Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
File:                     CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft (raw, json)
Hash identifier:          JZNILKcQwNydzKxxZF3bnRIYHtqNHTKp1yWpYdtgOMk=
Subject key identifier:   35:C2:CE:12:5B:06:79:27:DB:5B:59:D5:96:C3:80:EC:C8:EE:03:C1
Authority key identifier: CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
Certificate issuer:       /CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
Certificate serial:       06E3AF16EA667C2CDBE0DA786B0BB797522D188B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
Manifest number:          A9
Signing time:             Sun 23 Aug 2026 18:26:00 +0000
Manifest this update:     Sun 23 Aug 2026 18:21:00 +0000
Manifest next update:     Mon 24 Aug 2026 21:21:00 +0000
Files and hashes:         1: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: 5xr1YaFN4+xG05Qnz6cLW5dfNkTEDukYh2zUMcqpZOM=)
                          2: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: dd6RD2+XhfcKd7iVsxSQ4vvl5c2kA1b7ficMYQnUdJ0=)
                          3: CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl (hash: hkort4t//thoBvSDlUqShjxnD9gnewUstEZY/hjbFrE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl
                          rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e3:af:16:ea:66:7c:2c:db:e0:da:78:6b:0b:b7:97:52:2d:18:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
        Validity
            Not Before: Aug 23 18:21:00 2026 GMT
            Not After : Aug 24 21:21:00 2026 GMT
        Subject: CN=35C2CE125B067927DB5B59D596C380ECC8EE03C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:c3:39:bd:d7:31:f7:6a:1d:24:f7:d3:b9:
                    c3:2e:33:0c:27:be:53:c1:04:dc:69:ae:0b:8b:90:
                    be:45:04:fc:e7:fd:c5:21:7b:82:ac:f8:f4:7f:0f:
                    f8:4f:ee:ac:39:3f:31:f1:cd:e4:d2:aa:5b:a1:9d:
                    7e:8a:d0:d8:04:d0:85:83:1d:9c:63:e3:0c:77:0e:
                    58:ed:79:c8:29:f6:cf:68:9a:e9:32:29:d7:b8:49:
                    91:26:24:7c:e4:d5:3a:d1:b1:e3:d0:8e:48:29:ec:
                    27:62:55:c4:40:2b:01:94:76:4f:a9:84:17:b1:ec:
                    c6:d0:9d:47:59:d5:98:79:eb:99:5e:33:02:55:51:
                    cf:79:b4:62:2b:aa:4a:bf:f6:e0:74:3b:75:a3:65:
                    48:c7:52:4b:67:cd:f8:e7:7f:b3:70:c0:9a:6d:66:
                    27:be:ab:1f:fe:1b:6c:a2:db:8c:38:82:21:d6:5f:
                    46:8c:5c:03:7b:6b:74:3c:04:ab:02:91:42:16:01:
                    4f:05:30:bd:20:01:7a:2e:74:9f:e3:98:2e:c3:46:
                    04:df:e6:7f:f8:6f:c3:be:0d:91:8a:66:0a:61:23:
                    04:51:5a:70:40:5e:23:69:5c:ed:64:7a:b4:68:e5:
                    e5:73:a1:2f:e1:6b:d4:21:37:36:93:be:f7:8f:17:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:CE:12:5B:06:79:27:DB:5B:59:D5:96:C3:80:EC:C8:EE:03:C1
