Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
File:                     59286C095D010494BBABEA22C9AEC94874E4F3C0.mft (raw, json)
Hash identifier:          2wNA9QfnTPfODYwSpPsKAxe1jBUw0j4NzWEH4zYZMtA=
Subject key identifier:   98:2D:C4:FD:67:43:A4:90:8B:C0:4F:0A:A2:05:4D:D8:F3:84:E4:E6
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       44AA3F5C40E40CCB3ADDD89EA4DF59D4A77CB4A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
Manifest number:          04CA
Signing time:             Sat 27 Jun 2026 19:10:00 +0000
Manifest this update:     Sat 27 Jun 2026 19:05:00 +0000
Manifest next update:     Sun 28 Jun 2026 19:10:00 +0000
Files and hashes:         1: 59286C095D010494BBABEA22C9AEC94874E4F3C0.crl (hash: /NT/j3kf2XvZtDOR9ylbosXcGp8azXQiqtvvZ+UQNz8=)
                          2: 323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (hash: V5u48JUHg0vRr8nG4bKSA5hNxImVT9PKalXDjhIdWPg=)
                          3: 323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (hash: uf8oyCG+GKeTE1t9Z/zv2kBG6JLLjAaiex7C01g4JEA=)
                          4: 323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (hash: Ee5KXivcsdgY6JOnUrxMI++3DbxXjTpNmNVQfJ9pX2U=)
                          5: 323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (hash: x+xwUxlQjmdjFdwRXjbdGRZiQWjWQYhBKVDEG4cOJfs=)
                          6: 323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (hash: vJOk/RO6kMGpIRYjaG3KwOaAXzUcZmNcYsdIGRcusyQ=)
                          7: 323830343a343837303a326630303a3a2f34302d3430203d3e20323637313231.roa (hash: rDS/XwFY+luUXcH7t0GiZXkeagaJAXuydQpVGJqFdZQ=)
                          8: 323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (hash: 5dHPQHEZLbyBkh2oFoWjk9SHb7xuoag4thZeui/ZE24=)
                          9: 323830343a343837303a3162303a3a2f34382d3438203d3e20323637313231.roa (hash: 7CTwJ6yhVSxfHNLn/mAOWz2MiQBNkF0Id8JVButb7zE=)
                          10: 323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (hash: CbJX+uwfbWl1q+ePfG8kkTcVCod+h4DtRjKzQrUVrBw=)
                          11: 323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (hash: C4KNNLkuA8NDr3kXTESi0EMIoWGVxUXMlmEWwPqPmJg=)
                          12: 323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (hash: k75dLDFsZMLa4b3KgnId5Z6mW2wY5/+paKUCIrTDNGI=)
                          13: 34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (hash: YwcFTn5OCBbU2Ep0Zj2uuG/MnB/lxpKw9ItwdeoPyYg=)
                          14: 323830343a343837303a3162313a3a2f34382d3438203d3e20323637313231.roa (hash: bYoDoQN0Y/cb+6PqtlCtgz2rVRlUyrvvoGpdSQgLGgo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:3f:5c:40:e4:0c:cb:3a:dd:d8:9e:a4:df:59:d4:a7:7c:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jun 27 19:05:00 2026 GMT
            Not After : Jul  4 19:10:00 2026 GMT
