Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
File:                     DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json)
Hash identifier:          61wQCHemaEMuwovdsGH+i9Wf4/lnC7W/9i/Pczlof+s=
Subject key identifier:   B1:2E:21:5F:2B:7A:A0:11:3A:C2:EF:1E:5D:F8:46:8A:07:76:8B:34
Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7
Certificate issuer:       /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
Certificate serial:       68C4196F5F50E812EA83E176DBD2E55263DE175A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
Manifest number:          01E8
Signing time:             Wed 08 Jul 2026 05:02:31 +0000
Manifest this update:     Wed 08 Jul 2026 04:57:31 +0000
Manifest next update:     Thu 09 Jul 2026 05:54:31 +0000
Files and hashes:         1: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: cAhEWj0yU73JbNriFbRy/WRxb7W9rQLgsm7ia/bYxOQ=)
                          2: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: w6/57mC9TspDOHF3UWjGulGNxRl1afjYKNbha5BZs6Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl
                          rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c4:19:6f:5f:50:e8:12:ea:83:e1:76:db:d2:e5:52:63:de:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7
        Validity
            Not Before: Jul  8 04:57:31 2026 GMT
            Not After : Jul  9 05:54:31 2026 GMT
        Subject: CN=B12E215F2B7AA0113AC2EF1E5DF8468A07768B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:81:12:50:ca:eb:21:15:cb:9e:9a:e0:c4:
                    f2:4e:90:b1:46:cd:ce:55:49:01:d9:c1:e4:e6:4e:
                    07:83:53:97:6e:c8:11:20:d4:b5:65:b7:98:43:68:
                    4b:10:59:80:93:89:d3:40:29:ce:e2:d2:91:73:a2:
                    68:bf:1e:c0:d4:0d:15:14:f9:b4:c7:78:27:15:08:
                    0a:bd:26:17:c1:f1:1b:6e:02:4b:57:9b:74:cd:25:
                    42:1e:bf:68:d3:af:45:ca:4f:6c:a7:d5:ad:68:c3:
                    3d:89:86:34:ee:37:ae:67:af:ab:90:96:da:6a:85:
                    86:19:7e:0d:b1:98:3b:59:c1:c2:8e:7a:1e:5f:0c:
                    15:f8:38:ec:5d:78:da:af:49:5c:1c:b2:16:06:45:
                    a1:e6:0e:b7:9d:a7:98:a1:33:15:52:5e:5a:8c:59:
                    ad:21:30:2c:47:b5:79:28:c0:5f:ef:34:98:ea:6a:
                    86:31:2f:a1:07:d6:cd:55:19:5f:02:aa:50:0c:31:
                    62:f8:cf:fb:4e:70:b1:32:dd:77:99:62:f5:66:98:
                    45:bb:2e:f8:9b:a7:53:af:da:e4:21:fe:b5:7f:ef:
                    10:f9:bd:72:c4:f8:57:5f:7a:9e:1d:75:ea:9c:9f:
                    b9:d7:66:e4:2d:cb:72:83:e6:41:18:c5:5a:5e:9c:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2E:21:5F:2B:7A:A0:11:3A:C2:EF:1E:5D:F8:46:8A:07:76:8B:34
            X509v3 Authority Key Identifier:
                keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:65:ea:1f:e2:c5:42:84:6c:e4:c1:bd:02:c0:81:54:68:
         17:40:80:f1:61:fb:7c:96:c8:4e:ac:01:cb:c1:82:53:6e:17:
         f6:70:53:d7:67:1b:4a:67:67:a2:fa:8a:61:97:4b:ce:f2:5b:
         2e:fc:0a:d2:50:a2:33:da:f5:ea:16:be:dc:60:64:2c:9c:e9:
         17:6c:5c:65:2e:61:58:1d:79:9b:d8:7a:42:b0:88:07:2f:0a:
         83:f3:c2:76:72:20:ca:16:00:e3:91:75:46:44:2e:73:8f:0f:
         1d:46:93:53:50:46:bd:ce:de:2c:7a:3a:d0:f3:94:b5:22:64:
         33:08:af:7b:d7:c2:9e:15:b4:84:58:41:71:8f:13:88:47:0f:
         bc:8e:8d:a8:b2:e7:ee:28:e7:db:e5:83:14:a3:a9:81:ba:8a:
         6b:2f:93:e4:1f:b0:cb:b5:8f:a9:5c:d0:c8:18:1b:23:78:c3:
         4b:61:58:db:de:c0:b9:73:fd:c0:15:33:bb:e9:75:9b:90:d3:
         1c:5e:d4:06:cc:2c:ba:78:d8:ef:13:70:02:51:b5:78:7d:53:
         97:ec:32:16:b9:eb:8c:79:1f:cc:50:7e:63:d4:12:4b:4a:d2:
         fb:1e:44:dd:6a:d4:dd:bd:72:36:8b:63:64:71:f8:30:77:f0:
         76:e3:67:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaMQZb19Q6BLqg+F229LlUmPeF1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYzNEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlF
ODZCOERCNzAeFw0yNjA3MDgwNDU3MzFaFw0yNjA3MDkwNTU0MzFaMDMxMTAvBgNV
BAMTKEIxMkUyMTVGMkI3QUEwMTEzQUMyRUYxRTVERjg0NjhBMDc3NjhCMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvIESUMrrIRXLnprgxPJOkLFG
zc5VSQHZweTmTgeDU5duyBEg1LVlt5hDaEsQWYCTidNAKc7i0pFzomi/HsDUDRUU
+bTHeCcVCAq9JhfB8RtuAktXm3TNJUIev2jTr0XKT2yn1a1owz2JhjTuN65nr6uQ
ltpqhYYZfg2xmDtZwcKOeh5fDBX4OOxdeNqvSVwcshYGRaHmDredp5ihMxVSXlqM
Wa0hMCxHtXkowF/vNJjqaoYxL6EH1s1VGV8CqlAMMWL4z/tOcLEy3XeZYvVmmEW7
Lvibp1Ov2uQh/rV/7xD5vXLE+Fdfep4ddeqcn7nXZuQty3KD5kEYxVpenNcfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsS4hXyt6oBE6wu8eXfhGigd2izQwHwYDVR0j
BBgwFoAU3zSv5MNSWeoOCrk6NA3xOehrjbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgx
SjkvMC9ERjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMzRBRkU0QzM1MjU5RUEw
RTBBQjkzQTM0MERGMTM5RTg2QjhEQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC9E
RjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAam1l6h/ixUKEbOTBvQLAgVRoF0CA8WH7fJbITqwBy8GCU24X9nBT12cbSmdn
ovqKYZdLzvJbLvwK0lCiM9r16ha+3GBkLJzpF2xcZS5hWB15m9h6QrCIBy8Kg/PC
dnIgyhYA45F1RkQuc48PHUaTU1BGvc7eLHo60POUtSJkMwive9fCnhW0hFhBcY8T
iEcPvI6NqLLn7ijn2+WDFKOpgbqKay+T5B+wy7WPqVzQyBgbI3jDS2FY297AuXP9
wBUzu+l1m5DTHF7UBswsunjY7xNwAlG1eH1Tl+wyFrnrjHkfzFB+Y9QSS0rS+x5E
3WrU3b1yNotjZHH4MHfwduNnww==
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:22:32 2026 by rpki-client