Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
File:                     4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json)
Hash identifier:          gXTbkyMEutS/sdmemgfFcVZzuOn2nraUoilaypX0nOY=
Subject key identifier:   30:BB:14:DF:7D:30:90:1B:6C:71:91:C5:57:58:53:6E:88:AF:03:36
Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
Certificate issuer:       /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Certificate serial:       57D4DE55C709A1C7A1C5E21510683BC07047D6C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
Manifest number:          0248
Signing time:             Sun 23 Aug 2026 08:47:59 +0000
Manifest this update:     Sun 23 Aug 2026 08:42:59 +0000
Manifest next update:     Mon 24 Aug 2026 12:17:59 +0000
Files and hashes:         1: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: UTDkpEWAgx7vnpSmlTOJdQ4lRBUJbKbknuVSZETtQB0=)
                          2: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: SxZQAE35KjoIKxtvw4hCd1ykd1xc9GMr7GBWpJeHEWE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl
                          rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d4:de:55:c7:09:a1:c7:a1:c5:e2:15:10:68:3b:c0:70:47:d6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
        Validity
            Not Before: Aug 23 08:42:59 2026 GMT
            Not After : Aug 24 12:17:59 2026 GMT
        Subject: CN=30BB14DF7D30901B6C7191C55758536E88AF0336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:c2:e5:b0:5e:7e:4a:6a:ef:1a:c0:55:f5:
                    d3:dd:3d:2e:0a:40:91:bd:40:db:72:9b:f1:1a:25:
                    24:20:5e:de:62:ea:ab:5f:87:51:80:a6:18:15:1b:
                    f6:5d:20:4f:57:9f:60:9a:ad:16:08:a2:34:4d:3c:
                    9c:a5:f4:bc:15:1e:53:a4:0b:13:b9:c1:ae:e6:62:
                    83:6a:b5:62:9d:8f:12:82:43:db:77:51:ec:eb:c8:
                    3d:96:ab:2a:63:2b:fe:70:ad:99:7f:5d:69:fb:f4:
                    f6:33:38:1a:39:ca:ad:65:bb:f9:57:c5:45:6d:ec:
                    a0:a7:18:ba:2b:a2:f0:7d:3c:2b:a1:f5:46:d6:a4:
                    3f:61:47:05:9e:f2:a3:c2:36:c9:3c:41:b7:c3:c2:
                    a3:95:33:8a:d3:78:85:7e:9c:e8:0e:fd:ce:1b:81:
                    e3:91:6d:c6:1f:c4:53:7a:3d:5c:fc:ec:db:e0:02:
                    0c:7a:34:8d:bf:f7:58:79:b9:56:1d:1d:21:27:37:
                    c3:c9:1b:2d:14:1c:4b:36:73:a9:a0:79:a8:e4:2f:
                    55:bc:37:0f:22:08:f0:d2:35:98:c0:5e:b2:7c:bb:
                    b5:63:17:ad:eb:cf:1a:f4:ae:e4:f7:8e:6f:24:d4:
                    25:87:33:23:e1:67:0f:af:60:df:ca:33:66:66:e7:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BB:14:DF:7D:30:90:1B:6C:71:91:C5:57:58:53:6E:88:AF:03:36
            X509v3 Authority Key Identifier:
                keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:0c:2e:66:e3:ea:d5:ab:06:b1:46:43:81:f2:5e:b2:27:
         43:76:b4:d1:0f:9d:28:cf:8a:8f:9a:7e:e5:74:72:af:78:1d:
         a7:84:c8:54:27:71:fa:5b:e2:52:f5:cd:6c:c0:e2:e6:f3:f4:
         a1:a4:da:b7:cb:d1:7c:41:ca:21:e2:1b:bf:4b:27:1e:a6:95:
         ed:d4:a4:bf:0d:ac:bc:0e:09:22:7f:4d:d2:5d:97:cf:ea:e5:
         ac:a3:84:7b:12:be:90:d2:a6:0b:68:11:9f:19:05:18:55:e5:
         e9:56:41:c5:90:79:16:43:99:0f:7b:87:5d:2c:7b:c0:dd:98:
         dd:a4:e6:18:7c:03:d1:2e:48:98:4e:c0:3f:e7:2a:e3:de:23:
         4f:f1:52:57:04:e5:a4:94:e1:c2:8a:b5:71:b6:7a:98:70:e1:
         13:66:f5:a1:db:ee:10:83:c8:3d:50:7c:be:55:7e:7d:2b:5c:
         39:44:54:18:eb:fa:a4:83:12:b7:c8:67:d5:44:b8:10:e6:41:
         42:2e:60:4a:10:e2:4f:18:9a:40:97:e1:ba:fb:38:3c:b9:61:
         f3:9c:a9:55:ec:65:99:2b:83:ce:46:14:c1:d5:aa:e8:36:cc:
         8d:7a:f9:1b:5d:48:d5:e2:79:ab:db:68:9e:e4:c3:7f:e1:c3:
         7f:da:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----