Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
File:                     2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft (raw, json)
Hash identifier:          wlvnnvnKj4/xqlq2y59DovWly0qED5K1tCB+A2ZhQVo=
Subject key identifier:   20:BE:AF:56:DE:61:59:86:C0:32:BC:90:83:7B:D2:20:20:55:88:0C
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       73B30B490E3D6CC39D5497EDF921E0B39B37FD1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
Manifest number:          8B
Signing time:             Sun 23 Aug 2026 19:02:41 +0000
Manifest this update:     Sun 23 Aug 2026 18:57:41 +0000
Manifest next update:     Mon 24 Aug 2026 22:40:41 +0000
Files and hashes:         1: 3134332e3130372e38342e302f32332d3233203d3e203238353731.roa (hash: 8UQTexARYgzfuvVxOiW1xMs7MFXXSg2Aa5WhAO/PTPA=)
                          2: 3230302e3134342e3234392e302f32342d3234203d3e203238353731.roa (hash: oUqnpH1ZwjCep8nsf0cSlX3s+NoGDcOrVfJF72FLuCo=)
                          3: 3137372e39302e33322e302f31392d3139203d3e203238353731.roa (hash: /X9pud7YLL/y8hSm8hOIiIoaeSVpRiPlUzj0A0dmhnE=)
                          4: 3230302e3134342e3233342e302f32332d3233203d3e203238353731.roa (hash: Zb1C6XB/d6lA85shvz3mOLtusPSpQgys07trvcGpWOU=)
                          5: 323030313a313264303a3834303a3a2f34382d3438203d3e203238353731.roa (hash: 7cQfU1PzvfbPWLQFHl4PyQlMUa48vagKhH+g4aU+0Fo=)
                          6: 323030313a313264303a3838303a3a2f34382d3438203d3e203238353731.roa (hash: nuKuHTVXQgGAG4BtnwKUxJK3XWvsaEpUJ5/hbJUkIRI=)
                          7: 3230302e3134342e3231322e302f32342d3234203d3e203238353731.roa (hash: KbkdJF9kxOeznB4BZsJAqnIfYyRFBuS+gyMeJUah0Vk=)
                          8: 3230302e3134342e3235302e302f32332d3233203d3e203238353731.roa (hash: PMeJItcI5VD6XfNmfcMxhxtcGpfEU3C8++t/lECx0JI=)
                          9: 3230302e3134342e3235342e302f32332d3233203d3e203238353731.roa (hash: eg0z8O5pY9nj4Oaw8QewW03nbGYXAm7rLXRnXFUOfLE=)
                          10: 3230302e3134342e3233372e302f32342d3234203d3e203238353731.roa (hash: E1dE2hdWYBrZbwPAv3Krk0zgPPQDp6VRrG8ecVK/NQ8=)
                          11: 3134332e3130372e332e302f32342d3234203d3e203238353731.roa (hash: 47LpbP/mhdYry4HtJsA5j+k8zVXF/P9bZhPErYoLu0o=)
                          12: 3230302e3134342e3235322e302f32332d3233203d3e203238353731.roa (hash: WhfVqKWgtv3wys9PqE9ad3Y3XNVxEerru9xfqVsutwc=)
                          13: 3134332e3130372e34342e302f32332d3233203d3e203238353731.roa (hash: hMcavL9zfAo9kyBNpzw7H+oTKBBzWl62Cm9pgzpXH04=)
                          14: 3137372e39302e302e302f31392d3139203d3e20323731373535.roa (hash: mQvfkQ6x0v5UQgO9lOhKyWzBbDJKAshZN92NOwBi06c=)
                          15: 323030313a313264303a3863303a3a2f34382d3438203d3e203238353731.roa (hash: 6I7rxd79tjnKEhBUhLYGs4O64B5VKOU93onkuSu4h4w=)
                          16: 3230302e3134342e3139322e302f31382d3138203d3e203238353731.roa (hash: k5lJrvlLeuHcfKicRKBNdfcPrh5jvT101gcdS4pJ5rA=)
                          17: 3230302e3134342e3138342e302f32312d3231203d3e203238353731.roa (hash: bBZVRv6SR6gIgmbwwgrdrEIzYUP+oG3TMzyxkOmqCVk=)
                          18: 323030313a313264303a633038303a3a2f34382d3438203d3e203238353731.roa (hash: mtbm9eK6EcVcMna6I80doHW+wb865Kr9q6Q4hL6ArFY=)
                          19: 3230302e3134342e3136302e302f31392d3139203d3e203238353731.roa (hash: QwIlRlrpleqVbn0f1WwM3I+9HOSMHslEan4O4eoqmwk=)
