Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft
File:                     33B6EA309A04207739CA6004EC33B135FCE12550.mft (raw, json)
Hash identifier:          l+r4uRbDgaw5JBsu9TvEdMER+gudYJkI2/sKYXfiwkE=
Subject key identifier:   0F:45:61:33:E3:F6:17:14:06:DB:8E:1E:9A:8C:04:94:6C:D8:DA:79
Authority key identifier: 33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50
Certificate issuer:       /CN=33B6EA309A04207739CA6004EC33B135FCE12550
Certificate serial:       6E1FA19D760268D96238C4164EF4736963494C4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft
Manifest number:          01F1
Signing time:             Wed 08 Jul 2026 11:27:24 +0000
Manifest this update:     Wed 08 Jul 2026 11:22:24 +0000
Manifest next update:     Thu 09 Jul 2026 14:29:24 +0000
Files and hashes:         1: 3230302e3136302e33322e302f32302d3234203d3e203232313333.roa (hash: rrGfTynLx0yOrx/Glq2DTK/E007Q+xdanRUjvfCwcjo=)
                          2: 33B6EA309A04207739CA6004EC33B135FCE12550.crl (hash: SQQ1nNsoPzjRLuxmxBwPIjwYseqs1gLeK8tsBNShcEI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl
                          rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1f:a1:9d:76:02:68:d9:62:38:c4:16:4e:f4:73:69:63:49:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33B6EA309A04207739CA6004EC33B135FCE12550
        Validity
            Not Before: Jul  8 11:22:24 2026 GMT
            Not After : Jul  9 14:29:24 2026 GMT
        Subject: CN=0F456133E3F6171406DB8E1E9A8C04946CD8DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:1e:0d:68:90:2b:8c:06:bc:4d:65:41:ab:
                    89:73:50:b9:76:5a:26:36:ec:5f:ae:2c:bb:93:69:
                    02:be:a5:41:64:97:ee:a5:14:e2:8e:37:1d:88:ad:
                    52:48:ff:48:61:37:ad:49:c1:a1:4b:5d:54:4d:24:
                    d7:38:40:fd:c1:2e:60:23:7a:09:ae:ed:c5:55:d3:
                    d8:2b:1b:31:3d:c0:b9:ea:3a:ac:78:ab:de:8b:0a:
                    b5:ae:28:70:73:6e:c5:53:19:91:21:b5:af:de:ba:
                    26:f5:47:4f:68:7b:72:8b:71:96:ba:32:f4:f2:c3:
                    5e:71:64:b7:a1:8a:e4:20:c0:1e:4f:22:fe:33:e6:
                    41:90:b2:95:ff:88:01:0d:92:10:ca:95:06:0d:1e:
                    0b:40:f2:98:6f:a6:ee:62:0e:58:5b:ae:d5:f3:f0:
                    79:17:0b:d3:25:e7:23:c7:fc:e7:47:7a:73:65:62:
                    51:77:16:71:cb:bd:a3:6d:d7:c9:55:ee:49:e5:7c:
                    cb:aa:43:59:e6:6a:ed:7c:51:b9:0c:82:9a:6c:01:
                    60:06:c2:07:c3:ba:88:3e:4e:bc:a3:27:bb:0c:1e:
                    eb:5b:ca:8f:5b:b9:56:29:8c:5d:fe:aa:04:60:86:
                    56:6c:da:5c:53:c2:51:a3:f9:bb:fe:92:50:01:89:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:61:33:E3:F6:17:14:06:DB:8E:1E:9A:8C:04:94:6C:D8:DA:79
            X509v3 Authority Key Identifier:
