXa5CwX2AB7q02vhN8/s4ZahQeA1KNn13EmJOg=)
                          2: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: DlErATTJw0YyPjzjQF6iNrYUepeOKHNvxIjaMpV3jh8=)
                          3: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: QxpEpRdpz00jGtNTG7SSlMeuaQmHcvLeklQz9JSGTms=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2c:02:ad:62:79:21:21:72:40:df:30:c9:d5:e0:40:13:6f:f9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Aug 24 04:19:25 2026 GMT
            Not After : Aug 25 06:20:25 2026 GMT
        Subject: CN=733CC59428025B00D58BC357206CF739256B39A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:13:d7:eb:8d:cb:c8:eb:01:89:ad:81:5c:
                    e2:a0:b3:b6:ea:a0:71:94:51:cd:dd:47:44:b5:77:
                    8a:19:24:3c:8c:28:d3:2f:c0:5f:a4:f7:02:38:0a:
                    09:91:3a:db:05:d0:31:26:03:69:24:76:a2:3d:49:
                    92:d9:8a:b3:90:9b:44:bf:2e:d8:c4:81:70:f2:f9:
                    c8:10:62:cf:2e:2c:30:27:db:73:de:ae:8f:7f:67:
                    e2:9f:40:69:4d:6f:b2:6b:7f:9b:bb:2d:a5:ff:82:
                    32:c4:14:25:62:52:72:f8:db:29:56:cb:ce:58:04:
                    4a:76:36:e4:11:fa:10:ce:06:43:ed:19:f2:46:d1:
                    e6:ff:57:99:b7:41:82:ca:f3:66:81:be:67:41:b9:
                    52:bf:d7:61:d0:9f:04:4e:60:44:78:31:65:b8:9d:
                    3e:eb:d1:4b:7e:3d:f3:56:c8:86:40:1a:57:9b:36:
                    16:70:36:fc:90:6b:e1:82:75:21:ee:e6:04:d7:84:
                    90:7b:b5:80:cc:7b:cd:23:7f:ef:f4:2b:ff:51:d7:
                    2d:b2:7f:d6:12:c2:0d:7f:f6:65:24:c3:b9:d4:79:
                    15:c1:5a:95:2d:6c:f3:db:2b:8b:67:7d:10:7a:57:
                    08:f3:c2:79:55:e1:44:a4:d9:d2:c9:10:bd:45:58:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:C5:94:28:02:5B:00:D5:8B:C3:57:20:6C:F7:39:25:6B:39:A3
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:04:0b:fc:e7:61:65:a8:c0:65:dd:cd:bf:1c:2e:45:be:cd:
         52:8c:ef:79:4c:d2:d5:8f:52:d9:48:5f:97:74:5b:b7:e9:2e:
         1e:63:5b:53:a1:da:49:fc:b1:a1:73:a3:6f:2d:ef:f3:5d:6a:
         7d:d4:fa:b1:77:bd:50:e5:f7:5b:e8:e6:87:0d:60:40:be:76:
         32:eb:d9:08:cf:8a:e8:27:b1:3f:91:b0:ec:65:9e:ff:6a:ab:
         be:88:4a:ef:b4:e2:a9:48:a3:23:61:3e:d9:db:2d:6a:32:b4:
         d8:36:46:a3:0f:f0:a7:0a:fe:6e:a1:7d:6f:bd:3e:53:e9:6d:
         33:28:75:fe:1a:6a:e1:b3:8e:31:fd:df:7a:ab:33:74:da:45:
         59:f4:45:e3:db:bf:d0:d1:b9:5b:9a:12:4a:b1:c8:e5:a3:f1:
         ae:ac:6a:95:91:9f:30:ac:40:13:af:09:6b:7f:28:01:cf:fd:
         12:8d:f6:48:c9:59:2d:c9:ea:34:b4:ba:d4:9c:8f:1f:92:d7:
         74:6a:90:3a:25:b8:2a:ae:57:f8:aa:31:c5:58:d5:b8:1f:77:
         5c:19:8d:d4:bc:e2:4e:b1:84:9a:50:ce:12:86:30:c5:79:b5:
         19:ff:bd:c7:a9:3c:a2:79:3a:af:fb:fe:50:e4:9c:8f:9e:96:
         2d:79:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:07:59 2026 by rpki-client