Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
File:                     4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json)
Hash identifier:          tUQGrAckpJctPyr0cLatLYA6w8Nh7B/282BHwQSRup8=
Subject key identifier:   18:40:7E:C7:78:25:A9:96:A1:D2:57:9E:BC:93:E9:58:49:5E:4F:B4
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       153EF8072307707D82F468F75C5597C506EC940C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
Manifest number:          0390
Signing time:             Sat 31 Oct 2026 20:28:47 +0000
Manifest this update:     Sat 31 Oct 2026 20:23:47 +0000
Manifest next update:     Sun 01 Nov 2026 23:11:47 +0000
Files and hashes:         1: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: xKI47gEx51i6WJJdUvW1iyZiTIWaDO2k5waBwdCnnNY=)
                          2: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: wxlFQpFLvg2/ZEMDR8tl45ZeYr3xQPxKaCVcTafVWKM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 23:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3e:f8:07:23:07:70:7d:82:f4:68:f7:5c:55:97:c5:06:ec:94:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Oct 31 20:23:47 2026 GMT
            Not After : Nov  1 23:11:47 2026 GMT
        Subject: CN=18407EC77825A996A1D2579EBC93E958495E4FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:9d:a4:cc:c5:de:ec:4c:46:d1:c5:bd:56:
                    2a:c1:10:65:85:9b:31:72:a2:05:ec:30:66:37:a5:
                    84:ea:b4:a6:3b:28:88:7e:ea:60:dd:7c:24:3f:0e:
                    62:c3:cd:c0:90:f6:ab:c8:1a:ef:83:8c:b9:96:a0:
                    e5:db:fe:e0:03:8e:35:a5:d3:40:85:f1:c5:fc:15:
                    93:b2:64:32:cd:f8:38:cb:8c:76:49:3a:22:af:9e:
                    db:fc:8b:55:35:a7:81:27:17:e3:6b:20:e6:8d:25:
                    4a:fc:8e:5d:87:44:09:20:c8:aa:82:e1:9b:92:3f:
                    c2:6d:f5:2c:e5:b0:d7:c1:61:9a:58:9e:74:99:a3:
                    79:bd:1a:1c:c8:9d:e7:5f:ae:73:96:09:63:b3:7e:
                    d9:c6:59:bb:08:82:8c:ac:c2:86:fe:60:61:be:f5:
                    9f:b3:be:19:5b:53:01:01:45:a6:aa:1d:1c:68:ef:
                    ad:cc:20:cc:42:e8:dd:09:ff:8f:00:8b:5e:5c:fb:
                    cb:3c:69:58:07:53:89:f8:5d:eb:84:48:2e:62:2f:
                    33:f6:38:f2:70:62:b4:eb:b4:48:9d:a1:f4:94:5e:
                    af:ec:2e:55:c5:5a:24:35:40:9f:f7:1c:57:c8:69:
                    7c:4d:11:c9:94:b7:b3:13:45:4e:8f:b7:9e:72:47:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:40:7E:C7:78:25:A9:96:A1:D2:57:9E:BC:93:E9:58:49:5E:4F:B4
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:4b:7b:8f:87:b3:e3:b8:e7:26:e8:f3:fd:0f:be:a1:b3:
         6c:02:99:ea:43:97:fc:36:76:bb:7d:7c:83:60:21:d7:5e:7c:
         53:a7:df:af:b0:db:1f:d1:25:ea:d1:2d:ce:8b:63:53:09:60:
         91:cc:ca:a7:d1:c9:3d:c7:ca:fe:41:5d:16:e2:58:59:09:fb:
         c9:ff:85:9d:65:3c:c5:c9:52:87:79:c3:a5:ca:0d:5f:79:f0:
         eb:c0:e1:a3:3a:d1:62:1b:20:66:c8:3d:72:ea:da:9c:e2:dd:
         e3:26:db:92:36:3e:b6:75:f6:34:cf:b1:66:41:9e:f3:bf:5b:
         28:27:e2:45:1d:fe:cd:0b:46:21:29:24:0f:0b:36:7c:4a:c4:
         86:90:f1:b2:7d:61:ab:d2:12:b7:a4:e3:fc:c5:fc:39:d5:90:
         ac:ca:f6:41:24:37:55:f3:c3:24:b3:25:9c:83:6f:06:77:04:
         9f:ae:23:55:87:d2:2c:74:3a:c2:8b:9d:83:b0:d7:a8:7c:66:
         54:85:55:02:de:a3:64:e1:24:8c:9e:c4:b0:56:b3:38:e7:78:
         87:cb:5e:94:d7:70:5b:6b:8d:a6:f1:b3:6a:7c:6d:f9:64:f5:
         31:b7:a8:1b:b9:36:b7:b6:08:9e:fe:bf:73:f5:2a:42:c5:e1:
         ba:cf:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:49:11 2026 by rpki-client