Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
File:                     2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json)
Hash identifier:          Ky99L94fWlUjliFyg7YZVGFHIZ0t8xkamAMucn6GM6I=
Subject key identifier:   E4:71:AC:73:30:6A:AC:7C:36:D5:99:3B:FC:E8:2F:DD:8C:B1:1B:3F
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       13087DF8EF3815DB15E7F34CCDB9D451A3430CFE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
Manifest number:          03EE
Signing time:             Fri 26 Jun 2026 21:09:47 +0000
Manifest this update:     Fri 26 Jun 2026 21:04:47 +0000
Manifest next update:     Sat 27 Jun 2026 21:48:47 +0000
Files and hashes:         1: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: Y5mlK+u9qJ4rnNZVrf1tQAIxPhlx63PDWR/E6CH93h0=)
                          2: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: +J4rEB3Rt4T2Ln721WDo+oumy/LO2ZS0AjqCXsjrWc4=)
                          3: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: SKQFUqDa+0i1+QWXHpdDtvb4tLGcixMI0hXM8Vaf06k=)
                          4: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: DKbye84QCkTImvUP7CJY0CDZq5FNbhjZ/IuRa4Ti5/Y=)
                          5: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: br+6ED3hJFY+Y1zT8iUZxr4iTPizEZ4ipdNZa7JBqtk=)
                          6: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: L7riJeY7IMZry5vP5gSJ6MrY0bjXLbTdx38twhWMizc=)
                          7: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: HvJZV7cFZNky1fBcGYuqFa0SiMTvK9xz+NrDi2PVx7E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 21:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:08:7d:f8:ef:38:15:db:15:e7:f3:4c:cd:b9:d4:51:a3:43:0c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Jun 26 21:04:47 2026 GMT
            Not After : Jun 27 21:48:47 2026 GMT
        Subject: CN=E471AC73306AAC7C36D5993BFCE82FDD8CB11B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:50:71:84:a9:2d:ef:2e:99:eb:d1:78:99:
                    70:75:2f:af:8d:23:36:5b:3f:71:7f:e3:54:2e:4b:
                    a0:0f:68:37:66:ac:00:64:0c:0f:47:04:e8:67:a8:
                    d3:4a:ca:ca:75:b2:78:56:06:97:e1:24:4e:d5:7c:
                    51:39:a1:15:0b:b8:b9:ee:db:b8:63:55:72:83:30:
                    82:c0:4e:58:f4:08:f2:a5:f5:c4:89:b5:2e:cf:ef:
                    9c:26:57:ca:4a:4f:55:05:b2:ca:d5:7b:e1:c7:f2:
                    b6:15:f5:d3:a5:42:0e:28:12:a1:11:b3:62:bf:31:
                    86:6d:3c:fa:34:6b:62:10:06:62:e5:29:ca:2a:ed:
                    b0:72:39:ca:0f:61:56:a2:32:db:ba:ad:f7:52:93:
                    cc:3e:3e:85:2f:c0:89:47:33:57:26:eb:02:40:de:
                    cb:15:86:7b:fe:a4:ba:fe:ac:86:0f:d1:47:3e:f2:
                    2f:b7:60:83:b3:01:14:72:a7:de:bf:28:e2:a0:1c:
                    6f:17:fe:14:cf:69:b0:c1:a4:92:bf:90:e6:16:19:
                    3f:4d:36:51:a5:40:dc:a5:fa:1c:3e:00:70:90:7b:
                    bc:d7:81:e9:ed:96:be:12:ab:15:e4:38:9f:ce:bc:
                    07:e3:e5:74:4d:8c:a7:7d:c3:9a:96:2e:72:b1:90:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:71:AC:73:30:6A:AC:7C:36:D5:99:3B:FC:E8:2F:DD:8C:B1:1B:3F
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:b8:41:cd:f6:19:6a:c4:be:ba:9f:4d:de:6f:e9:e0:e7:
         c3:81:e3:16:24:28:30:bc:5f:d4:c4:10:7f:30:3b:cc:d5:72:
         8e:39:49:a0:8e:d2:f3:24:b7:dc:3e:86:92:7b:c0:ec:af:15:
         db:34:41:77:d2:cd:27:5e:28:58:5a:70:60:aa:79:c9:b2:75:
         5d:6a:89:3c:98:91:b3:31:65:39:f8:57:83:b5:d6:8d:0e:55:
         93:47:00:a8:39:09:e8:91:87:32:17:af:44:48:7c:f3:fc:af:
         97:9c:5a:09:6e:a8:01:fe:90:59:11:c8:07:97:8e:64:83:02:
         c2:36:4d:d3:99:a2:8a:26:d1:66:4c:c7:6d:4a:55:5b:93:6c:
         a7:5c:5a:01:b5:29:81:aa:c1:d0:14:ee:3d:11:9c:55:3e:59:
         21:1b:97:51:59:8e:1a:a6:26:16:f6:4e:6c:5f:d0:56:0d:22:
         96:a8:42:6c:4c:28:fd:4e:be:eb:09:29:a3:9a:bc:60:68:32:
         fc:38:cf:5e:5a:55:b8:11:7c:c7:b3:6e:70:f5:c0:3d:a6:2b:
         34:28:9e:99:3c:ba:56:d4:73:d1:be:0b:53:a3:c8:73:6d:8f:
         c7:c0:2a:2d:af:bc:18:40:fb:e9:b1:c0:fa:aa:43:59:50:73:
         4f:1e:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:12:17 2026 by rpki-client