Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft
File:                     395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft (raw, json)
Hash identifier:          lE6TIh27NJT+WcgMfPJ/hbW+20UoepWm3kjwCp9zIGA=
Subject key identifier:   28:63:29:23:22:1A:B6:D0:B9:8A:A1:21:1D:1E:1F:FD:4A:74:A5:9E
Authority key identifier: 39:5A:DB:7D:C5:6D:04:35:9C:A9:6F:CD:53:FF:9F:76:22:4B:CF:B4
Certificate issuer:       /CN=395ADB7DC56D04359CA96FCD53FF9F76224BCFB4
Certificate serial:       0D5C753A885CDC6259BC30A3F7218FD21F7E15C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft
Manifest number:          24
Signing time:             Sun 11 Oct 2026 14:48:15 +0000
Manifest this update:     Sun 11 Oct 2026 14:43:15 +0000
Manifest next update:     Mon 12 Oct 2026 16:42:15 +0000
Files and hashes:         1: 395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl (hash: YelAJoUpZoUz0oUXkqq3VLoOecXV6PIRbkz27AI7lm0=)
                          2: 34352e3138342e3230302e302f32322d3234203d3e20323639333534.roa (hash: oAXGiLpn0aQhtL1ykQlBFOgR8SytjRvwX65eG/AK+EY=)
                          3: 323830343a363335343a3a2f33322d3438203d3e20323639333534.roa (hash: TM7ZWLc1Xg63Dnu4AZ64w3MrbnxZkda74TG+IcPYz6I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl
                          rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:75:3a:88:5c:dc:62:59:bc:30:a3:f7:21:8f:d2:1f:7e:15:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395ADB7DC56D04359CA96FCD53FF9F76224BCFB4
        Validity
            Not Before: Oct 11 14:43:15 2026 GMT
            Not After : Oct 12 16:42:15 2026 GMT
        Subject: CN=28632923221AB6D0B98AA1211D1E1FFD4A74A59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:2b:70:98:fa:1d:59:36:7e:a8:b7:ca:02:
                    06:6c:55:65:69:15:3c:5e:2a:5f:5e:04:40:dc:95:
                    13:9a:ad:29:03:e0:66:72:41:76:5f:c9:c6:a5:e4:
                    b3:b1:aa:b5:9c:a0:40:2b:d8:5d:58:84:2d:a4:d7:
                    9a:eb:4f:11:21:ad:15:b5:7d:24:28:cd:66:14:a0:
                    dd:58:5b:de:44:b2:cc:95:67:03:bd:05:01:b2:5f:
                    7d:73:51:f7:76:13:47:06:d2:88:24:67:b9:e0:87:
                    fb:84:15:79:eb:58:c1:1a:71:e2:75:01:b8:bb:69:
                    63:26:95:72:ca:e6:da:a9:01:7e:e9:44:fe:5a:a0:
                    5d:d2:ed:57:4a:49:76:8b:2e:54:84:80:b5:77:dc:
                    44:7f:c1:9a:a5:e7:ab:1b:fe:f6:de:1a:8d:fa:fc:
                    c8:75:5d:5e:1a:8f:e1:64:4f:bd:bb:c4:3f:0d:1a:
                    e7:1f:88:4a:1f:5d:ad:c5:5a:06:b5:63:42:a5:f1:
                    67:74:70:cf:39:8e:cf:f8:21:41:79:dc:59:58:59:
                    42:ac:7c:7d:fb:32:07:df:0a:d1:9e:f5:6a:4f:1a:
                    e0:5a:85:c4:94:3d:18:bf:2d:d1:d3:3d:11:4a:e5:
                    13:6a:86:23:30:3e:d3:87:fc:de:47:ee:d2:6e:0b:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:63:29:23:22:1A:B6:D0:B9:8A:A1:21:1D:1E:1F:FD:4A:74:A5:9E
