Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
File:                     974B1286BDF6AAAF8648D23141EAB781B973C049.mft (raw, json)
Hash identifier:          iER7CqUfnXS0xIqvFp8lBisVjVQkD5mf9/PWvpm4kVQ=
Subject key identifier:   04:C2:56:D3:F9:BF:A6:29:3B:DA:9B:15:31:4C:BB:B2:EE:E7:09:23
Authority key identifier: 97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49
Certificate issuer:       /CN=974B1286BDF6AAAF8648D23141EAB781B973C049
Certificate serial:       5E3474F557DFA1A6BED6654B1633333CDB3365F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
Manifest number:          8E
Signing time:             Tue 27 Oct 2026 17:10:59 +0000
Manifest this update:     Tue 27 Oct 2026 17:05:59 +0000
Manifest next update:     Wed 28 Oct 2026 20:12:59 +0000
Files and hashes:         1: 323830343a353761343a3a2f33332d3333203d3e20323638303737.roa (hash: RMO7HRfWWLTLeMKYDHYqE3JEx9mccMMoIT9O3rpC41g=)
                          2: 974B1286BDF6AAAF8648D23141EAB781B973C049.crl (hash: 8nDlaBp1QjDz+tL50vyTH5VWUFyXld9wnobBSzkyRIc=)
                          3: 323830343a353761343a666530303a3a2f34302d3430203d3e20323638303737.roa (hash: t4Qefnl3cAcRpnC2F6SdqpQ+c1iFaKsqbFcaxgRm5FQ=)
                          4: 34352e3136382e3136382e302f32322d3232203d3e20323638303737.roa (hash: DkLuh3tcxCmgKjOsF8Dh3tQBldpIX4JE4i3qL8lOCuI=)
                          5: 323830343a353761343a3a2f33322d3332203d3e20323638303737.roa (hash: Iq1Vg1DlWrVX1naUt9B3Efp2+NHwzN0rgFbV6emUITw=)
                          6: 34352e3136382e3136382e302f32342d3234203d3e20323638303737.roa (hash: YMRyblhx/6aFcI1wDXDE1lLEbAlXJUjJxMM1Ul9VGZI=)
                          7: 34352e3136382e3136392e302f32342d3234203d3e20323638303737.roa (hash: Z0J281BOPXvroozFFhyJxWsP0rzoFsEk+MQp7NYfe2E=)
                          8: 34352e3136382e3136382e302f32322d3234203d3e20323638303737.roa (hash: VGBGRVij+ctksKjlNSRe/YexivHc1WUSGfQWYIGsIJI=)
                          9: 34352e3136382e3137302e302f32342d3234203d3e20323638303737.roa (hash: HofGFKF7tmqQKfTQygSWf2cR6If5RqKK/G6LmzgRb1s=)
                          10: 34352e3136382e3136382e302f32332d3233203d3e20323638303737.roa (hash: qaxcd+eZmWCzS4KFr4bU5sRzgOF7MHCHGZRAjJrHh18=)
                          11: 323830343a353761343a383030303a3a2f33332d3333203d3e20323638303737.roa (hash: 12LVfxpEiXGAIxHYKyl4/9+Ms3A0DnzQbltPSdFQm/4=)
                          12: 34352e3136382e3137302e302f32332d3233203d3e20323638303737.roa (hash: pxxYd2ZP5yn6Sl2zou88ZLM65ph4WU+EKs52XzrbHLc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl
                          rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 20:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:34:74:f5:57:df:a1:a6:be:d6:65:4b:16:33:33:3c:db:33:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974B1286BDF6AAAF8648D23141EAB781B973C049
