Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          P0q3owM33vWUBtxhcreVdp/gui+qaPHlcCxLgPXMH8o=
Subject key identifier:   64:5D:F5:8A:1C:E9:76:D6:78:18:7F:92:CC:5E:4B:5E:D7:10:0D:71
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       39793C97B9E6D8D72BC93F900759E4D1A9951F9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          0485
Signing time:             Sun 23 Aug 2026 10:28:00 +0000
Manifest this update:     Sun 23 Aug 2026 10:23:00 +0000
Manifest next update:     Mon 24 Aug 2026 12:49:00 +0000
Files and hashes:         1: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 9NaA8Dq04c7j0pLtLEkFvCIZPUGfEE8aa950uY+eEJs=)
                          2: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: 2nczleJFPRyvFicJVGQltpFOvvykoBSvwigtbcxyl9Y=)
                          3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: qHPHRLKyxHf9mzStgECJYFOEBiHsU8EHXRbovh7MUIw=)
                          4: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wLIsioKqEUKS9TMeNf/n9LEYrLxpZbmg2+NMq5W8NRo=)
                          5: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:79:3c:97:b9:e6:d8:d7:2b:c9:3f:90:07:59:e4:d1:a9:95:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Aug 23 10:23:00 2026 GMT
            Not After : Aug 24 12:49:00 2026 GMT
        Subject: CN=645DF58A1CE976D678187F92CC5E4B5ED7100D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:38:44:27:8f:86:ee:bd:13:c4:ba:b4:58:
                    e1:85:a5:5d:62:63:d4:74:d6:e8:54:57:1b:1f:50:
                    63:b6:3f:74:1e:83:3e:c8:55:bb:27:e1:0b:1c:d9:
                    42:01:14:7e:9b:82:47:5a:8d:d7:02:51:ac:54:4b:
                    e3:45:da:19:45:3c:cd:ef:f6:1b:19:73:d6:52:e3:
                    dd:5d:a1:76:72:81:12:76:cc:e8:dd:43:c7:66:fb:
                    5f:72:e2:c5:6e:dd:86:6e:72:82:58:82:d1:4f:78:
                    90:dc:3c:67:be:95:6c:b6:d3:2a:95:e1:bd:60:3a:
                    67:15:ec:23:8d:30:98:36:b8:e9:ba:aa:cc:99:d8:
                    7f:c4:dc:a4:5f:28:0a:39:b4:32:40:cd:7c:0a:b5:
                    3f:88:cc:15:98:3b:b8:56:10:38:39:c2:a5:71:50:
                    c1:7c:72:0b:7a:98:45:b6:e1:2c:fd:f1:b0:02:cc:
                    22:75:34:13:12:b9:bd:d0:92:85:a5:d3:1f:13:8b:
                    d2:c2:76:6d:10:af:ce:05:1e:d8:9f:09:7b:a1:6a:
                    c2:ba:0d:dd:e0:6b:80:47:a1:e5:70:73:85:14:b2:
                    8d:ba:8c:de:bd:86:ad:67:2c:90:d2:c4:a0:20:c1:
                    0a:49:72:69:cf:49:e9:45:f3:b3:4d:13:0b:27:48:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5D:F5:8A:1C:E9:76:D6:78:18:7F:92:CC:5E:4B:5E:D7:10:0D:71
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:78:bc:c5:3b:d7:b7:ef:66:67:8b:c5:69:52:22:a1:76:79:
         ee:c7:39:88:ae:a5:92:e3:0f:23:77:2a:6c:dd:e5:91:d7:10:
         ab:75:e4:dd:eb:04:ca:ad:95:88:dc:24:b6:7e:09:4b:14:dc:
         74:4b:bc:c5:43:9d:22:b7:9a:6f:66:27:cb:61:0f:91:01:79:
         74:19:50:46:6f:b4:fd:13:6d:ae:05:e7:ea:aa:bf:3a:12:67:
         02:21:65:96:27:b3:d6:3b:17:a4:5a:95:20:2d:bc:bd:67:4a:
         12:53:37:ff:2e:d4:c8:af:0c:fe:41:93:ea:2a:54:9d:81:2a:
         8d:e7:10:bb:a8:62:2f:c5:a2:12:ee:5a:d1:69:8d:77:7a:2b:
         1c:6e:6d:b6:50:5c:01:e8:77:cf:12:a5:7a:c6:b7:4c:45:08:
         2a:92:d5:d6:68:6c:45:6b:6f:31:9f:7a:21:36:e2:f5:12:a8:
         94:ae:7f:6c:a7:d6:2e:fa:24:53:de:de:ed:a4:b6:1d:c0:77:
         10:b6:a1:d3:e7:4c:9b:19:1e:9f:39:92:52:50:54:c5:5f:f9:
         44:c0:81:93:25:5d:bb:7f:0f:1f:f8:98:7e:ec:55:eb:70:6b:
         ca:90:ef:84:fa:de:94:fd:d6:f3:46:24:03:55:de:3b:28:34:
         32:f3:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----