Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
File:                     3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json)
Hash identifier:          MHXgcY0NGsRN6O/QKCtOoC4vl9k7o0Avdfwt+J1ImeM=
Subject key identifier:   70:DA:78:74:6F:D5:0D:E2:09:51:51:2D:73:E8:51:76:1B:2B:BE:46
Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Certificate issuer:       /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Certificate serial:       2E475FA1D6E331641FD0474FB48004477189E95E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
Manifest number:          BF
Signing time:             Wed 08 Jul 2026 09:28:53 +0000
Manifest this update:     Wed 08 Jul 2026 09:23:53 +0000
Manifest next update:     Thu 09 Jul 2026 10:13:53 +0000
Files and hashes:         1: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=)
                          2: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: 5112VpSkg6rhwC9Z2hDsenxRGLMl/ULwba1vMoGwKiY=)
                          3: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
                          rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:47:5f:a1:d6:e3:31:64:1f:d0:47:4f:b4:80:04:47:71:89:e9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
        Validity
            Not Before: Jul  8 09:23:53 2026 GMT
            Not After : Jul  9 10:13:53 2026 GMT
        Subject: CN=70DA78746FD50DE20951512D73E851761B2BBE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:7a:20:ab:af:b0:2d:62:f9:1d:60:c6:38:
                    17:27:fe:28:2d:e0:e4:fb:cc:c6:52:f5:47:44:30:
                    7b:86:41:f0:9a:81:6e:b7:7f:fa:98:05:fb:60:cf:
                    3a:fc:22:39:5b:61:90:23:25:08:ee:96:7d:87:28:
                    40:da:a6:6f:f4:c5:ee:f0:20:cd:41:32:c1:eb:3e:
                    5f:eb:4b:ad:f2:87:bd:e4:59:5c:cd:20:a5:c8:25:
                    ea:c4:a2:2a:16:3f:7a:f2:f3:97:cb:a0:ad:09:04:
                    5b:73:60:f4:a2:47:d9:c7:66:4b:ae:46:a6:05:f3:
                    d3:54:a0:d8:68:e5:d7:97:60:0b:67:37:d8:45:8d:
                    1e:52:db:1e:03:16:d4:dc:e5:fa:1f:19:2f:6c:2d:
                    7e:4a:ca:c4:d2:61:f0:78:49:5c:d3:47:c8:89:b4:
                    6f:dc:42:9f:65:8c:ef:4a:77:87:bf:5c:b3:6e:98:
                    de:b3:1a:ee:ab:43:98:0c:01:94:c1:10:cf:73:fe:
                    cb:8e:1c:b7:98:16:97:d8:39:1c:7c:14:ed:33:0b:
                    e1:c8:02:f9:8c:21:3b:76:9e:4c:e7:82:ff:89:3c:
                    41:7a:67:f2:db:e7:e8:d7:0b:7d:49:94:da:8f:26:
                    b4:4c:d0:ff:d9:27:89:71:7b:09:28:b0:99:85:e7:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DA:78:74:6F:D5:0D:E2:09:51:51:2D:73:E8:51:76:1B:2B:BE:46
            X509v3 Authority Key Identifier:
                keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:3d:e0:c2:35:9b:e5:17:96:8d:ef:6f:31:e2:ef:1f:92:
         f5:a2:7e:80:cc:7d:cb:c9:a3:76:fd:a5:95:db:db:8a:46:ab:
         35:3d:fd:45:52:a5:a4:99:51:f8:38:ab:22:83:e4:d5:70:5a:
         c0:4e:49:42:85:2c:65:df:98:d5:e8:4a:03:6f:42:ab:19:40:
         7d:66:0c:b3:81:4b:d9:13:09:4a:9f:75:b9:dc:26:1d:0e:3e:
         4e:40:bf:ae:12:62:8e:de:87:93:b2:9d:08:96:0e:50:9f:58:
         3c:5b:8f:be:d8:31:cf:66:36:0c:cc:1c:ad:69:78:a3:aa:ad:
         4d:32:76:44:99:b3:f7:07:4f:28:dd:61:5d:73:4e:00:0f:dd:
         c8:90:5d:06:7b:67:f4:a9:75:32:6e:19:be:c2:91:0f:d7:5b:
         74:7e:46:4f:6c:9d:df:57:af:25:8a:e3:43:c4:82:b8:77:ae:
         25:be:99:9b:7e:9b:9a:f4:a9:2b:fc:29:e9:6f:7e:97:88:33:
         e8:ad:db:03:a4:e4:1f:6a:b8:2a:b4:4b:99:29:29:82:af:26:
         8e:2f:2a:52:a4:84:db:75:a6:92:65:a0:cb:e9:fb:f2:35:17:
         4d:27:21:cd:78:26:c5:6b:d1:41:c2:b1:d0:6f:30:e7:e8:7a:
         e1:a2:98:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULkdfodbjMWQf0EdPtIAER3GJ6V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGQUM0MURCMTJFNjkyNEUyMjJDRDZDODQwN0U3RjYw
NEU2REVDODAeFw0yNjA3MDgwOTIzNTNaFw0yNjA3MDkxMDEzNTNaMDMxMTAvBgNV
BAMTKDcwREE3ODc0NkZENTBERTIwOTUxNTEyRDczRTg1MTc2MUIyQkJFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWHogq6+wLWL5HWDGOBcn/igt
4OT7zMZS9UdEMHuGQfCagW63f/qYBftgzzr8IjlbYZAjJQjuln2HKEDapm/0xe7w
IM1BMsHrPl/rS63yh73kWVzNIKXIJerEoioWP3ry85fLoK0JBFtzYPSiR9nHZkuu
RqYF89NUoNho5deXYAtnN9hFjR5S2x4DFtTc5fofGS9sLX5KysTSYfB4SVzTR8iJ
tG/cQp9ljO9Kd4e/XLNumN6zGu6rQ5gMAZTBEM9z/suOHLeYFpfYORx8FO0zC+HI
AvmMITt2nkzngv+JPEF6Z/Lb5+jXC31JlNqPJrRM0P/ZJ4lxewkosJmF57oVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcNp4dG/VDeIJUVEtc+hRdhsrvkYwHwYDVR0j
BBgwFoAUOvrEHbEuaSTiIs1shAfn9gTm3sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFI
YWQvMC8zQUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkFDNDFEQjEyRTY5MjRF
MjIyQ0Q2Qzg0MDdFN0Y2MDRFNkRFQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFIYWQvMC8z
QUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR8I94MI1m+UXlo3vbzHi7x+S9aJ+gMx9y8mjdv2lldvbikarNT39RVKlpJlR
+DirIoPk1XBawE5JQoUsZd+Y1ehKA29CqxlAfWYMs4FL2RMJSp91udwmHQ4+TkC/
rhJijt6Hk7KdCJYOUJ9YPFuPvtgxz2Y2DMwcrWl4o6qtTTJ2RJmz9wdPKN1hXXNO
AA/dyJBdBntn9Kl1Mm4ZvsKRD9dbdH5GT2yd31evJYrjQ8SCuHeuJb6Zm36bmvSp
K/wp6W9+l4gz6K3bA6TkH2q4KrRLmSkpgq8mji8qUqSE23WmkmWgy+n78jUXTSch
zXgmxWvRQcKx0G8w5+h64aKYFg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 20:15:26 2026 by rpki-client