Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
File:                     4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft (raw, json)
Hash identifier:          CPO1uceT7WjYrxQIN10cJqSQBYQnViqWakqGv3kWOkM=
Subject key identifier:   0D:B2:12:3B:0A:51:68:38:42:22:5E:DA:7B:B0:20:CF:E0:76:17:35
Authority key identifier: 4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64
Certificate issuer:       /CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864
Certificate serial:       4348B7B063362977D383958C80B3938D0D8B2FD6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
Manifest number:          D8
Signing time:             Mon 24 Aug 2026 23:18:25 +0000
Manifest this update:     Mon 24 Aug 2026 23:13:25 +0000
Manifest next update:     Wed 26 Aug 2026 02:17:25 +0000
Files and hashes:         1: 323830343a363164633a633030303a3a2f33362d313238203d3e20323639323631.roa (hash: tqJHoYFtZyhQiHPQM6YCU9Q+XvYfSc7hQ0VFl6F+sTk=)
                          2: 34352e3138322e31362e302f32322d3332203d3e20323639323631.roa (hash: HBfEvOLwV+a+06GBKwzwPe5QQiQVtbmFvCko9OyYUO8=)
                          3: 323830343a363164633a343030303a3a2f33362d313238203d3e20323639323631.roa (hash: vUWX6YYonafEiAWevLQ5MLrt4A2dhz4ewplvWyRMDho=)
                          4: 4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl (hash: wt4THVgRsamqTX3zSJaEVriL7JrIAIgxdzq3fdihwTE=)
                          5: 323830343a363164633a363030303a3a2f33362d313238203d3e20323639323631.roa (hash: VSakZdJ0r1lqw1cD2hhJATLiK6eSAiosRxLeP8iKSOE=)
                          6: 323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa (hash: opEw8Ds1rSXQDtQtzJ3ta2GnYH9fFslGeFEUtpjL0Wg=)
                          7: 323830343a363164633a3a2f33362d313238203d3e20323639323631.roa (hash: 3IV1UExwtWAtKrXnJvnh4k9jHtimZokTtJndoiNoD/0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:48:b7:b0:63:36:29:77:d3:83:95:8c:80:b3:93:8d:0d:8b:2f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864
        Validity
            Not Before: Aug 24 23:13:25 2026 GMT
            Not After : Aug 26 02:17:25 2026 GMT
        Subject: CN=0DB2123B0A51683842225EDA7BB020CFE0761735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:c2:b6:8a:d9:8f:c1:1e:a8:a5:b0:8f:d2:
                    57:5c:99:bd:8b:6c:c1:1d:16:a8:33:21:37:81:aa:
                    2b:ba:73:24:4d:5c:b2:23:39:a2:75:fd:57:18:2c:
                    12:4f:3c:75:40:77:b9:24:47:84:00:00:01:92:f4:
                    3b:60:59:a4:40:91:6f:cb:cc:b5:16:7a:9c:ba:71:
                    fd:84:c8:d2:91:bd:e0:b3:f4:85:86:f6:5a:f5:2b:
                    eb:63:ad:b6:88:ee:ea:35:c4:1d:32:46:82:a0:4c:
                    9d:65:63:91:5a:43:62:8c:c9:01:f2:81:4e:51:6d:
                    bc:b7:1d:cd:40:37:43:83:6a:53:c0:50:80:4d:05:
                    af:ad:30:d1:5c:86:5c:ba:bd:3a:15:43:57:fc:bc:
                    20:43:fd:56:0a:b0:77:a1:25:46:5a:5c:6d:34:46:
                    37:14:69:3e:29:90:0b:b5:3c:d0:5d:5b:c7:d2:f3:
                    10:d0:4e:0a:21:ec:48:b2:79:b7:07:52:bc:f9:e9:
                    78:6f:5b:80:d5:cb:43:b8:2f:73:82:c8:50:dc:18:
                    58:b3:1e:82:c5:d0:2e:02:97:0c:93:64:09:93:82:
                    6c:01:cd:4e:fc:43:59:6b:7a:d9:b1:91:89:86:92:
                    e8:23:6d:e7:b7:bf:bd:1e:8f:c0:c5:49:fe:95:94:
                    86:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:12:3B:0A:51:68:38:42:22:5E:DA:7B:B0:20:CF:E0:76:17:35
            X509v3 Authority Key Identifier:
                keyid:4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:20:10:dc:e3:7b:94:a7:2e:6c:66:8b:42:40:e8:03:77:db:
         92:23:b8:55:ba:a2:e8:2b:01:7e:05:9e:0b:16:a0:d8:23:31:
         d8:74:4c:1b:f0:de:91:b5:a2:39:3d:db:69:29:8e:33:59:91:
         04:f8:8e:89:bd:c0:22:06:90:13:ae:78:0a:17:15:ae:90:4f:
         31:4f:df:80:89:5f:90:06:98:fc:07:09:8c:68:37:59:f6:84:
         2f:69:95:4c:17:b2:e3:78:d4:99:88:2a:ce:05:17:30:c3:6f:
         f1:90:37:9a:32:56:73:e1:78:28:1a:73:55:27:21:b8:b1:82:
         78:96:2b:cf:f5:58:55:2a:ef:d0:03:d1:6c:9a:05:38:2a:b9:
         44:b1:21:29:a8:0b:8e:cf:91:5a:68:ed:bd:d4:d7:48:d4:cc:
         f4:bb:d6:f0:26:65:98:26:56:d5:9b:12:71:e0:40:01:29:4b:
         f6:b2:60:19:ea:65:0e:de:66:03:8a:8e:66:6e:85:e9:fa:ee:
         df:32:c4:c6:87:fe:5b:fc:6f:41:54:a5:42:b7:bf:66:0e:9a:
         6c:64:2f:ae:cb:76:91:54:7d:0e:64:d8:e5:89:3c:94:ba:40:
         79:dc:1a:07:79:77:5d:bb:86:4f:b9:30:0e:42:eb:ab:99:9f:
         e7:85:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:42:37 2026 by rpki-client