        Validity
            Not Before: Oct 27 17:05:59 2026 GMT
            Not After : Oct 28 20:12:59 2026 GMT
        Subject: CN=04C256D3F9BFA6293BDA9B15314CBBB2EEE70923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:c7:f2:dc:10:63:2f:6f:f7:04:af:46:ca:
                    33:4b:b6:f8:6f:b8:48:c5:92:e6:da:a8:5e:b7:f2:
                    56:07:29:04:68:fa:87:2a:83:35:73:86:37:23:fd:
                    ef:81:0c:7e:52:59:4a:1c:d4:e9:46:f1:be:01:51:
                    e5:05:68:c9:62:69:bc:ac:e3:ae:6f:b9:7b:9c:6b:
                    de:0a:c2:99:98:e0:6b:3e:88:46:64:8c:45:6a:55:
                    04:56:40:cd:e0:98:fe:13:fa:1f:b0:57:8b:a2:06:
                    5e:f9:08:d6:87:29:16:56:1a:9b:86:92:40:72:ac:
                    e8:ed:5e:ef:b1:07:22:cd:e4:94:04:af:3e:0c:8e:
                    fa:e8:a9:ea:ae:fb:06:ea:83:ac:ad:a5:c6:c3:02:
                    f8:b9:51:b7:6a:5b:c8:9b:48:06:c4:19:54:d1:6f:
                    cc:35:8b:77:2f:a2:bf:40:e7:5b:55:d4:93:93:20:
                    53:86:a4:e8:95:15:60:48:16:91:ed:a8:77:31:34:
                    38:b9:6f:66:aa:ab:71:7a:78:f7:63:b9:54:22:3b:
                    c9:4a:55:18:f2:e7:71:1e:33:fd:3d:09:b9:2a:d8:
                    f3:4d:f6:f8:02:8a:ac:94:62:02:d0:13:cc:61:94:
                    41:a3:eb:c3:9e:41:ca:11:59:31:6a:c7:79:79:63:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:56:D3:F9:BF:A6:29:3B:DA:9B:15:31:4C:BB:B2:EE:E7:09:23
            X509v3 Authority Key Identifier:
                keyid:97:4B:12:86:BD:F6:AA:AF:86:48:D2:31:41:EA:B7:81:B9:73:C0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974B1286BDF6AAAF8648D23141EAB781B973C049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/974B1286BDF6AAAF8648D23141EAB781B973C049.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:a4:49:5e:31:b3:ca:96:77:8c:5a:32:1e:9d:4c:35:3e:
         da:87:8c:4a:98:99:9c:10:22:4a:2f:1b:64:e2:9a:ba:35:f5:
         78:1a:63:cc:a0:69:b8:07:02:3f:76:c7:08:11:2e:6d:75:0d:
         f7:8b:5d:d2:d3:25:4a:35:5a:e2:60:f5:dc:a9:54:73:1b:28:
         e8:72:1c:76:bf:69:b1:5a:ef:3e:26:7a:5a:b4:52:1b:91:32:
         db:f2:37:34:8e:ab:f6:8b:be:7e:c7:f7:d7:1f:a4:bf:44:46:
         2b:85:68:6a:49:f6:b6:84:47:fd:7e:26:ab:4c:bb:5a:a7:66:
         92:60:fe:c8:7e:f5:2e:2f:8d:37:94:c4:43:6c:b2:9f:89:dd:
         89:55:aa:e4:91:8e:c5:58:2c:44:fe:ef:97:d0:1f:08:f1:7b:
         7b:fe:36:d1:60:23:18:d6:3a:a3:27:9b:27:22:dd:0f:84:81:
         0c:22:81:b9:a7:a6:1c:2a:51:f7:68:5d:07:3f:3e:dc:e9:12:
         18:3b:52:6e:6b:ab:4d:25:0f:16:67:c7:b5:24:74:f8:38:1b:
         96:25:b0:b3:c9:34:85:1e:f1:40:ad:8f:b7:0c:d6:71:20:a4:
         34:d6:73:f0:00:48:a7:52:70:ba:f6:2c:d3:45:72:d4:b0:fd:
         04:05:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:35:47 2026 by rpki-client