                          20: 323030313a313264303a383036383a3a2f34382d3438203d3e203238353731.roa (hash: VyqeoKANP9koXc62aXT0tGZx6mB8Gn4cgVEg0NQnlrU=)
                          21: 3134332e3130372e31342e302f32342d3234203d3e203238353731.roa (hash: jgpfAr2sWn74/Yr0RPHYwZHr6NwuBR+llF97q551uEc=)
                          22: 3134332e3130372e3235332e302f32342d3234203d3e203238353731.roa (hash: Tzu6fIBaaHT2VAOrLZUvrz4hYYqwpAeMT5+VyGPK+6I=)
                          23: 3134332e3130372e3235342e302f32342d3234203d3e203238353731.roa (hash: GWac0kFb8oHV736MasOlYriEEWaYh8UZZqvHjeGgOrc=)
                          24: 3230302e3134342e3138302e302f32332d3233203d3e203238353731.roa (hash: 0BsW1ZcqqMk86wfSyG1sgsMrkMnZUDmjhp3jmDTyjZ8=)
                          25: 3137372e39302e36342e302f31382d3138203d3e203238353731.roa (hash: pGetNus5yQypGyqSvu1zHQAf6bRgxiO8YBGT/X5USgQ=)
                          26: 3230302e3134342e3233382e302f32342d3234203d3e203238353731.roa (hash: CrsL8MmGWgawGdhaUSweTOwP9B0KtoERqWsq1ChwEhc=)
                          27: 3134332e3130372e38382e302f32342d3234203d3e203238353731.roa (hash: fPHHI2usVj0DEpIQ6HM+NcUNZlmiur81bSucvwAB7O8=)
                          28: 323030313a313264303a3a2f33322d3332203d3e203238353731.roa (hash: VO2lbSltM5MIyaWhtOKJJ3yHEXsb2F6bIhFyuvZZY3U=)
                          29: 3134332e3130372e382e302f32342d3234203d3e203238353731.roa (hash: rVLO9ebQTeHTVrfpiV3exQHFfP7BxIVNVv2leA2y9cY=)
                          30: 3230302e392e39352e302f32342d3234203d3e203238353731.roa (hash: B44gwvlA/Znjo83u7W0V/597GKa8JjxUO3Uaxs0eAy4=)
                          31: 2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl (hash: 9mA4vO27BFgNRBLUbXWVDdt6DS5CTVicIqERByxR5Pw=)
                          32: 3134332e3130372e32372e302f32342d3234203d3e203238353731.roa (hash: hY/qT+vw2fjz0IenB/YA+TJOPh7e0vIPWQRcLYrTrJ0=)
                          33: 3230302e3134342e3233362e302f32342d3234203d3e203238353731.roa (hash: QhdFPVQz95j/1qVaOVqyQhTX0wwfdXEvSp861Q8PnDI=)
                          34: 3230302e31372e31362e302f32302d3230203d3e203238353731.roa (hash: tPBtF+HQu99FOX+pBUXL0TTwGViilEFl3gL1uSI6DsU=)
                          35: 3137372e39302e3132382e302f31372d3137203d3e203238353731.roa (hash: 8rSnbvUh9TcefAQi7IQiThpa2N1d60Gz3YuTRbj42Ns=)
                          36: 323030313a313264303a633030303a3a2f34382d3438203d3e203238353731.roa (hash: Wl/CJawOH0siuTIUqfq2i++uGZbIbEXws+7QsxqKxxU=)
                          37: 323030313a313264303a383037303a3a2f34382d3438203d3e203238353731.roa (hash: q1Yn/fe9Jn+00jdpywEHfk83F80GjTTA4Jf0ilKnE4A=)
                          38: 3134332e3130372e302e302f31362d3136203d3e203238353731.roa (hash: gIexV3X1SyBa28LJ8wtb2bqWGgR+Q2dWsWSVmOrwYlA=)
                          39: 3134332e3130372e3234382e302f32342d3234203d3e203238353731.roa (hash: 0vXK4+kY0gjRXV8eD+rFWe0+azoPY399BtEuX2rMQ5E=)
                          40: 3134332e3130372e36342e302f32342d3234203d3e203238353731.roa (hash: UhGfdTCEqnBKarEwGKfl4g3+RQL5lX/6ozH/aIyahvQ=)
                          41: 323030313a313264303a3a2f34382d3438203d3e203238353731.roa (hash: KP0I4w3ohRowp7bS2DfFLsyqSmRdawwCpiafo8t9d+M=)
                          42: 3230302e3134342e3138322e302f32332d3233203d3e203238353731.roa (hash: ObL5nI3adSfrqy7lZx/Vi5q/VS517xlt8rkHCF073iw=)
                          43: 3230302e3134342e3233392e302f32342d3234203d3e203238353731.roa (hash: 1PZmcByyjlu5GbqDQdNkjN2CyzURj715qMCHEvPjZyY=)
