Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
File:                     2CE7EAA613A389D3132F70754E25E343490494C5.mft (raw, json)
Hash identifier:          AHqmGS0o63g+q/EduyNrn2aX9JiUe2XAdi1+huo19n4=
Subject key identifier:   74:58:4C:8E:84:A1:3E:16:AA:F2:B0:AF:5F:E4:6C:FC:BD:BC:06:C9
Authority key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
Certificate issuer:       /CN=2CE7EAA613A389D3132F70754E25E343490494C5
Certificate serial:       79134E2B2E46036B6C2562A88DFE2DA661A993C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
Manifest number:          023D
Signing time:             Wed 08 Jul 2026 13:03:55 +0000
Manifest this update:     Wed 08 Jul 2026 12:58:55 +0000
Manifest next update:     Thu 09 Jul 2026 15:54:55 +0000
Files and hashes:         1: 2CE7EAA613A389D3132F70754E25E343490494C5.crl (hash: 0LIvDKebJLq8mZ9qC3v+O5vx1EXZY6HlsHPRhaMxFsU=)
                          2: 3137372e3132392e3234322e302f32332d3234203d3e20323730383838.roa (hash: Aogk0Afr4CJHFz1pvXum97uZXo8VBQCU3UZ/twGaAEk=)
                          3: 323830343a373266633a383030303a3a2f33332d3438203d3e20323730383838.roa (hash: Q7dk039NhQaH3r92k5x9XvPvWrBiic04N59LhB21U7w=)
                          4: 323830343a373266633a3a2f33332d3438203d3e20323730383838.roa (hash: Mk6+10CfD9oBPr0Hy+amkiYGkrjeZxGrIpUyCyeMgGM=)
                          5: 3137372e3132392e3234302e302f32332d3234203d3e20323730383838.roa (hash: jifbVP7E++GQftyQ2b2snR16/2GCVVw24W7RFCWkb+s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:13:4e:2b:2e:46:03:6b:6c:25:62:a8:8d:fe:2d:a6:61:a9:93:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE7EAA613A389D3132F70754E25E343490494C5
        Validity
            Not Before: Jul  8 12:58:55 2026 GMT
            Not After : Jul  9 15:54:55 2026 GMT
        Subject: CN=74584C8E84A13E16AAF2B0AF5FE46CFCBDBC06C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:3a:90:cb:2a:b1:e3:f3:7d:e1:42:b6:22:
                    c8:b1:f9:dc:9f:aa:8f:16:d3:44:7f:c9:28:c8:f4:
                    20:48:c6:d3:51:57:2d:b9:4e:1d:66:40:8d:15:89:
                    a5:7c:a7:65:d8:31:02:3e:92:fb:26:22:ff:7a:16:
                    46:fa:d0:92:d8:be:9c:37:a8:f4:8b:04:d1:cd:0d:
                    82:fe:08:fa:4e:7f:fa:ec:ab:10:dd:ee:69:dc:f3:
                    08:a5:0a:3e:30:47:b4:ac:18:67:43:5a:3e:17:0b:
                    2c:a8:e1:22:c1:55:3b:da:b2:b0:14:0d:94:f2:78:
                    c7:f5:24:27:73:f8:95:f5:5a:76:00:b3:c5:a8:da:
                    9d:6e:3c:45:f4:1b:ef:25:f0:5c:99:14:a0:1c:38:
                    18:c8:9d:cf:a3:3e:37:19:47:e1:bd:10:f2:1a:33:
                    1b:bb:b3:14:74:cd:b7:f8:af:a3:23:31:50:aa:af:
                    56:54:2c:4c:e3:5e:a4:53:95:aa:0f:6a:fc:38:fe:
                    82:86:a2:7c:07:b3:4a:15:fa:ca:11:96:2d:ca:88:
                    a6:44:9f:5e:80:b9:64:59:65:52:80:39:73:01:9c:
                    65:72:c8:74:85:77:ea:53:92:3b:16:98:cc:69:66:
