Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
File:                     D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft (raw, json)
Hash identifier:          iCbAtKoC6fH5SvngXPSLrEtOjybMj6Kax083pnmEhj0=
Subject key identifier:   EC:28:2D:9F:D1:41:AF:2A:D6:4A:83:85:EA:73:92:22:1D:1D:80:EE
Authority key identifier: D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00
Certificate issuer:       /CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
Certificate serial:       352BC172424CAA3A1DCEB4DF289B7933E9861516
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
Manifest number:          17
Signing time:             Tue 28 Jul 2026 17:46:35 +0000
Manifest this update:     Tue 28 Jul 2026 17:41:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:05:35 +0000
Files and hashes:         1: D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl (hash: gSabRfSQI3q7mbD7YHY4m+Py5X3AfzIuRKwhGWHPCp8=)
                          2: 3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa (hash: uHnjdQrQPrfAXqaQE1CfLJcDudQ8gZIF7o8xe9UB3Wc=)
                          3: 323830343a316135303a3a2f33322d3334203d3e203631383533.roa (hash: o2cRHB8VLaulYEsD7EXAfKSLpkE/joxRBXT/iIJXwu4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl
                          rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 20:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2b:c1:72:42:4c:aa:3a:1d:ce:b4:df:28:9b:79:33:e9:86:15:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
        Validity
            Not Before: Jul 28 17:41:35 2026 GMT
            Not After : Jul 29 20:05:35 2026 GMT
        Subject: CN=EC282D9FD141AF2AD64A8385EA7392221D1D80EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:71:9e:7e:f7:83:cb:73:eb:c7:26:ca:af:
                    31:89:98:c1:21:72:65:21:68:50:7b:1d:b7:47:16:
                    f2:eb:b2:67:3d:92:6e:8f:45:50:7c:80:fc:75:35:
                    c4:8b:f9:ec:5d:40:50:86:f8:0c:5c:9a:79:28:ce:
                    d7:d2:99:c2:8d:8d:e0:f2:45:97:b0:2e:0c:ff:76:
                    a8:50:c4:d9:57:52:39:ed:f3:5c:40:0d:82:6d:5a:
                    40:4f:7f:3c:72:5b:19:cd:58:35:2f:c0:92:f3:07:
                    fc:47:fd:97:b2:d0:58:16:82:fa:70:e8:44:f5:2e:
                    bd:d6:06:ae:c4:51:cb:20:e6:61:f2:f3:e4:fc:21:
                    b1:76:15:c9:92:89:22:af:eb:b6:c7:19:0a:92:ef:
                    32:48:77:9e:fd:c8:fb:5b:87:89:9f:66:26:de:1a:
                    49:85:84:64:53:4c:ff:30:69:91:0c:18:f0:f8:b2:
                    1f:fe:0d:7a:47:96:1e:18:f3:82:45:78:bc:03:c5:
                    bf:c5:ac:5d:68:77:8c:c7:b4:2c:f3:25:a4:f4:bd:
                    10:62:97:c8:00:d7:65:be:d1:6d:95:83:d1:6f:fa:
                    00:72:5b:57:6e:96:87:38:47:da:9c:fb:75:3c:4f:
                    8e:e9:ed:65:f6:26:a7:77:b3:ab:44:0a:01:23:49:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:28:2D:9F:D1:41:AF:2A:D6:4A:83:85:EA:73:92:22:1D:1D:80:EE
            X509v3 Authority Key Identifier:
                keyid:D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:72:87:51:a5:db:56:78:f9:88:76:02:b2:44:4a:91:0c:61:
         c3:1f:e0:2d:e4:f5:c2:0a:bb:38:31:61:76:81:a9:00:8b:9e:
         12:93:87:d4:b2:c5:e0:ec:31:a4:79:a0:56:bd:4d:e2:f6:80:
         67:91:36:b5:8a:56:e1:8a:48:55:03:51:35:d5:7d:cd:bc:27:
         bf:53:07:5b:bf:7a:8e:b3:9a:3b:b7:46:82:07:05:89:0e:d0:
         46:32:c0:5e:df:65:0d:22:58:b8:6d:48:6c:17:30:6d:75:85:
         bf:14:80:cc:92:97:ad:ea:62:e6:73:e7:0e:53:3c:e3:5e:22:
         aa:6e:18:cc:71:b0:0f:af:34:f3:d7:da:33:e1:5a:3c:6d:4d:
         ad:09:c8:b4:38:87:5b:30:69:eb:6a:e3:65:80:c1:90:e0:45:
         cb:82:b5:e8:e8:cb:7c:ce:45:16:b3:4b:e9:d7:0d:bf:ec:38:
         b8:c4:08:d1:95:dc:26:34:e9:9e:bc:50:20:15:df:82:a4:1a:
         81:fb:60:6c:1b:ef:8b:8d:af:0b:ed:71:bc:2e:6a:ca:ac:dd:
         32:a7:79:1a:3c:6c:2a:96:a6:5d:45:79:7a:76:36:6f:84:68:
         d2:97:01:ab:f3:79:7c:6e:aa:d5:ec:a7:e9:65:5e:c6:bd:c1:
         78:5b:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:26 2026 by rpki-client