Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
File:                     6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft (raw, json)
Hash identifier:          tJsFzeTfXH7tBQDdCGWTl5rYUZCjieR29PRIyK3dyjQ=
Subject key identifier:   00:87:B9:46:D7:27:E2:5A:10:AA:CA:CB:D6:A0:CD:2D:4D:B3:D5:4F
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       0402BA89A13DB65B18052BE3C5A816DD81832111
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
Manifest number:          04E6
Signing time:             Sun 01 Nov 2026 08:32:38 +0000
Manifest this update:     Sun 01 Nov 2026 08:27:38 +0000
Manifest next update:     Mon 02 Nov 2026 10:25:38 +0000
Files and hashes:         1: 3138362e3233322e3137382e302f32342d3332203d3e20323632373732.roa (hash: DotHAXvQTJoa5QK/qy1kOU/pMjzxpOXZwIRnyvXUprk=)
                          2: 323830343a333065343a3a2f33322d313238203d3e20323632373732.roa (hash: ljf3kOKKs3HOJctB53yQDyI5LaBzKELDW+vqP0oDMdM=)
                          3: 3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (hash: CZVpE3RS6EdJBL+s1oh+60RO519fUscnAr9C3EvwsPI=)
                          4: 6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl (hash: vO6FX828MnY2dI3v7aORX9jIHP5pyJxpqySaZprg5Ro=)
                          5: 3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (hash: b/jxd0Ies4lj+Bf7n+iSI15tUeChU2EBazK87gFFNJw=)
                          6: 3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (hash: rmlEe09mFumzi++BacY6CaQ0WYwjZ9dIki0JAAJknNY=)
                          7: 3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (hash: 6cigMOSfoqE6zvwmb3uMyGKEPSH30r6IbqvU3uHv77s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 10:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:02:ba:89:a1:3d:b6:5b:18:05:2b:e3:c5:a8:16:dd:81:83:21:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Nov  1 08:27:38 2026 GMT
            Not After : Nov  2 10:25:38 2026 GMT
        Subject: CN=0087B946D727E25A10AACACBD6A0CD2D4DB3D54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:73:ba:71:b6:e7:58:ee:cc:d8:53:5d:16:
                    0d:85:13:eb:de:78:6a:66:c1:97:32:7c:4f:f3:2b:
                    47:d8:ab:1b:1e:85:a0:20:d3:14:aa:a4:5a:aa:cf:
                    07:45:fe:4d:88:b9:34:c4:df:fc:1c:c0:ee:e1:7a:
                    d0:82:80:1f:ef:de:55:b0:a1:ba:c7:24:35:d1:6c:
                    ad:db:5d:ef:cb:00:c9:1c:a0:fe:83:eb:7b:d2:05:
                    1e:56:9e:9b:c4:12:6e:dd:c1:c4:0e:ed:a8:f1:6f:
                    75:9d:8e:7a:7d:17:d1:25:fe:9b:03:ac:26:cf:2f:
                    a5:9d:73:b2:35:d1:6b:40:f1:c7:7b:7a:e2:68:f5:
                    5c:9b:9e:9b:c6:39:71:10:74:03:23:e5:da:14:dd:
                    02:37:04:dc:9b:a5:d0:13:83:10:d3:d9:7b:cc:fb:
                    90:54:28:18:f7:83:74:e5:eb:03:e7:7b:88:2d:82:
                    22:81:ad:f6:69:c2:cb:63:62:07:f7:89:ad:32:ee:
                    d7:f4:a5:b6:95:b0:6a:a6:57:59:ac:e2:35:5b:78:
                    02:24:04:01:5f:68:2b:4f:23:fa:2a:04:b8:c8:e6:
                    4c:30:f7:56:da:25:dc:35:c0:f0:50:33:1e:79:4c:
                    40:14:d6:9d:32:37:4b:7d:69:3e:a9:27:bb:86:0d:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:B9:46:D7:27:E2:5A:10:AA:CA:CB:D6:A0:CD:2D:4D:B3:D5:4F
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:85:44:45:9e:7c:2b:e3:f4:ba:75:76:51:9d:21:37:72:ce:
         b6:f6:96:50:fd:16:b6:d2:fe:dd:8c:bd:82:8b:a2:3f:71:ea:
         4b:fb:fb:cd:24:4f:08:4c:68:c1:c6:ad:97:69:7c:73:e1:30:
         92:4f:cf:0f:2c:97:21:7a:69:57:f4:b8:69:50:9f:5b:ed:7f:
         5d:ed:57:c8:83:67:7e:94:74:30:50:23:ce:af:6a:dd:5c:38:
         46:64:02:38:2b:31:6a:51:4e:9c:d8:f6:32:2f:88:4a:c8:12:
         e8:e8:aa:fe:19:f6:48:43:a1:6e:44:df:cc:4c:19:27:8e:5c:
         3a:30:5e:5b:ac:95:57:d5:9f:36:d2:5e:7a:ab:2e:7e:4c:71:
         b0:d5:fa:14:56:2e:d8:16:43:62:1c:f4:5f:ef:e4:65:a8:82:
         3f:65:4a:4c:2c:09:6f:0f:15:77:d2:7f:fb:9a:d3:0c:05:a5:
         0a:ad:d0:7d:fd:88:30:98:a9:5f:46:c6:2c:4c:d5:d2:6f:94:
         83:b6:26:52:7c:a3:88:8a:37:34:2e:11:bb:bf:0b:a0:4f:c0:
         72:a3:36:1f:08:71:80:9d:58:5b:e4:f5:97:6a:c8:e7:07:db:
         71:8f:cc:96:10:38:04:be:ad:97:d1:40:fa:07:92:d4:62:23:
         87:f8:98:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----