Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          fzJiOp1Jnc+a3bCgfHDTtZUgMl3+rhr1II/+MpJD2Xs=
Subject key identifier:   EB:F6:A9:7B:2E:8E:CE:C1:DB:6C:DF:4C:BE:84:A7:D6:81:5F:1F:19
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       0DC114EE067B6B04875B233F99EA59B6B15D0DCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          038A
Signing time:             Fri 30 Oct 2026 13:08:26 +0000
Manifest this update:     Fri 30 Oct 2026 13:03:26 +0000
Manifest next update:     Sat 31 Oct 2026 16:21:26 +0000
Files and hashes:         1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: PXpCdUSmcp1ypdToG6Wd/II+eK11O7Qf/WrFR+VVkfw=)
                          2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: PFW9LHrmZhI1ddh6nx2L3efhaQhI+W85vY9hTK6GpLc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c1:14:ee:06:7b:6b:04:87:5b:23:3f:99:ea:59:b6:b1:5d:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Oct 30 13:03:26 2026 GMT
            Not After : Oct 31 16:21:26 2026 GMT
        Subject: CN=EBF6A97B2E8ECEC1DB6CDF4CBE84A7D6815F1F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:5d:14:d7:12:cf:17:46:47:fd:b9:6f:8b:
                    c1:ba:f9:76:ae:5f:15:69:8e:29:ca:4c:fc:27:c4:
                    d6:5e:f5:60:ec:bb:fa:79:a1:b4:7e:fa:c6:11:34:
                    a9:89:71:de:23:a9:52:02:8f:ef:0a:b1:91:b0:25:
                    73:a2:a9:95:67:60:77:65:e2:ee:46:59:03:c3:31:
                    00:d7:1f:cf:95:61:72:bc:d5:b4:d0:b9:d6:6f:6e:
                    d4:5a:aa:d8:90:48:93:59:24:c9:db:c1:c3:ef:ac:
                    35:f4:7b:80:a4:6e:40:69:5d:3d:c9:00:d9:24:ab:
                    8d:47:25:03:db:7c:8a:b7:73:ea:f3:29:0d:fa:b8:
                    a4:ab:55:ea:65:00:f1:37:23:43:41:03:eb:e6:7e:
                    a9:42:5c:53:e2:f6:b9:dd:08:a7:65:5f:5c:a1:25:
                    f8:b3:69:a0:97:b8:59:f5:41:2b:d5:6f:72:89:06:
                    7a:2e:32:1a:4e:d0:07:2e:5f:7b:ef:6f:8d:5f:18:
                    45:2a:36:9f:7b:bd:9a:a4:86:66:67:52:65:6e:f4:
                    22:16:a3:1f:1d:f1:16:21:88:92:e4:91:c8:04:88:
                    db:3d:7a:28:f2:3d:7e:1b:b8:27:c8:60:5c:fd:be:
                    a5:38:ec:3b:00:62:ef:b8:6d:97:dd:b4:d5:f3:d9:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F6:A9:7B:2E:8E:CE:C1:DB:6C:DF:4C:BE:84:A7:D6:81:5F:1F:19
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:18:cb:ad:93:6b:6e:23:cf:75:ec:b6:8a:2d:95:0a:cd:c2:
         7f:59:3c:8d:64:63:f9:76:4f:9d:49:e8:59:16:17:dd:83:c0:
         04:d6:f5:31:88:12:43:93:33:95:5f:90:b5:16:65:68:57:c5:
         1a:2e:4e:02:72:c4:f1:44:19:b7:ba:85:0d:23:d6:d8:90:cd:
         85:13:2b:b8:b3:be:16:0c:02:50:9a:ad:85:eb:5d:f6:e9:10:
         7d:f8:34:c5:d4:ae:df:1b:26:47:b2:48:91:e4:6f:ad:9d:07:
         e1:89:35:5f:e2:3e:e2:52:ba:df:fe:3f:b4:06:11:a4:1c:03:
         09:e8:d4:e1:b3:38:8d:aa:c3:ea:c3:5f:ee:3f:93:93:2c:fa:
         e6:7b:17:3d:80:a9:4e:84:71:e1:c7:c5:6f:f4:a9:a1:f8:cf:
         ba:66:80:93:89:fe:b6:c7:bf:7e:a8:ae:d9:58:21:3a:d5:86:
         3a:af:a4:2a:81:c4:bd:12:d6:26:c5:6b:0f:44:f9:cd:e3:b3:
         1c:4b:00:ce:cf:bd:28:f6:81:8d:0d:a9:ea:64:49:9c:60:a9:
         27:37:c9:e3:70:87:8d:18:3e:08:5f:30:8d:bd:f3:a4:9f:5f:
         43:95:de:70:33:aa:4b:3a:1f:4b:59:c6:c1:6e:3c:af:f1:a9:
         d9:fd:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:37:51 2026 by rpki-client