                keyid:33:B6:EA:30:9A:04:20:77:39:CA:60:04:EC:33:B1:35:FC:E1:25:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33B6EA309A04207739CA6004EC33B135FCE12550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFyBT9nQfWrYnYBdCJkCUCrhgzWDWDSAoH5ge1WF91x/0/33B6EA309A04207739CA6004EC33B135FCE12550.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8b:71:e5:e2:66:94:b5:4c:28:bc:80:ca:0b:da:5b:bb:6c:
         49:0a:55:a7:21:91:9f:35:39:a2:24:55:2c:39:4a:af:e1:6b:
         af:13:d6:b6:17:33:3b:ae:69:f8:3a:04:c6:4e:dc:0f:cb:c9:
         bb:4d:c1:8e:aa:ac:4c:45:27:58:41:cf:1b:11:67:d3:c4:aa:
         3b:4f:57:46:92:bf:b3:68:ad:11:4a:f3:91:7b:40:6a:eb:3d:
         e3:af:cd:65:65:f7:9a:d6:63:6c:23:63:c0:93:76:46:f2:4d:
         a2:93:93:2f:b8:34:c3:09:f9:3a:a9:c1:6e:d6:d4:94:60:cc:
         bd:4f:1d:f2:64:23:be:09:2d:5a:54:91:73:d7:56:1b:77:90:
         12:c4:99:86:6d:b3:02:d0:e3:2d:cb:ef:2d:d0:0e:89:19:66:
         96:ed:14:0c:36:c1:07:9b:6f:99:9b:1d:a1:03:0d:cf:e8:73:
         74:87:22:6f:8a:fd:ab:32:94:62:03:20:3c:e4:50:76:08:40:
         de:ee:45:8d:2f:27:b8:2d:3e:f5:90:b1:c1:37:47:e0:33:ff:
         9c:43:62:cf:cd:62:46:75:2e:08:bc:25:6b:c7:03:39:d0:c9:
         11:4c:29:0e:91:8d:b3:e0:72:05:d4:ca:fa:04:8b:58:4e:c6:
         21:a3:38:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbh+hnXYCaNliOMQWTvRzaWNJTE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNCNkVBMzA5QTA0MjA3NzM5Q0E2MDA0RUMzM0IxMzVG
Q0UxMjU1MDAeFw0yNjA3MDgxMTIyMjRaFw0yNjA3MDkxNDI5MjRaMDMxMTAvBgNV
BAMTKDBGNDU2MTMzRTNGNjE3MTQwNkRCOEUxRTlBOEMwNDk0NkNEOERBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3th4NaJArjAa8TWVBq4lzULl2
WiY27F+uLLuTaQK+pUFkl+6lFOKONx2IrVJI/0hhN61JwaFLXVRNJNc4QP3BLmAj
egmu7cVV09grGzE9wLnqOqx4q96LCrWuKHBzbsVTGZEhta/euib1R09oe3KLcZa6
MvTyw15xZLehiuQgwB5PIv4z5kGQspX/iAENkhDKlQYNHgtA8phvpu5iDlhbrtXz
8HkXC9Ml5yPH/OdHenNlYlF3FnHLvaNt18lV7knlfMuqQ1nmau18UbkMgppsAWAG
wgfDuog+TryjJ7sMHutbyo9buVYpjF3+qgRghlZs2lxTwlGj+bv+klABiZfVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUD0VhM+P2FxQG244emowElGzY2nkwHwYDVR0j
BBgwFoAUM7bqMJoEIHc5ymAE7DOxNfzhJVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5
MXgvMC8zM0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzQjZFQTMwOUEwNDIwNzcz
OUNBNjAwNEVDMzNCMTM1RkNFMTI1NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEVGeUJUOW5RZldyWW5ZQmRDSmtDVUNyaGd6V0RXRFNBb0g1Z2UxV0Y5MXgvMC8z
M0I2RUEzMDlBMDQyMDc3MzlDQTYwMDRFQzMzQjEzNUZDRTEyNTUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv4tx5eJmlLVMKLyAygvaW7tsSQpVpyGRnzU5oiRVLDlKr+FrrxPWthczO65p
+DoExk7cD8vJu03BjqqsTEUnWEHPGxFn08SqO09XRpK/s2itEUrzkXtAaus946/N
ZWX3mtZjbCNjwJN2RvJNopOTL7g0wwn5OqnBbtbUlGDMvU8d8mQjvgktWlSRc9dW
G3eQEsSZhm2zAtDjLcvvLdAOiRlmlu0UDDbBB5tvmZsdoQMNz+hzdIcib4r9qzKU
YgMgPORQdghA3u5FjS8nuC0+9ZCxwTdH4DP/nENiz81iRnUuCLwla8cDOdDJEUwp
DpGNs+ByBdTK+gSLWE7GIaM4QA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:38 2026 by rpki-client