Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
File:                     4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft (raw, json)
Hash identifier:          VcUpx24mYeHvT+NxIliH8r2UpdUU4REXuuWre8LFh3I=
Subject key identifier:   3A:F6:E6:A1:9C:87:F7:B8:E6:77:76:CE:CF:9B:9D:73:BA:F2:81:68
Authority key identifier: 4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86
Certificate issuer:       /CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
Certificate serial:       2FDD5B9B2D21934B692CF7F23DB6ECC898E7A353
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
Manifest number:          A7
Signing time:             Tue 07 Jul 2026 22:24:57 +0000
Manifest this update:     Tue 07 Jul 2026 22:19:57 +0000
Manifest next update:     Wed 08 Jul 2026 23:37:57 +0000
Files and hashes:         1: 3138362e3139342e302e302f32332d3233203d3e20323730383738.roa (hash: N++qvqMWqypLC2nBGgOlDpr30wb5fAqGHpkT2FpI6CI=)
                          2: 323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa (hash: zpZpU0xMXG/kg+gpq/CNeedFLRekLley2r6r2QFFfQQ=)
                          3: 3138362e3139342e302e302f32322d3232203d3e20323730383738.roa (hash: 8JaemSQpYfITP2b4QYH6E87LxDcWSBcYX2Dhev/xXzU=)
                          4: 323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (hash: nIFTOsm+qixJuTHWI2QHSvq6SamjJ4f6oLwwejS2tHY=)
                          5: 3138362e3139342e322e302f32332d3233203d3e20323730383738.roa (hash: oOHBGJ/seEbEDdPGwT4eWL46QUn62RIhOGEs1i6QbBc=)
                          6: 4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl (hash: 91hlI3ZVPx+tYKOxM6mSgEuscC95TZeB9fd31PCzr6k=)
                          7: 323830343a373264343a3a2f33332d3333203d3e20323730383738.roa (hash: gwy1MJHFaIVB9n6maZJaBjhiX5UPprQmJ0Fz+2+56ww=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Jul 2026 23:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:dd:5b:9b:2d:21:93:4b:69:2c:f7:f2:3d:b6:ec:c8:98:e7:a3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3C8E91B1D1C28D4FE82E67165715503E9CA786
        Validity
            Not Before: Jul  7 22:19:57 2026 GMT
            Not After : Jul  8 23:37:57 2026 GMT
        Subject: CN=3AF6E6A19C87F7B8E67776CECF9B9D73BAF28168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:27:0d:5c:00:52:58:98:10:84:26:dd:be:
                    a4:be:ca:1d:2c:63:53:4b:57:f3:a0:1e:f0:72:38:
                    54:4d:00:1d:91:0d:80:1f:ee:d9:85:24:da:d3:e3:
                    55:98:dd:39:4b:e3:89:a4:4a:c4:72:34:4f:b7:15:
                    2c:16:30:10:4c:2c:35:6d:3e:54:49:1a:fc:8a:c1:
                    8d:46:dc:90:a2:d7:18:22:e2:b0:ce:8e:d4:75:ac:
                    ca:9a:2a:5d:33:67:93:05:1a:22:34:9e:d1:db:9e:
                    3e:27:20:2c:0e:0b:f9:5d:36:70:42:af:ae:0c:4e:
                    f3:73:cd:da:76:1e:95:33:0a:d1:4f:18:56:26:fa:
                    5c:ae:3a:a1:28:2b:ee:88:e5:47:14:a1:db:8c:98:
                    26:cf:bd:e6:cd:b5:f5:b6:d7:25:81:f4:55:22:e6:
                    49:4c:39:73:d3:56:08:f9:59:ca:23:9c:b6:90:8f:
                    68:b9:58:1f:46:a9:b7:0a:23:8e:0c:37:fe:3d:b4:
                    70:7e:d4:e0:02:41:f4:6c:10:68:ff:6d:74:1a:41:
                    3e:64:00:7c:a2:e2:e1:ab:9c:be:5c:0d:75:19:36:
                    da:ce:67:16:cd:5f:25:a7:e9:c4:f7:1a:3a:c2:7a:
                    3e:80:a6:19:a1:47:f7:75:87:e3:77:8d:b2:86:28:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F6:E6:A1:9C:87:F7:B8:E6:77:76:CE:CF:9B:9D:73:BA:F2:81:68
            X509v3 Authority Key Identifier:
                keyid:4C:3C:8E:91:B1:D1:C2:8D:4F:E8:2E:67:16:57:15:50:3E:9C:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/4C3C8E91B1D1C28D4FE82E67165715503E9CA786.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e3:a2:a8:b7:1a:04:6f:75:bd:7c:6a:ae:da:cc:4c:15:0c:
         57:c4:ac:d4:f1:4f:4e:26:9e:ce:64:36:79:44:df:ac:52:57:
         63:f8:e7:de:91:d5:4a:80:90:f7:57:a9:80:39:56:cf:04:08:
         4d:a5:90:2e:c4:67:df:73:56:05:56:93:cd:ab:f7:34:29:37:
         e7:fe:32:0d:9b:2a:a4:68:51:7d:79:a3:6a:45:0f:51:51:1e:
         89:10:c1:3c:5c:67:83:11:36:c0:f7:06:7b:e8:ad:41:57:df:
         2c:85:3a:70:4a:ec:57:00:ae:1e:17:a7:bd:9e:06:08:b2:67:
         21:2b:4c:8a:6c:9d:66:90:de:1e:ee:79:a0:29:5c:dd:ba:81:
         0f:2d:26:3b:3f:19:eb:3b:f6:f3:1f:51:04:2d:44:02:2a:ac:
         37:5e:aa:66:cd:c4:c6:6c:23:ce:09:a7:c7:95:02:7c:14:f7:
         68:04:8b:b9:7d:ee:f5:4a:e9:ba:51:dc:07:ac:80:2d:66:88:
         51:ea:6b:2f:17:02:87:71:c2:41:49:8a:ea:91:20:d7:cb:b2:
         cc:99:8e:d5:e8:45:3d:91:78:0c:a4:11:c4:7f:87:dd:5d:46:
         f9:44:58:f1:3c:c5:1c:33:4a:df:94:70:97:8b:9c:2b:ee:7a:
         24:cd:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:13:48 2026 by rpki-client