Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
File:                     D79C7E4BAE4953730FE72125E941901AFC590C0B.mft (raw, json)
Hash identifier:          VeZXAe21weCA9pgnk/uaHI8ZEtwEzdwI/45gPjKD7gs=
Subject key identifier:   FA:8C:58:2E:45:13:0F:D0:71:8C:41:DE:4B:93:1A:97:E9:5F:A9:E2
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       2376411715F06BFC9F1DDAD24810DB8913341CFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
Manifest number:          0644
Signing time:             Sun 24 May 2026 11:57:39 +0000
Manifest this update:     Sun 24 May 2026 11:52:39 +0000
Manifest next update:     Mon 25 May 2026 15:33:39 +0000
Files and hashes:         1: 3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa (hash: pF+weIwvbdKH2egybjx9gMDWvq5qm8hqd5aUuZAoLG4=)
                          2: 3230302e3233332e36342e302f32302d3234203d3e203131393231.roa (hash: t50qmUtu9eugrC+Bni41UcD6HNmvVR49VEU89hCguD8=)
                          3: 3230312e34392e302e302f31382d3234203d3e203131393231.roa (hash: OYw9TE9P2Xzq6gx4RWvv+5xkQETMOxnNu6EHS/7UJ3U=)
                          4: D79C7E4BAE4953730FE72125E941901AFC590C0B.crl (hash: 4mFaEkahw5zip4q+7AmGjoPXlB950EkyCh3CyDjgB/A=)
                          5: 323830343a313437303a3a2f33322d3332203d3e203131393231.roa (hash: ygWelevzW60oB3x3sSNDcmSnoTT6bZFZ8ruMbMZNzSQ=)
                          6: 3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa (hash: uqg2BolarSu0TvZag6p/l/i5CQURt0FqyeEccQ0EIpc=)
                          7: 3230302e3139342e39362e302f32312d3234203d3e203131393231.roa (hash: y6idSmgB7qO7p/VFTtczTOkgs66Jis8Tq1tb8LC6PAI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:76:41:17:15:f0:6b:fc:9f:1d:da:d2:48:10:db:89:13:34:1c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: May 24 11:52:39 2026 GMT
            Not After : May 25 15:33:39 2026 GMT
        Subject: CN=FA8C582E45130FD0718C41DE4B931A97E95FA9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:79:a8:33:e1:37:d4:04:3a:c3:27:12:4f:
                    9d:5b:dd:58:c8:71:43:c9:6c:58:42:8e:fc:2d:0c:
                    89:cd:ff:6c:31:b8:f4:be:7b:fa:f1:5f:b5:c8:8e:
                    07:d0:3e:20:b3:77:cd:5a:bc:6d:c4:91:93:92:fa:
                    0a:13:7c:fd:c4:64:6a:35:55:99:e8:6b:bd:69:5f:
                    78:32:92:f6:c2:62:f9:32:a3:b0:fe:ed:34:a7:1e:
                    13:46:e0:ca:84:f6:5a:11:c3:16:94:00:cd:69:2a:
                    2a:a2:dd:32:27:26:0a:4a:05:84:97:74:61:db:ef:
                    7e:2e:f0:63:e9:b6:25:da:96:ae:04:d3:c5:a3:d4:
                    34:ae:41:ba:b1:6d:b4:c0:9b:bf:cd:83:43:36:4a:
                    6f:60:57:b1:67:d5:0d:36:b9:f9:cf:4f:97:a2:1d:
                    c5:9f:97:ac:88:cb:b0:12:86:12:71:e0:cb:45:83:
                    7b:8b:51:3f:8e:b3:9f:1e:ec:b5:2e:8e:da:a7:21:
                    13:d7:f0:f6:41:de:a4:3f:71:4e:72:d8:8f:4a:49:
                    fd:7c:26:1a:c0:49:ea:74:98:02:17:b1:8e:ef:38:
                    07:3d:2b:18:d0:98:1a:91:1a:da:84:f4:b6:ff:98:
                    91:89:d1:99:a0:65:cf:ab:ed:2d:d9:f5:14:ee:36:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8C:58:2E:45:13:0F:D0:71:8C:41:DE:4B:93:1A:97:E9:5F:A9:E2
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b6:ad:27:af:74:18:52:8e:db:7d:21:47:75:1f:53:2d:f4:
         64:d3:e1:c0:e7:f8:db:89:59:8c:05:ab:c3:8a:1c:6b:da:f4:
         75:05:d0:39:a3:1e:f7:6f:ef:14:ad:e1:bc:f5:43:14:54:3c:
         06:3b:83:6b:a9:e8:91:12:f3:5c:b8:a5:75:89:70:fd:2c:74:
         e7:ac:60:50:c8:85:85:5c:84:61:22:33:b1:ea:24:b2:a8:f7:
         e6:78:3e:8a:71:b4:af:ac:2a:fb:8e:fa:5f:da:8f:0f:48:30:
         18:e2:3a:aa:be:19:91:3c:69:7d:24:e8:9e:2e:23:94:f2:72:
         66:2a:62:ed:00:d5:b6:31:cb:96:18:0e:3d:ab:ee:c5:0c:78:
         c5:e2:1d:f4:fd:ed:fa:c5:0a:78:cf:84:30:25:dd:0f:6e:c3:
         19:48:17:79:ce:83:e5:e3:ad:3b:9e:70:00:5b:1a:10:92:c4:
         31:c4:10:6d:ce:a2:e4:8b:25:3c:1c:a9:16:82:af:02:a0:d6:
         e5:5b:81:51:a1:3c:11:88:e8:6e:95:0a:5e:e9:1c:72:84:68:
         03:16:73:dd:cf:48:60:2c:96:c8:0f:e1:44:0d:6a:04:63:a6:
         81:f0:10:1a:aa:8e:69:2e:c3:80:9e:5d:28:97:ee:b4:44:3b:
         18:85:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:56:24 2026 by rpki-client