Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
File:                     AFA74B8940D555F399B41099771795949DA233E0.mft (raw, json)
Hash identifier:          Q6bHM0qXiQmU5NfgVq9QudulYXnr9v4K3rctpQ25R0I=
Subject key identifier:   1A:29:04:48:C1:94:B9:A8:38:6A:4B:5D:5A:3F:23:FB:ED:D0:8C:E1
Authority key identifier: AF:A7:4B:89:40:D5:55:F3:99:B4:10:99:77:17:95:94:9D:A2:33:E0
Certificate issuer:       /CN=AFA74B8940D555F399B41099771795949DA233E0
Certificate serial:       4A236265860017845E346AD7690A4D4427AB4BF9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
Manifest number:          09
Signing time:             Sat 22 Aug 2026 22:58:53 +0000
Manifest this update:     Sat 22 Aug 2026 22:53:53 +0000
Manifest next update:     Mon 24 Aug 2026 01:51:53 +0000
Files and hashes:         1: 3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa (hash: rOQXkNqOxOsFwA5H/SxDz6/MPneGG0Cd7Z9sz5I5wT4=)
                          2: 323830343a313665633a3a2f33322d3438203d3e20323633313038.roa (hash: R/muZr5DmfLNNYdD+6yuxTjCheLLLH587vZflqyYdvY=)
                          3: AFA74B8940D555F399B41099771795949DA233E0.crl (hash: v7qwxCZMClwbtFKGbL/PVCpx8SasPRtYvW+/jsykHEU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.crl
                          rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:62:65:86:00:17:84:5e:34:6a:d7:69:0a:4d:44:27:ab:4b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA74B8940D555F399B41099771795949DA233E0
        Validity
            Not Before: Aug 22 22:53:53 2026 GMT
            Not After : Aug 24 01:51:53 2026 GMT
        Subject: CN=1A290448C194B9A8386A4B5D5A3F23FBEDD08CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:36:5f:dd:dd:cc:35:50:aa:c9:17:7f:b6:
                    2b:a2:bf:14:98:ad:d4:27:50:e3:ac:f8:32:12:c1:
                    06:1d:01:22:4d:ac:24:d0:be:fb:fb:3c:66:2b:f3:
                    01:28:c5:37:bc:e6:0b:25:45:5b:6a:e5:78:6c:d4:
                    fa:81:3e:51:8b:f9:be:f0:d9:9b:2e:5d:60:74:1d:
                    29:25:44:d9:a1:75:50:a1:54:5a:28:dc:14:36:b1:
                    44:89:fc:6e:b3:d5:cd:2a:4e:94:6d:e6:94:ee:8f:
                    1c:fd:74:cf:9f:b8:7d:fa:d4:6a:69:4e:ff:c0:20:
                    65:7b:9d:a9:43:4f:71:93:8f:38:8b:31:6d:de:5a:
                    a7:19:f2:5c:04:29:7a:18:92:f1:0f:87:11:76:83:
                    4b:71:cb:dc:e2:e6:69:2f:09:f6:5a:f7:00:fe:64:
                    ce:84:38:27:a9:79:2a:ee:f3:d8:e0:d2:99:35:a3:
                    f0:77:56:85:7d:1e:84:60:3e:d9:c2:f2:49:b4:f8:
                    be:c4:7a:8d:b9:07:77:3b:e4:35:dc:21:74:e4:74:
                    1d:62:78:51:81:10:35:ec:26:3e:24:8d:24:53:ee:
                    9b:ad:ef:9e:b0:13:d4:a3:9a:09:59:4a:fe:da:6d:
                    e2:26:a8:de:e0:fb:96:5b:8f:20:d2:8a:75:17:a6:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:29:04:48:C1:94:B9:A8:38:6A:4B:5D:5A:3F:23:FB:ED:D0:8C:E1
            X509v3 Authority Key Identifier:
                keyid:AF:A7:4B:89:40:D5:55:F3:99:B4:10:99:77:17:95:94:9D:A2:33:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:91:4f:99:60:06:04:14:d0:ca:a5:5c:a1:bd:8f:8b:94:
         65:82:c9:9b:c1:d7:11:19:22:84:2b:b6:b9:04:f5:13:16:05:
         89:0a:7b:ce:17:6f:46:81:c0:eb:de:a2:8e:8a:be:c4:3a:ef:
         77:f7:3d:f0:ac:f9:bd:cd:85:04:40:c3:b0:39:03:cd:3b:f7:
         4e:18:08:2d:a6:a9:03:82:d0:ad:11:4d:2e:76:ae:96:a9:b2:
         3e:fa:d4:2a:6e:49:b3:7f:28:4f:87:6c:af:88:78:5a:74:ef:
         1c:7b:0c:97:e5:98:d7:e6:ea:d9:8d:e1:a2:cb:3e:dc:64:7c:
         bf:d4:99:2b:7e:60:5c:a6:07:b4:40:13:62:78:46:da:58:1a:
         60:43:8a:9a:cc:77:e3:12:5f:66:f6:df:cf:cd:06:4d:ed:ca:
         22:d0:33:8f:67:cc:ee:31:e1:06:9c:f0:b4:27:ee:06:4a:59:
         b7:9c:f8:f4:fe:b9:07:dd:5d:7c:5c:c0:fa:90:bf:87:6b:df:
         45:53:66:3c:9b:03:91:0d:9a:0b:d7:4f:d4:6e:b1:72:53:ca:
         74:f3:38:bf:41:a7:75:1a:af:a5:58:20:aa:df:91:7d:90:b5:
         49:d6:99:d1:87:21:a7:39:67:f1:b6:fe:84:2d:2d:11:dd:04:
         c4:86:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:23:15 2026 by rpki-client