Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
File:                     D357DC68A05ED575BA6451EB468F237AA28B467D.mft (raw, json)
Hash identifier:          szD6OnIh712Re3NtHYvdXNmAqc7s/wFYpE56S1dHSaE=
Subject key identifier:   38:32:51:31:AB:A1:5A:C8:9F:A0:15:84:45:2C:31:BF:7B:20:68:C9
Authority key identifier: D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D
Certificate issuer:       /CN=D357DC68A05ED575BA6451EB468F237AA28B467D
Certificate serial:       1A6830787C5114E3983ABFA299123A0E3339002D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
Manifest number:          CA
Signing time:             Sun 23 Aug 2026 01:28:13 +0000
Manifest this update:     Sun 23 Aug 2026 01:23:13 +0000
Manifest next update:     Mon 24 Aug 2026 04:39:13 +0000
Files and hashes:         1: 34352e3138312e32332e302f32342d3234203d3e20323639313636.roa (hash: WSQDqS765U98sOev9jQVFoS9maBo8w63vwgbi+HXKxc=)
                          2: 34352e3138312e32302e302f32342d3234203d3e20323639313636.roa (hash: x6IZzlv+DoDREZ9xvGXErgQWgHv3A8HqvS+yZk6O5cQ=)
                          3: 34352e3138312e32322e302f32332d3233203d3e20323639313636.roa (hash: 4VAkRpmeewEer1R+SRjpPm9uWFKrjDaxtYpAFgd8d+U=)
                          4: 323830343a363036633a3a2f33322d3332203d3e20323639313636.roa (hash: a1EIt8+P6UuzU/4yMAlo9tuZ8mDcowKohV4IscOIHLM=)
                          5: 34352e3138312e32302e302f32322d3232203d3e20323639313636.roa (hash: /cm/zTVx+fTAa7W4Y7HL83D5Bw+dp1W0fT+7KW4gOEA=)
                          6: 34352e3138312e32312e302f32342d3234203d3e20323639313636.roa (hash: n+alAGpmiUxr+rZJxcGmXqOaIR72D7you6hpi6PHep8=)
                          7: 34352e3138312e32302e302f32332d3233203d3e20323639313636.roa (hash: hOZICdf5lcxfEjdggJVYwsaB2i5Q484ZxI9Tm9zPftI=)
                          8: 34352e3138312e32322e302f32342d3234203d3e20323639313636.roa (hash: 88GTJ5jgzIdA4n/LKWeR41RVT6v19QuT5FeiQgMnbqA=)
                          9: D357DC68A05ED575BA6451EB468F237AA28B467D.crl (hash: /IJTQas099SsGp8CL2HPfZ15M33uUJ1mkRQpJNfR1JA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl
                          rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:68:30:78:7c:51:14:e3:98:3a:bf:a2:99:12:3a:0e:33:39:00:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D357DC68A05ED575BA6451EB468F237AA28B467D
        Validity
            Not Before: Aug 23 01:23:13 2026 GMT
            Not After : Aug 24 04:39:13 2026 GMT
        Subject: CN=38325131ABA15AC89FA01584452C31BF7B2068C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:93:a0:88:4f:46:0d:d1:46:0d:ac:af:5b:
                    c2:09:47:32:04:e7:62:55:48:76:70:60:af:c9:6b:
                    73:a5:47:2b:d1:36:17:95:17:96:c5:1c:6d:dd:8d:
                    ab:68:29:f8:ff:52:e7:bb:13:d4:81:d2:1e:c6:2e:
                    b7:2f:33:c2:42:3f:cc:00:16:58:98:dc:bd:bc:8a:
                    1d:28:b7:78:45:3f:42:c4:03:0d:70:6d:61:2e:e1:
                    22:d0:e5:c1:3d:35:26:40:b7:71:a7:30:37:ac:ee:
                    66:66:0d:7c:4a:96:a5:65:a8:12:d0:a7:a9:47:1c:
                    42:5c:c1:4f:f0:51:37:b0:95:01:51:85:5e:fb:ee:
                    ca:6c:01:2e:9a:77:72:88:76:60:ee:f7:26:02:e6:
                    82:f1:54:ca:a6:fb:e6:46:33:56:6b:05:06:19:03:
                    67:84:d0:c6:d6:f4:eb:f0:6d:36:e4:24:6a:c9:99:
                    ee:f0:29:df:0a:52:d3:52:e9:98:31:3f:f1:9d:54:
                    7c:28:ab:48:7e:46:86:fa:38:8c:5d:50:6d:7a:95:
                    59:e0:b3:0a:4b:87:63:53:44:b6:bb:e3:61:af:a2:
                    17:c1:9c:64:55:9b:81:ee:c0:2f:d7:1e:96:c4:f0:
                    62:3f:56:02:90:9e:d6:73:f1:52:8b:dd:3e:46:89:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:51:31:AB:A1:5A:C8:9F:A0:15:84:45:2C:31:BF:7B:20:68:C9
            X509v3 Authority Key Identifier:
                keyid:D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:0d:be:71:1f:c8:f1:3f:92:d0:14:77:de:68:83:29:49:
         20:0f:1b:41:d6:08:09:0f:8d:de:d3:e9:d6:bb:33:3a:6e:3b:
         23:75:54:99:49:6b:76:8b:dd:5c:e1:7a:1a:37:c6:a7:cb:a4:
         c2:c5:a4:9d:d2:4b:70:85:51:fc:32:4b:22:43:ba:15:a0:34:
         b4:20:7b:87:f2:27:c7:01:ee:df:29:6e:3a:a8:4d:d5:4d:63:
         1e:76:09:26:60:ae:88:57:10:b8:9b:8d:da:ab:a3:5e:f3:9f:
         34:d4:1e:6a:3d:83:30:51:24:ab:cb:a4:c5:64:be:de:76:37:
         ca:c2:35:3f:3e:a5:75:64:6a:af:50:cf:f3:fa:32:a5:44:73:
         d5:f6:14:c2:8a:c2:03:53:57:11:38:94:1a:f3:ea:c3:6b:9d:
         e6:e6:c3:ca:bb:fc:40:cc:f9:21:a0:a3:71:f2:41:d9:81:76:
         1f:c2:d3:d3:cf:c5:1b:4c:24:55:26:12:d7:05:79:d8:d2:d1:
         be:0a:5b:1d:7f:34:85:d6:45:04:5d:e6:5e:dd:da:39:d4:3a:
         1b:93:e8:20:11:71:28:72:ad:d6:72:6e:5f:22:5b:bd:00:c1:
         aa:0f:3c:3a:56:4f:b2:ed:07:e1:3e:02:5b:07:ce:c0:bb:c2:
         8c:da:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:13:15 2026 by rpki-client