Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
File:                     CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json)
Hash identifier:          w4objaF1BQGZWN5mOVjEg5YozKnlUAsWPtAyGXiWZt8=
Subject key identifier:   6B:E5:9A:DC:C9:EE:C8:1D:0E:0C:D1:C3:02:A5:57:69:C5:B8:FA:3C
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       4CCAAD04C101CB254B535791095DD364C0D0DA40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
Manifest number:          04ED
Signing time:             Sat 31 Oct 2026 19:18:46 +0000
Manifest this update:     Sat 31 Oct 2026 19:13:46 +0000
Manifest next update:     Sun 01 Nov 2026 19:32:46 +0000
Files and hashes:         1: 3137372e3232322e3233392e302f32342d3234203d3e20323633343030.roa (hash: OlkhDobD0Owi/4RHJOQRuKterSTFKEj2VXrI7e78/JQ=)
                          2: 3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa (hash: s8p6tSQZ5gNrNuYiJwIJIPfXIrQ0NQhOP+2qe6OmpBU=)
                          3: 3137372e3232322e3233372e302f32342d3234203d3e20323633343030.roa (hash: Bg/8XYKDGhDJ9pDdVaRRCcLJAs5jIp/e5kGU9QLtnxM=)
                          4: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=)
                          5: 3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa (hash: R9ZUWZJxRYdbDnFhmxy3sdN9DH3BiSyX7rkhu43L3vU=)
                          6: 3137372e3232322e3233382e302f32342d3234203d3e20323633343030.roa (hash: sVPgeZSbfMKUyp/lI0l42QwHbebVnR3ce3wS0vKwq8Q=)
                          7: 3137372e3232322e3233352e302f32342d3234203d3e20323633343030.roa (hash: Md+NU5EtuptaLIiiQs9ZzP9unKgUBzBWnFeQNXCUXhU=)
                          8: 3137372e3232322e3233342e302f32342d3234203d3e20323633343030.roa (hash: VIdfFMlwRBzsTSGmVily5LU+ilQKl2vN5dD2tvram9I=)
                          9: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: ZqkwPACFPvAOhq/Egfy76kC2HqwbAAaZ2FVxh9uZX6A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ca:ad:04:c1:01:cb:25:4b:53:57:91:09:5d:d3:64:c0:d0:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Oct 31 19:13:46 2026 GMT
            Not After : Nov  1 19:32:46 2026 GMT
        Subject: CN=6BE59ADCC9EEC81D0E0CD1C302A55769C5B8FA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:ab:58:0f:7a:19:03:1e:15:97:84:cd:dc:
                    43:c4:f0:de:46:4f:3b:b9:66:39:fb:73:50:1f:71:
                    ea:bd:21:2b:38:a2:63:d4:41:b0:a6:ff:a6:85:af:
                    29:30:d3:50:d3:7e:39:90:be:b0:80:af:a7:00:66:
                    33:b2:c9:71:dc:fa:08:dd:49:53:50:ba:06:ed:16:
                    45:53:4e:42:5e:02:5d:c8:45:f6:7f:7d:61:89:bf:
                    2a:13:93:58:ab:7e:14:25:f7:33:d6:75:a4:55:b6:
                    ff:c4:b1:3c:cf:dc:40:46:52:b7:cd:62:76:91:71:
                    92:bc:88:8e:e1:23:60:c8:d2:91:6b:b9:de:ba:71:
                    9b:1b:d2:be:dd:90:f7:ed:cf:d8:8d:bc:dc:18:a5:
                    f2:17:2b:8c:97:1a:bf:1c:3c:49:a9:0f:ce:ae:f7:
                    bf:d1:d2:7b:5f:19:60:c6:d5:ac:e6:69:bd:7e:1a:
                    7b:1c:07:7d:a4:9b:c3:dc:33:5c:8f:7c:a8:2f:76:
                    82:6a:df:b9:e1:49:e7:f9:7f:81:41:84:99:c1:03:
                    10:a9:77:5b:b7:6b:4b:f5:8a:36:f2:7c:e3:bd:8c:
                    2f:65:5d:c6:c6:8c:8c:6f:2d:eb:15:f7:73:0f:ea:
                    ae:8f:ef:87:dc:85:a3:23:a8:24:33:09:a1:13:1d:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E5:9A:DC:C9:EE:C8:1D:0E:0C:D1:C3:02:A5:57:69:C5:B8:FA:3C
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:15:b1:1d:4f:9d:3e:4d:bb:5f:eb:89:9f:82:d5:76:68:be:
         b6:ec:cc:a2:ee:b6:24:c9:af:e7:3b:93:8b:53:35:ef:0a:b1:
         f1:96:a1:78:21:06:a9:48:ef:85:b7:ef:6f:83:3a:1d:8e:d3:
         a9:84:01:d0:30:ae:0c:fd:1d:f1:df:15:55:bf:7f:aa:8a:1d:
         42:b3:39:9b:08:e4:ad:20:cf:a4:a9:0f:6a:8e:05:42:48:5b:
         4f:28:fe:e6:05:9a:00:da:c1:90:b4:5a:8f:55:b8:79:9b:de:
         82:8a:4a:84:ec:42:0f:4e:c0:aa:6a:ab:4f:4c:0e:c1:65:be:
         33:39:19:86:87:08:3c:e9:3b:8c:ab:e5:01:eb:80:dd:31:74:
         19:97:00:3a:16:34:a0:fe:5e:6e:d6:02:54:2f:fb:8b:ca:c6:
         8e:90:be:99:cf:e1:5b:c6:bb:01:dd:10:db:08:43:af:53:8e:
         e3:89:e1:39:b0:7f:4b:f7:e4:24:a7:75:86:05:1d:f3:33:42:
         3e:f8:6e:ec:75:e9:83:b1:41:e8:ce:48:9b:bc:e4:ee:40:d7:
         6e:de:0b:e2:f7:d1:40:7f:09:04:46:31:af:8e:be:8e:3d:b7:
         7a:44:81:86:b1:57:25:61:00:83:49:a3:fb:e5:5e:ff:c0:6c:
         ac:bf:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:29:49 2026 by rpki-client