Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
File:                     DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft (raw, json)
Hash identifier:          krMdeLnTqYWQE/DEKUKaB4AAibEYPzHZ+vHIqd1Kt6g=
Subject key identifier:   8A:A2:6D:B4:F0:A4:C1:4B:8F:F5:63:2B:66:7A:16:03:B5:13:43:33
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       52ABC62AD088AEA2DD6BB08ACD9635A2CAB86CE5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
Manifest number:          0291
Signing time:             Fri 30 Oct 2026 19:05:19 +0000
Manifest this update:     Fri 30 Oct 2026 19:00:19 +0000
Manifest next update:     Sat 31 Oct 2026 20:37:19 +0000
Files and hashes:         1: 3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (hash: HP4J2y64MnrGo97AVVxTNZwlbJt+G5C7HLlupWEqQwE=)
                          2: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (hash: +QIg7xWQClfmJ0xB8MTxUfh7x0XKQIed7NXD9OnVhFE=)
                          3: DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl (hash: TnRFHxdIyMkKl0N94tG9e16aHEp1Hg++kDwbCQiNCW0=)
                          4: 3137372e33372e302e302f32302d3234203d3e20323632343632.roa (hash: QcocWVTC4nxiZNpY7sExWYi2OgedH9VqVjnI1nEdL30=)
                          5: 3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (hash: bA1pBm3R0Bwdk2BPMDjBK4O4DjGLNwdDdylGRbsRsTY=)
                          6: 3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (hash: 3lyubv2Om8w908amwKFeP7Tw8SA6j1RSNP0dzkgYVWs=)
                          7: 3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (hash: 9amwdFkCYX9rpIKoL2DnnPyCgrYNOmt8C6jpWHRBHGk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:c6:2a:d0:88:ae:a2:dd:6b:b0:8a:cd:96:35:a2:ca:b8:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Oct 30 19:00:19 2026 GMT
            Not After : Oct 31 20:37:19 2026 GMT
        Subject: CN=8AA26DB4F0A4C14B8FF5632B667A1603B5134333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:68:7a:72:09:05:09:c2:12:13:69:fd:f8:
                    63:56:d0:25:26:c2:4e:9d:ca:ad:38:80:c7:aa:81:
                    4d:2c:87:0f:8f:02:ce:7a:21:a2:bd:af:11:af:f7:
                    f2:7d:c2:a1:7f:a2:84:3f:bd:e1:85:ef:76:c3:9c:
                    7b:a1:37:29:44:4e:bb:b4:42:22:e8:f5:f3:8d:2d:
                    27:54:32:51:97:c1:65:61:9d:95:e4:5f:68:d8:b0:
                    9e:c1:e8:2c:c4:ea:95:d5:a8:55:7b:c9:69:d6:15:
                    c6:b5:36:04:61:a0:ad:6f:c0:55:eb:cb:60:07:9b:
                    f6:3f:0d:cb:74:75:c0:75:d7:16:0a:e2:27:bc:91:
                    4e:e2:89:87:8e:49:ef:70:66:bc:5e:44:e1:22:d1:
                    eb:cc:91:62:1e:2e:24:89:63:3f:a8:25:2f:be:ab:
                    1a:26:74:0b:29:b7:ff:26:6e:87:4e:05:37:86:6a:
                    ac:f0:cc:33:ea:0e:26:31:f5:14:0e:14:ee:2f:0f:
                    78:19:6f:db:16:47:df:6b:2d:9f:94:c3:10:95:96:
                    65:22:a6:a3:4e:06:a5:b9:d1:47:3a:f9:43:f4:98:
                    cc:95:6d:bf:eb:41:8a:cc:91:10:55:e2:ca:60:e4:
                    3c:a2:cf:32:9e:28:e2:03:ff:06:ec:63:6e:26:94:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A2:6D:B4:F0:A4:C1:4B:8F:F5:63:2B:66:7A:16:03:B5:13:43:33
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:1f:10:35:09:05:16:af:e4:9d:57:76:68:58:bd:81:b0:
         b4:f0:0f:e3:39:41:f4:bb:00:10:95:d5:59:98:64:78:44:80:
         d1:ab:8f:69:b4:55:bf:05:fe:a1:69:b7:16:e8:e2:c9:89:57:
         53:60:a0:99:b7:76:78:81:de:8d:a4:74:e8:a4:7f:d0:6b:19:
         4d:8b:cb:31:75:a4:2f:0e:84:52:cf:9a:85:5b:5f:cb:ac:21:
         1a:bf:23:17:08:43:80:4c:6f:c3:59:48:51:49:21:08:c9:c0:
         b6:6b:b4:e4:1d:9f:ea:a0:29:34:91:a0:03:70:7d:7b:80:8e:
         19:81:d5:24:db:30:c7:5a:cd:e9:89:a8:eb:90:5d:a9:8c:9a:
         9f:12:70:47:08:44:d3:60:bb:b5:94:cd:2b:0f:97:f1:5f:75:
         3a:c4:a9:c7:80:1d:d3:5a:53:50:81:ed:f4:68:38:58:a5:dc:
         8e:b9:4b:8b:1b:0c:d4:c9:f8:0d:07:67:20:14:c9:04:e6:88:
         9c:1e:1e:cb:ed:20:51:d3:01:5b:9a:25:71:e8:28:ef:d3:d2:
         ca:83:aa:b7:d2:e2:a6:17:66:30:aa:5d:a7:97:b9:f6:5e:52:
         4e:71:3f:c6:16:9a:03:54:f8:ce:c2:97:1b:24:fd:2f:2d:50:
         e3:45:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:47:33 2026 by rpki-client