            X509v3 Authority Key Identifier:
                keyid:39:5A:DB:7D:C5:6D:04:35:9C:A9:6F:CD:53:FF:9F:76:22:4B:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3c:ee:26:b2:71:2a:cb:00:1f:ce:01:1f:1c:bc:17:3e:67:
         59:57:9d:da:f7:47:22:7e:98:bb:57:d3:c2:8a:77:93:1c:24:
         70:2f:f1:52:99:cb:c7:b7:e7:b2:8f:25:c4:e0:71:86:f0:a0:
         ee:4a:d0:48:9e:20:fc:3c:fc:e9:d3:d5:59:c8:84:92:67:b6:
         79:1f:68:59:bb:f3:cd:d5:68:f7:5e:83:40:93:77:bc:26:90:
         cd:cc:a4:cb:e4:7a:46:86:e2:37:c5:6e:95:16:de:0c:35:b8:
         ed:39:d0:6c:79:6a:eb:6f:15:46:80:12:1c:6d:c7:ea:88:03:
         b2:74:36:ec:06:92:eb:f7:50:dd:8a:97:78:db:db:d1:7d:c0:
         a7:82:29:56:69:35:1a:e2:65:29:1a:39:49:12:f5:74:50:f1:
         03:d6:e1:ad:d6:1d:da:88:33:34:b2:10:0b:86:60:ea:88:cb:
         92:81:64:9a:6e:5b:03:aa:e3:1a:9d:08:bf:ea:1f:b0:ef:6c:
         78:84:74:3d:28:9d:01:5d:b9:60:8e:a8:59:d4:c7:7e:81:fc:
         54:29:d6:e9:42:07:99:33:8a:7b:e4:aa:8f:a1:c8:1d:ca:7e:
         c2:92:9a:87:9e:d0:7c:00:60:78:90:57:c2:bd:eb:0f:0e:76:
         e3:c5:e1:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDVx1Oohc3GJZvDCj9yGP0h9+FcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk1QURCN0RDNTZEMDQzNTlDQTk2RkNENTNGRjlGNzYy
MjRCQ0ZCNDAeFw0yNjEwMTExNDQzMTVaFw0yNjEwMTIxNjQyMTVaMDMxMTAvBgNV
BAMTKDI4NjMyOTIzMjIxQUI2RDBCOThBQTEyMTFEMUUxRkZENEE3NEE1OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXCtwmPodWTZ+qLfKAgZsVWVp
FTxeKl9eBEDclROarSkD4GZyQXZfycal5LOxqrWcoEAr2F1YhC2k15rrTxEhrRW1
fSQozWYUoN1YW95EssyVZwO9BQGyX31zUfd2E0cG0ogkZ7ngh/uEFXnrWMEaceJ1
Abi7aWMmlXLK5tqpAX7pRP5aoF3S7VdKSXaLLlSEgLV33ER/wZql56sb/vbeGo36
/Mh1XV4aj+FkT727xD8NGucfiEofXa3FWga1Y0Kl8Wd0cM85js/4IUF53FlYWUKs
fH37MgffCtGe9WpPGuBahcSUPRi/LdHTPRFK5RNqhiMwPtOH/N5H7tJuCwp3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKGMpIyIattC5iqEhHR4f/Up0pZ4wHwYDVR0j
BBgwFoAUOVrbfcVtBDWcqW/NU/+fdiJLz7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDFnY2JZMXZwZE5UMU45MXhKbWQ5ZzlUcFpocHZlVEZ5Z0pHblRjc2FR
d3gvMC8zOTVBREI3REM1NkQwNDM1OUNBOTZGQ0Q1M0ZGOUY3NjIyNEJDRkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NUFEQjdEQzU2RDA0MzU5
Q0E5NkZDRDUzRkY5Rjc2MjI0QkNGQjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NDFnY2JZMXZwZE5UMU45MXhKbWQ5ZzlUcFpocHZlVEZ5Z0pHblRjc2FRd3gvMC8z
OTVBREI3REM1NkQwNDM1OUNBOTZGQ0Q1M0ZGOUY3NjIyNEJDRkI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARDzuJrJxKssAH84BHxy8Fz5nWVed2vdHIn6Yu1fTwop3kxwkcC/xUpnLx7fn
so8lxOBxhvCg7krQSJ4g/Dz86dPVWciEkme2eR9oWbvzzdVo916DQJN3vCaQzcyk
y+R6RobiN8VulRbeDDW47TnQbHlq628VRoASHG3H6ogDsnQ27AaS6/dQ3YqXeNvb
0X3Ap4IpVmk1GuJlKRo5SRL1dFDxA9bhrdYd2ogzNLIQC4Zg6ojLkoFkmm5bA6rj
Gp0Iv+ofsO9seIR0PSidAV25YI6oWdTHfoH8VCnW6UIHmTOKe+Sqj6HIHcp+wpKa
h57QfABgeJBXwr3rDw5248XhMQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:39:14 2026 by rpki-client