                          44: 3134332e3130372e3137382e302f32332d3233203d3e203238353731.roa (hash: xwCBPsf2nSJ8Z1upfCNHJumIUfzbptYpxPfAKpN9a3k=)
                          45: 3230302e3134342e3234342e302f32322d3232203d3e203238353731.roa (hash: yTW3YabL1dtah8Yv2RXipJ5UB89VQJaWYihaYnCpLy8=)
                          46: 3134332e3130372e3135342e302f32342d3234203d3e203238353731.roa (hash: Zwecff+iP7cjDzoBwmQDE/9TJzKBanxL/5AL694us3M=)
                          47: 3134332e3130372e38362e302f32342d3234203d3e203238353731.roa (hash: tmMYHgbd8wPU7R0S9UGDpGynnSaiZwfUJd9tUCRfF98=)
                          48: 3134332e3130372e3235322e302f32342d3234203d3e203238353731.roa (hash: If6/N21ntJX5+jZ88tiPbihz0OGmM1t1gnAqpEEPVoQ=)
                          49: 3230302e3134342e3234382e302f32342d3234203d3e203238353731.roa (hash: bp2EBt28leMf+h36C2cWZ5sAPHK+naYioFF9h0yp6CU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 22:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b3:0b:49:0e:3d:6c:c3:9d:54:97:ed:f9:21:e0:b3:9b:37:fd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: Aug 23 18:57:41 2026 GMT
            Not After : Aug 24 22:40:41 2026 GMT
        Subject: CN=20BEAF56DE615986C032BC90837BD2202055880C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:07:07:17:a2:84:60:0f:11:3a:e2:bf:d4:
                    02:bb:42:85:6a:41:3b:40:f4:16:24:03:28:29:63:
                    fd:e6:f0:40:eb:2c:5b:96:03:6a:65:88:ec:86:dc:
                    7b:42:9d:70:6d:c2:e0:34:a9:4d:cc:81:51:4a:a3:
                    53:28:b2:04:05:63:a6:6f:cf:ed:61:dc:0a:34:de:
                    b8:17:60:7b:33:99:dc:7e:3d:9c:5e:b2:ea:ed:26:
                    6c:13:df:35:f7:02:7f:f7:d4:eb:a3:2f:53:a9:a1:
                    4f:02:bf:17:b1:7a:38:c3:79:95:4d:69:bd:e3:94:
                    8d:e0:3e:a3:18:a9:cd:b1:25:ab:bd:60:0b:22:be:
                    9a:69:c0:a7:c1:0c:6b:b3:1b:62:6a:09:5d:5c:0c:
                    54:0a:86:a3:bd:f3:40:25:22:72:17:bc:73:63:4f:
                    13:f6:b0:03:dd:05:23:34:1f:60:22:04:79:b4:64:
                    67:53:53:85:95:08:87:3d:b9:2b:a5:c8:c6:51:9e:
                    99:9b:37:86:25:11:ed:0b:04:8a:89:48:81:41:b0:
                    40:02:29:09:94:96:7b:2d:cb:d6:11:46:52:d4:4a:
                    fd:08:ed:91:33:c2:54:27:42:5e:6f:25:85:91:ff:
                    27:03:04:28:49:03:ba:e9:16:6f:76:f5:c3:6f:9d:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:AF:56:DE:61:59:86:C0:32:BC:90:83:7B:D2:20:20:55:88:0C
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:02:b5:d6:94:35:6c:f1:0d:fc:b8:19:0b:65:62:d2:18:23:
         88:7e:aa:dd:b3:4f:6e:23:4d:9f:c0:3f:aa:f5:bb:6f:8b:4c:
         96:89:54:e0:09:c7:5a:35:cd:6f:e1:2f:1b:81:ff:1f:a7:ff:
         b6:08:cb:e4:c3:11:12:f9:eb:2b:18:46:fc:4f:fe:bf:36:33:
         9f:4d:66:7a:f6:b7:69:ce:0b:6f:1b:37:03:2c:e7:40:39:0f:
         21:f9:9d:3a:d0:60:36:51:31:d3:d2:53:c6:1d:b5:9f:3f:39:
         cf:38:bd:f6:87:a7:83:d9:a9:36:16:60:81:13:fc:4a:a3:6d:
         36:5f:fe:68:5c:b4:ec:5a:b2:81:93:4e:3d:fb:7f:86:f4:65:
         0e:02:e1:4c:12:f2:98:d2:3e:03:78:26:a8:4f:3c:e5:ee:37:
         17:36:c1:f0:46:1b:44:e8:5f:71:86:9c:e2:de:52:d3:c2:90:
         8f:db:b9:9b:ff:69:1d:6f:62:a7:c9:08:86:43:0c:14:51:84:
         f4:8e:7d:c4:a1:c4:f4:d1:ea:94:d3:5e:20:3c:35:4e:3e:c3:
         7d:64:50:0b:c9:ee:08:09:e6:a5:91:83:ce:af:9a:49:b6:92:
         ba:6b:0d:4f:f5:96:e7:f6:31:4c:ed:56:8c:37:18:30:e8:67:
         b7:e0:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:31:42 2026 by rpki-client