Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.mft
File:                     AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.mft (raw, json)
Hash identifier:          Vn3O9XC27M14VpfXeYRzwlKm4slHxaW8OBkeI5aOvOY=
Subject key identifier:   41:18:8F:96:31:57:F2:7C:D7:AA:F8:8F:F4:61:6A:05:52:3D:D9:F4
Authority key identifier: AA:3D:F1:98:B3:5A:B5:AC:77:13:7D:A0:A4:C0:C0:41:B3:E0:26:30
Certificate issuer:       /CN=AA3DF198B35AB5AC77137DA0A4C0C041B3E02630
Certificate serial:       77F95EED8302336B3B222191530204A4DB1946B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.mft
Manifest number:          1C
Signing time:             Sun 23 Aug 2026 03:41:30 +0000
Manifest this update:     Sun 23 Aug 2026 03:36:30 +0000
Manifest next update:     Mon 24 Aug 2026 04:14:30 +0000
Files and hashes:         1: 323830343a386663343a3a2f33322d3438203d3e20323733353130.roa (hash: agbjNnpglcb5Txb6gYT41LR4MAXV8HEuO+6TulCl4p4=)
                          2: AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.crl (hash: bcMsFQYKWMQPEH4qYRF1Ac02NPi7ON0Azsm9F/vY6Pw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.crl
                          rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f9:5e:ed:83:02:33:6b:3b:22:21:91:53:02:04:a4:db:19:46:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3DF198B35AB5AC77137DA0A4C0C041B3E02630
        Validity
            Not Before: Aug 23 03:36:30 2026 GMT
            Not After : Aug 24 04:14:30 2026 GMT
        Subject: CN=41188F963157F27CD7AAF88FF4616A05523DD9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:b1:c4:72:4e:86:03:83:9d:a1:28:8d:f2:
                    22:66:92:67:99:6b:13:66:13:31:ae:b9:25:c7:68:
                    02:55:d6:72:01:c7:d1:79:3f:86:2b:2c:67:91:5f:
                    28:95:b0:b9:c0:d8:92:1f:63:95:f5:88:3a:83:d9:
                    36:2e:61:1d:73:55:8b:2f:60:ca:ba:85:df:28:5a:
                    a9:10:0b:15:53:3a:b6:bd:b5:83:21:7d:69:fb:ef:
                    e2:a9:5d:9a:df:cc:23:c4:85:8f:fd:22:cc:41:64:
                    e1:ca:21:79:78:a3:67:2b:e4:2d:54:70:70:cc:58:
                    2e:03:94:07:a6:b1:51:30:74:28:ce:35:a0:5c:92:
                    b1:f4:d9:d1:ce:d0:7a:25:2e:51:89:71:56:55:61:
                    14:f6:f6:36:51:1e:63:9b:07:86:8f:68:42:c2:9a:
                    af:a4:eb:25:b7:b1:59:99:90:76:ce:ae:25:89:8b:
                    05:bd:4c:a6:54:90:ca:8b:1b:01:3b:23:e7:aa:9f:
                    98:73:e4:62:e8:d0:b3:34:9a:29:f5:1d:c8:5f:43:
                    f8:80:46:98:53:e8:d2:13:7f:2a:89:48:3a:38:0b:
                    54:10:aa:d0:bc:14:cf:b9:81:35:84:31:ed:02:7b:
                    34:ca:5b:f0:f0:9b:d2:20:b1:6a:7b:c2:ea:fb:3a:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:8F:96:31:57:F2:7C:D7:AA:F8:8F:F4:61:6A:05:52:3D:D9:F4
            X509v3 Authority Key Identifier:
                keyid:AA:3D:F1:98:B3:5A:B5:AC:77:13:7D:A0:A4:C0:C0:41:B3:E0:26:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SqxF9oVGxscUbsCHZJoY8TPxG43Sv8PpkUQnbr35pMD/0/AA3DF198B35AB5AC77137DA0A4C0C041B3E02630.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bd:7e:81:b4:bb:8e:3b:24:0b:7a:41:30:ac:bd:03:0b:46:
         5e:0e:c0:96:45:63:2f:15:c2:9f:5c:e8:af:32:3f:5b:fe:8b:
         cd:8c:05:05:4a:dd:57:36:9d:72:09:75:36:c1:4d:60:8d:27:
         4f:fd:e8:c5:57:a7:ab:06:e5:f1:a6:94:de:dd:72:e2:d6:2a:
         f5:72:21:35:7e:10:4c:e9:d4:f7:4f:23:64:58:69:00:1c:22:
         3e:e0:21:a5:18:ed:21:26:9e:d4:61:70:9a:de:8c:a5:c9:a5:
         60:67:37:ed:1f:bd:4b:17:29:24:71:52:65:d1:ec:64:0b:05:
         92:ab:df:5a:da:9b:80:01:5b:4e:96:4a:2d:b6:fc:58:10:53:
         81:ca:8c:50:33:1c:0c:4b:d0:63:55:dc:2c:76:f6:ea:6f:2b:
         47:5e:29:59:f1:a7:f8:ef:a8:bd:ca:f9:50:01:5b:0f:f0:15:
         57:c2:51:93:50:e2:6e:43:c1:16:7a:78:58:04:54:52:22:12:
         28:c8:a1:01:94:d9:1e:b9:dc:3e:a2:b0:07:89:2c:28:11:1c:
         44:1b:0e:c5:41:bb:30:12:be:8d:21:a4:2e:86:bd:5e:45:8f:
         b8:ff:15:6d:22:61:bd:97:eb:9e:c2:6d:0f:cb:b1:fb:20:4b:
         d5:11:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----