        Subject: CN=3082010A0282010100A8EDCA4459FE12E584E887D21B2CC053C5C5F55B8FB03AC4CBB462B99392A0E526DC83ECAE2834AE198E60EDA5395002150211B0D6760F5D32F3BFA53CDCEC20C4F47B084813233E61146D6BFF60C09E729DD46508FF45FBCE17C5DA0E8C9518C4B08B6662A5FE84B7632762D69A0CD3616E6F7FF96104989333D3DC10B7C168B9ED15C27772AEDE2EA8CBDB7055308B8B407108916144DA66E7B77F27E2742F7D080985880EE900295753F0937729094E5BCF3E7A7F9192039580F74F0D9D3E22E5B67D1C79D4FA3B9E9E07F37AAC30B6B075581562890461858D4A454FC6EEA1FED025350ECEC910666F228BBA2EEAD5EE1B7C52874FCD41372B18FEB57B710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:ca:44:59:fe:12:e5:84:e8:87:d2:1b:2c:
                    c0:53:c5:c5:f5:5b:8f:b0:3a:c4:cb:b4:62:b9:93:
                    92:a0:e5:26:dc:83:ec:ae:28:34:ae:19:8e:60:ed:
                    a5:39:50:02:15:02:11:b0:d6:76:0f:5d:32:f3:bf:
                    a5:3c:dc:ec:20:c4:f4:7b:08:48:13:23:3e:61:14:
                    6d:6b:ff:60:c0:9e:72:9d:d4:65:08:ff:45:fb:ce:
                    17:c5:da:0e:8c:95:18:c4:b0:8b:66:62:a5:fe:84:
                    b7:63:27:62:d6:9a:0c:d3:61:6e:6f:7f:f9:61:04:
                    98:93:33:d3:dc:10:b7:c1:68:b9:ed:15:c2:77:72:
                    ae:de:2e:a8:cb:db:70:55:30:8b:8b:40:71:08:91:
                    61:44:da:66:e7:b7:7f:27:e2:74:2f:7d:08:09:85:
                    88:0e:e9:00:29:57:53:f0:93:77:29:09:4e:5b:cf:
                    3e:7a:7f:91:92:03:95:80:f7:4f:0d:9d:3e:22:e5:
                    b6:7d:1c:79:d4:fa:3b:9e:9e:07:f3:7a:ac:30:b6:
                    b0:75:58:15:62:89:04:61:85:8d:4a:45:4f:c6:ee:
                    a1:fe:d0:25:35:0e:ce:c9:10:66:6f:22:8b:ba:2e:
                    ea:d5:ee:1b:7c:52:87:4f:cd:41:37:2b:18:fe:b5:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:C4:FD:67:43:A4:90:8B:C0:4F:0A:A2:05:4D:D8:F3:84:E4:E6
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:da:ea:a7:45:8c:d4:47:8b:ef:ec:0c:8d:da:18:c8:34:45:
         76:2c:5a:56:51:ab:ee:65:50:8f:46:eb:43:ba:a5:28:bc:54:
         fc:58:05:ae:b2:2f:f5:a3:e2:b7:d7:60:e7:e3:31:e8:f7:47:
         96:ad:88:bf:ec:55:65:c9:bf:d0:87:96:d8:ad:f8:29:bf:9a:
         9f:dd:69:10:c1:59:b3:90:72:4a:9e:cf:f5:50:7d:c3:4c:a6:
         23:fb:85:20:4d:15:88:02:fe:ea:87:f5:b9:53:ee:c1:32:96:
         d8:72:1c:14:cf:2d:2a:54:7f:88:83:4c:ef:46:51:10:35:c7:
         41:a6:89:be:45:e1:9b:62:c5:6f:35:cf:00:8c:0a:a9:7e:e1:
         cb:1d:79:85:95:f9:7a:76:ea:20:04:8d:18:cf:97:31:95:53:
         1d:11:cd:0f:d6:82:b4:50:49:a9:d5:7e:78:11:49:d7:e2:8c:
         e2:69:24:af:bd:b6:bf:6f:70:85:c2:df:b1:a2:47:3d:df:ef:
         dc:e2:ed:17:83:2f:d6:95:82:d0:f3:3f:6f:66:82:74:77:de:
         0f:78:41:21:d6:6a:84:d9:a6:7c:38:61:da:97:5a:30:b5:7e:
         af:31:a0:e1:71:4c:d8:fd:fd:29:4b:da:80:b8:d1:fe:62:27:
         b3:34:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:25:37 2026 by rpki-client