Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
File:                     D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json)
Hash identifier:          MmLPKnSGz65QWl6IbzzeDfrvvK1SIYxx92HnAH8pJZ8=
Subject key identifier:   3F:7D:0A:A1:9B:A0:4F:4F:C9:B2:A2:54:69:62:F3:77:B3:63:48:DB
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Certificate issuer:       /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial:       6A6C20AA69842D91FC211FAC7BD57E59E8682D48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
Manifest number:          0251
Signing time:             Mon 24 Aug 2026 04:04:02 +0000
Manifest this update:     Mon 24 Aug 2026 03:59:02 +0000
Manifest next update:     Tue 25 Aug 2026 07:28:02 +0000
Files and hashes:         1: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: X2SMkfur/FYNFr4D7hAhn9CtMf0LAXhcPIKG3vmARlE=)
                          2: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: ARu+HiBlwjs5SJVY+5C32MR/FZIMOGcccntV0yboejc=)
                          3: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: cuvly3KsCe7VbHLKJipwwgzR8tpUXrjpdQpOoF48wMI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
                          rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6c:20:aa:69:84:2d:91:fc:21:1f:ac:7b:d5:7e:59:e8:68:2d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
        Validity
            Not Before: Aug 24 03:59:02 2026 GMT
            Not After : Aug 25 07:28:02 2026 GMT
        Subject: CN=3F7D0AA19BA04F4FC9B2A2546962F377B36348DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:dd:71:e3:ba:f6:5e:81:07:8f:27:24:f7:
                    69:59:d5:cd:33:15:62:b1:cf:fd:60:a6:bf:3b:22:
                    36:80:1d:f7:a9:45:19:f4:03:fc:2e:4a:55:c3:ed:
                    a1:a7:8a:1e:f5:79:a4:a3:f9:20:6f:5a:0b:53:8b:
                    4c:67:5c:53:00:05:28:68:32:cc:e5:38:54:33:65:
                    63:27:2b:56:2e:80:eb:0f:cc:54:a8:40:3f:9e:72:
                    92:25:f3:e6:bd:fd:b9:28:a2:bf:89:e1:9b:24:f5:
                    69:27:12:4f:b6:e1:8b:f9:ae:91:86:e6:fd:6c:50:
                    09:01:06:68:de:87:d1:49:dc:72:f5:f6:f6:cb:f1:
                    5e:69:d6:b5:48:08:f1:0d:cb:3e:b4:6f:c5:ea:a7:
                    e2:54:06:9d:cc:59:e8:78:0d:67:88:2e:d2:22:af:
                    e9:ac:96:61:18:eb:b7:92:63:b5:e2:75:bb:f0:36:
                    b8:39:85:16:a6:84:08:90:bc:32:e2:1b:df:f1:b8:
                    32:38:80:91:f1:63:24:b2:d9:b5:d7:ba:15:3e:a4:
                    0a:ce:8c:28:cc:3f:97:98:ed:9c:6a:05:b8:e2:d3:
                    3c:62:7e:b2:1a:5b:92:96:13:b3:12:6e:9a:3a:27:
                    83:9a:60:ed:ab:24:c1:8b:ce:0b:7a:f0:3a:67:61:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7D:0A:A1:9B:A0:4F:4F:C9:B2:A2:54:69:62:F3:77:B3:63:48:DB
            X509v3 Authority Key Identifier:
                keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:3b:e9:e1:e9:f6:2c:b1:56:8b:6e:c5:73:07:3d:d8:67:
         0f:56:ff:20:dd:02:c5:b8:c0:0a:f4:c2:8b:1e:52:46:cd:58:
         e6:7a:9a:0f:cf:8f:21:06:6a:82:18:32:19:e8:8d:e8:8f:42:
         71:df:a7:69:5c:29:fc:59:4b:66:1f:7b:3b:7c:da:21:b7:e8:
         11:78:78:43:c6:46:f2:1e:2b:ed:cb:77:30:67:5a:8e:ec:cd:
         44:ad:a1:d2:d2:3f:6a:51:f8:35:a6:9c:e8:d3:21:65:28:fd:
         4a:f8:2e:83:65:5f:a3:aa:75:af:3a:fc:db:9b:a4:0b:cd:b7:
         ca:8c:79:d1:bb:b2:7e:10:2b:fa:c1:6b:8b:76:61:41:54:51:
         ca:b6:09:0e:62:63:6a:0e:d1:38:d0:a6:e4:4d:9a:48:fb:22:
         40:06:04:52:a3:92:f8:e1:86:43:38:f5:2a:d5:50:07:09:d6:
         26:bf:39:d9:db:38:f9:5a:d6:98:f7:7a:32:cf:93:26:a9:f8:
         1a:f6:e7:d7:eb:f7:1a:5a:32:8d:25:4d:b4:e9:78:b4:8a:00:
         7c:98:42:69:ab:a6:a5:c3:0c:a3:b8:36:12:e0:31:54:42:69:
         1f:e3:70:70:3f:b6:a2:e5:e6:6c:d1:67:2d:69:68:2a:3f:69:
         8d:6f:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----