            X509v3 Authority Key Identifier:
                keyid:CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:32:23:52:64:3b:46:e9:16:64:41:cb:3a:59:74:2e:c1:c4:
         59:82:98:c4:b3:e7:64:dc:36:ab:fa:32:64:1b:fb:8f:a1:ea:
         fb:a1:48:f6:40:9a:3c:c5:19:46:56:ee:47:e9:78:8f:32:65:
         94:5e:cc:6f:43:f6:81:d5:57:03:5c:c3:6f:62:fa:1e:e0:7c:
         54:e3:80:b1:a2:72:b4:44:7d:4a:54:d2:7a:e5:fd:7a:e5:41:
         fb:26:b5:58:b0:9d:c1:5b:75:88:e8:31:ab:7b:c3:b1:9b:2c:
         89:d1:cf:5f:0d:d8:01:77:a5:11:0a:10:f8:ba:4b:99:41:d6:
         08:24:8a:b5:fb:53:3f:b6:0f:cc:d2:ce:3a:99:be:ea:b9:59:
         d9:47:74:e5:fe:43:df:c9:a1:5a:d6:d2:2b:9f:e2:a7:ae:4f:
         5d:46:aa:60:06:f6:54:9b:bc:1e:16:39:90:bf:61:5a:68:42:
         2b:82:a3:55:7a:7d:11:ae:90:8f:c6:e8:1d:f2:66:58:a2:37:
         85:8f:1b:47:b1:86:ec:10:f8:c0:de:93:ff:f9:76:e7:e2:d4:
         1c:3b:ca:58:2f:20:71:97:c3:4f:eb:d9:fd:b5:6e:77:75:cf:
         13:27:fa:0f:d2:98:0e:ba:0a:06:3a:0b:4c:be:1c:67:b4:a7:
         3a:24:06:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBuOvFupmfCzb4Np4awu3l1ItGIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YzNjMzQkI3MkI3NTY2QjM4N0UzRkUxNkQwMjJCODYx
NTdFRDNFRjAeFw0yNjA4MjMxODIxMDBaFw0yNjA4MjQyMTIxMDBaMDMxMTAvBgNV
BAMTKDM1QzJDRTEyNUIwNjc5MjdEQjVCNTlENTk2QzM4MEVDQzhFRTAzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuU8M5vdcx92odJPfTucMuMwwn
vlPBBNxprguLkL5FBPzn/cUhe4Ks+PR/D/hP7qw5PzHxzeTSqluhnX6K0NgE0IWD
HZxj4wx3Dljtecgp9s9omukyKde4SZEmJHzk1TrRsePQjkgp7CdiVcRAKwGUdk+p
hBex7MbQnUdZ1Zh565leMwJVUc95tGIrqkq/9uB0O3WjZUjHUktnzfjnf7NwwJpt
Zie+qx/+G2yi24w4giHWX0aMXAN7a3Q8BKsCkUIWAU8FML0gAXoudJ/jmC7DRgTf
5n/4b8O+DZGKZgphIwRRWnBAXiNpXO1kerRo5eVzoS/ha9QhNzaTvvePF7y1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNcLOElsGeSfbW1nVlsOA7MjuA8EwHwYDVR0j
BBgwFoAUzzYzu3K3Vms4fj/hbQIrhhV+0+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JBU0dSTU41ZDNma1daZHB3RnNkUjZzdWtwcnpDTUp5Sk4xN2tqSkZn
dVovMC9DRjM2MzNCQjcyQjc1NjZCMzg3RTNGRTE2RDAyMkI4NjE1N0VEM0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMzYzM0JCNzJCNzU2NkIz
ODdFM0ZFMTZEMDIyQjg2MTU3RUQzRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2JBU0dSTU41ZDNma1daZHB3RnNkUjZzdWtwcnpDTUp5Sk4xN2tqSkZndVovMC9D
RjM2MzNCQjcyQjc1NjZCMzg3RTNGRTE2RDAyMkI4NjE1N0VEM0VGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmjIjUmQ7RukWZEHLOll0LsHEWYKYxLPnZNw2q/oyZBv7j6Hq+6FI9kCaPMUZ
RlbuR+l4jzJllF7Mb0P2gdVXA1zDb2L6HuB8VOOAsaJytER9SlTSeuX9euVB+ya1
WLCdwVt1iOgxq3vDsZssidHPXw3YAXelEQoQ+LpLmUHWCCSKtftTP7YPzNLOOpm+
6rlZ2Ud05f5D38mhWtbSK5/ip65PXUaqYAb2VJu8HhY5kL9hWmhCK4KjVXp9Ea6Q
j8boHfJmWKI3hY8bR7GG7BD4wN6T//l25+LUHDvKWC8gcZfDT+vZ/bVud3XPEyf6
D9KYDroKBjoLTL4cZ7SnOiQGag==
-----END CERTIFICATE-----
Generated at Mon Aug 24 01:25:08 2026 by rpki-client