Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
File:                     6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft (raw, json)
Hash identifier:          hbXuKWIr3TOu40R4UxX/XxQLSmm/Fb/tyxZbnlGQnCI=
Subject key identifier:   68:65:1A:58:53:6E:A4:BF:E3:FD:DD:0B:44:6E:5E:30:8A:8A:2B:2A
Authority key identifier: 68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D
Certificate issuer:       /CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
Certificate serial:       3C80B93F9D36DD6C548B554CB5CA1C8C9BD883AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
Manifest number:          0110
Signing time:             Mon 24 Aug 2026 11:23:39 +0000
Manifest this update:     Mon 24 Aug 2026 11:18:38 +0000
Manifest next update:     Tue 25 Aug 2026 13:08:38 +0000
Files and hashes:         1: 34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa (hash: iHjV0lynYpxKXyvKZ6QYUPZd77OBVv376LbUBFZLr+Y=)
                          2: 34352e3137392e3132302e302f32322d3232203d3e20323639303834.roa (hash: LsMXl7txTOAUchDa0Vk1W4iQcaPYM9YpcSAd2R01ARo=)
                          3: 6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl (hash: ZYdjnU7XLg09/wFbL57Ta/hnjjEw2JcjMQswgvHN2E4=)
                          4: 323830343a356633383a3a2f33322d3332203d3e20323639303834.roa (hash: /Mn+oL3IemycoC6rYq5RWh6SBdJTf+ipEMVIieRDK/4=)
                          5: 34352e3137392e3132302e302f32342d3234203d3e20323639303834.roa (hash: Jw6lYiAKNDsrZj8WVK8rSk5OVNmYy2e53INwUg/1x9Y=)
                          6: 34352e3137392e3132322e302f32342d3234203d3e20323639303834.roa (hash: 8hXZkBohPncs4ClmQ/nK36DN1ABJS4icl5IYrEEQJdc=)
                          7: 34352e3137392e3132332e302f32342d3234203d3e20323639303834.roa (hash: ukNHqPJic6dAseLepb3VMiwhMuLoWpZ1shSyvBXaBo8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl
                          rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:80:b9:3f:9d:36:dd:6c:54:8b:55:4c:b5:ca:1c:8c:9b:d8:83:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6884A1CC4A18E11C8C7C005037C1A88A3517CE5D
        Validity
            Not Before: Aug 24 11:18:38 2026 GMT
            Not After : Aug 25 13:08:38 2026 GMT
        Subject: CN=68651A58536EA4BFE3FDDD0B446E5E308A8A2B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:75:3a:fa:41:6e:2d:fc:84:44:75:12:52:
                    b0:57:d9:3b:c6:a5:04:6f:0e:8b:89:81:df:5c:9f:
                    dc:44:f2:36:a8:37:d2:81:ad:61:2c:d6:e0:78:82:
                    50:d6:5d:7e:5a:e6:e6:4c:11:36:8d:58:7a:76:bc:
                    65:f6:2b:54:82:f5:06:77:59:e3:37:7a:b7:eb:3d:
                    dd:b0:94:00:db:84:94:61:ac:cb:e7:77:5e:de:66:
                    97:92:ba:ef:40:42:bd:13:a9:79:28:1f:c7:cd:c0:
                    6c:58:2b:df:a2:8e:ae:8c:06:62:c0:dd:50:86:12:
                    0a:93:a2:13:4b:79:fc:94:0c:cc:ee:bf:ad:58:ee:
                    78:4c:c6:53:0d:81:2e:4b:a8:3b:3a:1a:ec:85:37:
                    46:c5:5d:5a:5e:c2:af:be:e4:5f:f7:ae:ba:2a:ae:
                    f5:9d:20:47:c1:22:78:49:27:17:30:57:35:58:62:
                    31:38:20:23:2a:79:d3:d0:70:0b:f8:89:02:1e:00:
                    49:96:3e:c5:26:db:e7:2a:d5:d2:e3:cc:cb:6f:36:
                    bb:d3:df:7f:76:68:51:c5:2b:2c:ba:e6:4c:71:13:
                    dc:14:39:f2:41:93:9e:1e:2e:ab:43:b9:b3:e6:b9:
                    ab:8f:98:a0:41:66:a5:f7:b2:5d:2e:e9:49:f3:3f:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:1A:58:53:6E:A4:BF:E3:FD:DD:0B:44:6E:5E:30:8A:8A:2B:2A
            X509v3 Authority Key Identifier:
                keyid:68:84:A1:CC:4A:18:E1:1C:8C:7C:00:50:37:C1:A8:8A:35:17:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/6884A1CC4A18E11C8C7C005037C1A88A3517CE5D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:99:f1:3a:8e:aa:8c:88:1d:46:84:9d:b5:3e:1f:30:be:4c:
         50:69:a8:fb:83:3f:c1:fc:fe:72:2a:b4:15:e6:e5:36:ff:10:
         02:d6:6a:2d:76:04:48:66:d0:16:c8:a9:e4:4d:ce:0e:0b:9a:
         a9:8e:fd:59:a4:54:fa:12:6d:6b:b1:e0:33:cb:f5:21:aa:d7:
         2f:70:d6:d6:a0:42:8a:0b:54:1f:65:f4:d4:6e:20:e6:20:ef:
         b3:99:24:c6:b9:7b:fb:0e:12:53:63:7e:7e:7e:1d:0f:00:dd:
         36:f8:66:4a:33:02:7d:4e:16:f0:54:94:4f:9b:b8:51:03:2f:
         da:bc:4b:ce:84:14:2d:5e:08:f1:18:5c:cd:26:10:1e:2f:a3:
         c3:8b:3f:2f:9b:cd:d4:9b:2a:5d:17:63:e0:da:d5:c0:61:8f:
         4b:a5:f4:ff:1a:0c:64:71:e2:db:f9:bc:83:e4:29:0a:61:d0:
         cd:1a:ac:6a:9e:9e:26:36:ac:f8:4e:84:5b:3c:aa:df:33:1b:
         96:5d:32:70:2e:9e:91:d4:65:ba:60:6d:20:87:f6:c2:6f:7f:
         3c:10:6a:b2:fe:b2:bd:30:88:66:72:cf:50:e3:80:93:ee:ec:
         b1:9a:a1:e2:ef:a6:53:ee:b9:77:58:02:1f:e9:9b:f0:05:ec:
         e4:12:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:29:01 2026 by rpki-client