                    d7:de:70:1a:5b:00:4c:e7:b5:64:db:3c:38:23:04:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:4C:8E:84:A1:3E:16:AA:F2:B0:AF:5F:E4:6C:FC:BD:BC:06:C9
            X509v3 Authority Key Identifier:
                keyid:2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:56:e9:aa:d2:a9:44:fd:ed:f5:59:c9:b9:03:82:1e:37:7b:
         24:22:8a:c4:c1:37:84:da:4c:27:ad:bd:32:31:ac:38:76:96:
         00:1e:b6:d3:ce:90:f9:99:f6:7e:ea:1a:04:69:4e:65:3d:05:
         d6:67:0e:2c:d1:68:fd:50:20:ae:2c:44:60:89:db:2e:67:ea:
         25:22:db:2f:00:34:72:d5:cc:e8:54:d8:8c:4c:94:52:36:b1:
         d0:95:48:ca:1b:7e:27:5d:c6:5c:bd:46:f0:bb:fc:b0:f3:d9:
         63:01:52:ca:59:99:cd:ce:61:c7:64:30:88:7d:c8:ee:03:20:
         36:64:6f:89:f3:72:95:0c:41:3e:ca:02:a1:fa:36:c3:08:f8:
         21:fc:10:64:fd:c8:12:5f:5a:49:44:62:42:7f:e7:e9:97:3d:
         7e:dd:d0:a3:3c:d6:dc:59:36:76:bd:85:e8:36:90:2d:2e:8c:
         8a:c7:2b:24:61:71:59:6f:31:5a:23:c7:bd:3f:06:9d:0b:4a:
         9b:06:39:6f:ab:07:11:2f:0f:8f:e8:06:4d:22:41:aa:0d:1a:
         eb:ec:c3:47:25:61:e2:1a:79:83:4f:80:fb:c5:b5:95:74:16:
         7c:60:1e:e5:b1:1d:13:4b:9a:85:04:f6:41:72:ad:3d:81:3b:
         40:9d:cd:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeRNOKy5GA2tsJWKojf4tpmGpk8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNFN0VBQTYxM0EzODlEMzEzMkY3MDc1NEUyNUUzNDM0
OTA0OTRDNTAeFw0yNjA3MDgxMjU4NTVaFw0yNjA3MDkxNTU0NTVaMDMxMTAvBgNV
BAMTKDc0NTg0QzhFODRBMTNFMTZBQUYyQjBBRjVGRTQ2Q0ZDQkRCQzA2QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOzqQyyqx4/N94UK2Isix+dyf
qo8W00R/ySjI9CBIxtNRVy25Th1mQI0ViaV8p2XYMQI+kvsmIv96Fkb60JLYvpw3
qPSLBNHNDYL+CPpOf/rsqxDd7mnc8wilCj4wR7SsGGdDWj4XCyyo4SLBVTvasrAU
DZTyeMf1JCdz+JX1WnYAs8Wo2p1uPEX0G+8l8FyZFKAcOBjInc+jPjcZR+G9EPIa
Mxu7sxR0zbf4r6MjMVCqr1ZULEzjXqRTlaoPavw4/oKGonwHs0oV+soRli3KiKZE
n16AuWRZZVKAOXMBnGVyyHSFd+pTkjsWmMxpZtfecBpbAEzntWTbPDgjBJ+FAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdFhMjoShPhaq8rCvX+Rs/L28BskwHwYDVR0j
BBgwFoAULOfqphOjidMTL3B1TiXjQ0kElMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZmaEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3
ZlQvMC8yQ0U3RUFBNjEzQTM4OUQzMTMyRjcwNzU0RTI1RTM0MzQ5MDQ5NEM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRTdFQUE2MTNBMzg5RDMx
MzJGNzA3NTRFMjVFMzQzNDkwNDk0QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3ZmaEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3ZlQvMC8y
Q0U3RUFBNjEzQTM4OUQzMTMyRjcwNzU0RTI1RTM0MzQ5MDQ5NEM1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAElbpqtKpRP3t9VnJuQOCHjd7JCKKxME3hNpMJ629MjGsOHaWAB62086Q+Zn2
fuoaBGlOZT0F1mcOLNFo/VAgrixEYInbLmfqJSLbLwA0ctXM6FTYjEyUUjax0JVI
yht+J13GXL1G8Lv8sPPZYwFSylmZzc5hx2QwiH3I7gMgNmRvifNylQxBPsoCofo2
wwj4IfwQZP3IEl9aSURiQn/n6Zc9ft3QozzW3Fk2dr2F6DaQLS6MiscrJGFxWW8x
WiPHvT8GnQtKmwY5b6sHES8Pj+gGTSJBqg0a6+zDRyVh4hp5g0+A+8W1lXQWfGAe
5bEdE0uahQT2QXKtPYE7QJ3Nbg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:23:46 2026 by rpki-client