Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
File:                     13444CACBA70082038368F9FE638A30F9C9B0F6B.mft (raw, json)
Hash identifier:          IJkoaSS6tpUcPjmAe3te4PrQrAU4cmhx5jdz9qEi7Cg=
Subject key identifier:   56:7C:86:B6:F8:46:5C:8E:E2:F1:8D:CE:64:02:6B:24:A8:8E:36:7C
Authority key identifier: 13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B
Certificate issuer:       /CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
Certificate serial:       71A7D856BA6066AF5567D543861AB0FC3B3DEAF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
Manifest number:          27
Signing time:             Sat 22 Aug 2026 22:12:30 +0000
Manifest this update:     Sat 22 Aug 2026 22:07:30 +0000
Manifest next update:     Sun 23 Aug 2026 23:49:30 +0000
Files and hashes:         1: 13444CACBA70082038368F9FE638A30F9C9B0F6B.crl (hash: ppvPbwP6D52TdceBd2yAccAC/rKu3pz6kkYGPwqNPZ0=)
                          2: 323830343a383234303a3a2f33322d3438203d3e20323732353038.roa (hash: zt1SFnyBViNTsxTfqshRQlcco6qHA7SCoY1SiV3a2F8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl
                          rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a7:d8:56:ba:60:66:af:55:67:d5:43:86:1a:b0:fc:3b:3d:ea:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
        Validity
            Not Before: Aug 22 22:07:30 2026 GMT
            Not After : Aug 23 23:49:30 2026 GMT
        Subject: CN=567C86B6F8465C8EE2F18DCE64026B24A88E367C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:a9:65:2d:22:3e:02:9e:94:20:d7:7f:6b:
                    e8:4a:f8:d8:c4:a3:60:c9:1d:3e:12:e1:78:5f:2f:
                    83:fb:9c:91:c0:ca:56:75:8d:f4:03:85:6e:48:9b:
                    c0:31:32:56:9f:bc:8a:e7:40:94:a9:14:1c:ab:2c:
                    48:a1:41:08:29:d7:16:c6:9f:41:4e:0c:a0:bc:e0:
                    aa:f1:68:64:ba:44:c5:89:44:34:f5:f7:14:4e:85:
                    fd:7a:61:5b:46:c4:02:54:8a:f3:b0:23:af:3c:9f:
                    16:5f:cb:85:4e:a2:1c:74:d4:7c:f4:3e:88:18:e0:
                    8f:b1:cf:4e:4b:48:d0:0f:7d:04:3b:f4:31:27:c3:
                    ca:62:d2:69:27:d4:ae:98:ae:15:a1:ba:23:e0:ce:
                    7e:72:01:11:26:6d:e8:27:17:4b:21:4d:8f:e4:52:
                    52:1c:b6:0e:c0:d1:a0:91:40:2a:bd:16:73:49:27:
                    17:61:25:08:37:a6:2a:ad:2e:06:4e:09:24:60:e0:
                    47:35:fc:60:91:f7:10:6f:26:50:93:15:1b:2d:dd:
                    61:9b:d6:33:d2:fa:2f:02:e5:7a:2f:c6:82:fc:c1:
                    ea:49:ca:48:e0:96:57:b2:70:3a:e0:f0:04:fd:33:
                    2c:3c:da:e7:21:4c:c6:bb:84:65:96:40:ee:0b:5e:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7C:86:B6:F8:46:5C:8E:E2:F1:8D:CE:64:02:6B:24:A8:8E:36:7C
            X509v3 Authority Key Identifier:
                keyid:13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:3b:e7:90:6e:60:32:73:cc:e5:27:5f:e1:d3:80:a2:8b:
         32:7b:34:25:0a:3a:6f:9f:03:2b:73:a2:7d:69:b1:27:73:d7:
         45:5e:71:66:74:08:82:89:26:85:fd:a4:4b:8b:58:62:e2:f9:
         91:c5:ab:b2:9e:83:a4:51:6f:20:ef:e0:d3:71:1a:08:52:38:
         b9:23:8c:5c:f5:d1:61:ef:af:17:59:df:88:58:8d:7c:f0:69:
         1f:9d:d6:04:78:63:aa:c6:ca:94:f1:20:8f:ad:30:96:53:e2:
         d5:10:ba:9e:4e:1a:7f:4f:b2:9d:ac:27:23:5b:1a:35:82:bd:
         0f:a3:e1:d7:6e:48:f4:62:e6:89:b3:d3:e2:02:d0:bd:40:8b:
         c1:9c:72:66:fb:74:06:19:38:b8:03:b2:80:c6:4b:2a:a5:c3:
         98:a6:b1:d3:95:e3:cf:86:80:dd:37:a6:dc:c4:b6:88:44:49:
         ab:4c:3a:73:ed:35:ce:90:49:c7:c5:42:75:5a:ed:2b:6a:94:
         f3:cd:09:38:7e:1b:fe:bb:12:0b:32:38:dd:89:e3:68:67:f0:
         9d:e3:17:9c:8b:bc:8c:f0:af:1e:2f:1a:2e:4e:ba:65:42:77:
         7d:21:a2:1f:6f:74:83:8b:40:11:dd:0a:2a:10:f1:92:88:62:
         ab:8d:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----