Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          4ivMmIJf0zqH1EZluxw2G3xyaBcxTN6iv7YaZLubUxA=
Subject key identifier:   34:3C:0F:F4:2D:0D:77:75:D3:75:AD:3D:CB:52:9C:29:3E:51:08:8A
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       13AF23683CB5EA0CF4053A4C216ABA548230A51C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          0352
Signing time:             Fri 30 Oct 2026 00:33:52 +0000
Manifest this update:     Fri 30 Oct 2026 00:28:52 +0000
Manifest next update:     Sat 31 Oct 2026 01:06:52 +0000
Files and hashes:         1: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: 9CL5zgZnrNyl63A7DZdUur6x2bxE4eLGRuIE43yNuXU=)
                          2: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=)
                          3: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=)
                          4: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM=)
                          5: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: dFZ0LGf9VUQmelCd2T2ZnwoXRmTaX8jDdO8dHAjtnkk=)
                          6: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: il53B7Q73jNFlH7g51wKgGiNgid+xMbJfds7WZ0O2Bg=)
                          7: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: p+UFfhkBAnWncsui85kUuhM0+jqknevxzdqYB/fmK3s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 01:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:af:23:68:3c:b5:ea:0c:f4:05:3a:4c:21:6a:ba:54:82:30:a5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Oct 30 00:28:52 2026 GMT
            Not After : Oct 31 01:06:52 2026 GMT
        Subject: CN=343C0FF42D0D7775D375AD3DCB529C293E51088A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:54:e1:17:d4:ea:d5:4c:30:fc:b5:ac:5b:
                    6c:c3:e4:43:c2:63:e8:d1:dc:df:3a:0c:c8:bd:d4:
                    6a:aa:f9:f8:a1:56:5a:30:9b:eb:aa:d8:a1:fd:4c:
                    3d:90:77:1b:7b:36:1e:3e:a7:bb:0b:18:d7:fe:68:
                    0b:24:4e:cc:0e:ef:e5:f6:13:9d:64:09:07:50:d3:
                    79:ad:fd:17:e9:67:d3:da:0b:be:87:1c:93:9e:b0:
                    55:c9:56:5d:68:94:58:ba:8a:68:ea:aa:a9:dc:a6:
                    ac:b9:73:64:36:61:91:07:8d:b1:1e:ad:3c:b7:e3:
                    56:7e:96:cd:ce:d2:66:8b:91:06:d4:c8:b5:a2:c3:
                    5a:c5:c1:32:4d:6c:61:a2:a6:10:9a:47:4b:f9:73:
                    11:84:40:5a:1e:3e:cc:31:54:8f:89:cc:b5:2e:33:
                    58:df:4a:39:c8:0d:01:a8:0b:f4:27:bf:51:7e:c6:
                    e4:13:8e:81:f8:91:e1:0d:44:f0:85:bb:62:20:99:
                    9e:2c:e4:cb:ee:88:55:23:eb:92:03:57:26:c7:9d:
                    03:5f:80:ef:1f:25:e3:8b:32:c8:3a:52:a4:fe:f7:
                    c1:aa:26:cb:e6:59:b2:83:a5:60:02:72:48:03:56:
                    54:d0:29:7e:6b:6a:21:96:58:36:ea:f5:4c:5d:66:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:0F:F4:2D:0D:77:75:D3:75:AD:3D:CB:52:9C:29:3E:51:08:8A
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2e:59:3e:9d:2e:ca:c9:80:64:ec:75:68:b1:cd:f4:8e:bd:
         bd:7d:8a:e0:6f:96:d3:4b:5c:95:76:00:f8:09:e9:82:d8:7e:
         e3:0d:2e:6e:35:e2:53:ce:55:fb:45:84:a7:1f:64:b8:a7:31:
         2c:9e:92:a0:bd:c7:e3:bc:31:27:af:7e:f2:46:5e:b4:ed:80:
         71:67:28:96:b0:a4:c0:2a:25:64:77:11:57:d1:19:78:1f:89:
         7e:8e:ad:f6:c8:38:34:8f:74:d2:f0:4f:cd:00:45:12:3a:ee:
         94:52:97:4e:bc:c1:7d:ae:2f:70:17:f6:ea:45:3e:7b:6c:5c:
         aa:9e:97:96:b1:97:f5:1f:08:c3:76:4e:c7:9a:d0:ad:c4:c8:
         5b:70:03:dc:e7:ad:02:25:1a:74:3f:dc:33:74:bd:ab:14:ab:
         33:84:6d:2d:88:ba:21:af:c8:57:5f:48:c0:47:80:2d:d3:94:
         30:2b:f6:c9:fe:32:72:f2:d3:35:bd:c0:1c:a0:19:52:ca:28:
         f4:cd:6e:c2:34:7a:29:89:4d:72:f8:18:35:dc:47:67:3a:3b:
         7d:16:f7:2e:4f:95:6b:37:6b:35:c9:12:62:9f:84:89:6d:0e:
         32:d2:73:ab:93:84:f9:37:18:1c:55:7b:d2:a2:18:f6:4a:50:
         05:8d:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:13:15 2026 by rpki-client