Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
File:                     314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft (raw, json)
Hash identifier:          /YNDlCMfspISXyqk/X9NE1uS0bu6kJJumGTJObghrVI=
Subject key identifier:   6D:FB:3A:19:A0:F3:7C:0F:1C:8B:01:65:9F:A6:3C:18:16:60:04:49
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       107A50E7E22CC1B5053F98988B2277948712AE5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
Manifest number:          04D6
Signing time:             Sat 31 Oct 2026 09:35:41 +0000
Manifest this update:     Sat 31 Oct 2026 09:30:41 +0000
Manifest next update:     Sun 01 Nov 2026 12:56:41 +0000
Files and hashes:         1: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl (hash: jUdSkoTa1BPAYb6j+bMZeJynP52sUMoPyWofDvij0NY=)
                          2: 3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (hash: HoUvLIl8HePEcrX2UoRuuKDWB/IjHNUJTu4b4dsaoGY=)
                          3: 3137372e35352e3230382e302f32302d3234203d3e20323632353331.roa (hash: QrPEgq8qf94IetiMlwxL37bJ0aAndHB4MPgf10k40/A=)
                          4: 323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (hash: AKP3mmNxQyjhPK33iWfjsbRvSG6or5dFMmjwhwRG0rg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7a:50:e7:e2:2c:c1:b5:05:3f:98:98:8b:22:77:94:87:12:ae:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Oct 31 09:30:41 2026 GMT
            Not After : Nov  1 12:56:41 2026 GMT
        Subject: CN=6DFB3A19A0F37C0F1C8B01659FA63C1816600449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:aa:3e:a6:61:e5:0c:50:78:61:f8:19:3b:
                    0f:b4:c6:6e:d7:9a:61:82:e7:ca:e0:8e:47:c0:c5:
                    1c:be:45:0b:58:92:3a:4f:4d:76:0b:37:49:71:c0:
                    76:ff:c2:ad:40:86:ec:3b:af:ff:a6:2e:98:1b:f4:
                    85:e4:bf:6d:31:5d:27:65:62:72:5b:bf:9d:e8:19:
                    2a:14:ea:44:51:ca:79:ca:90:c2:ec:eb:db:02:ff:
                    d1:34:f4:b0:76:c8:bf:10:7c:23:99:23:0a:75:ba:
                    f6:b1:c8:a0:f2:f0:6a:05:4a:36:de:22:af:8f:8c:
                    df:7d:19:4d:35:bc:3b:ab:74:df:9a:c0:43:dd:e0:
                    1d:74:28:41:d6:58:ad:52:16:7e:d0:da:c8:3c:14:
                    c7:15:0c:62:22:28:63:36:1d:fa:8b:c9:a7:8d:9f:
                    9e:b0:b4:bf:41:81:ca:9e:c7:7f:03:02:4e:18:80:
                    65:65:1c:90:28:1b:37:65:05:eb:cf:b9:30:49:f3:
                    f1:f7:84:23:8b:5c:d4:38:f4:4b:4f:7c:44:81:aa:
                    a7:01:f6:ed:8e:21:b1:75:74:b8:5b:bf:a1:5e:be:
                    08:c1:14:04:ca:91:e4:91:3d:22:6e:89:cd:89:85:
                    2c:b1:d3:76:ff:ff:ae:cb:f1:ad:30:1b:2e:57:20:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:3A:19:A0:F3:7C:0F:1C:8B:01:65:9F:A6:3C:18:16:60:04:49
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:ff:87:2b:60:22:91:d8:0d:09:a3:81:d6:e6:b9:b8:7b:
         6f:81:3e:f3:4d:e9:da:5d:4a:81:82:78:a9:88:64:4e:1d:b0:
         47:e1:8a:1e:c8:0a:e6:25:10:22:bf:bd:88:dc:64:db:0e:d9:
         15:76:3b:4a:d3:69:9f:ed:66:74:8f:5f:1a:d6:87:16:39:23:
         10:0e:7f:aa:23:de:d9:a7:ea:a0:ae:57:0e:a3:08:55:b9:f7:
         07:9b:91:fb:3d:a0:70:71:a2:9f:69:56:24:db:8f:80:ed:f6:
         d7:07:6e:ba:9a:46:d4:5f:3b:09:5a:cb:a3:38:cd:1c:64:a4:
         51:5d:13:13:e2:74:f7:e5:9a:b8:84:ae:b7:1e:3d:11:fc:01:
         5d:f0:65:2e:0e:b8:9d:7c:e1:29:62:32:ec:f2:c1:ad:9d:5a:
         c8:1c:66:81:65:dc:a8:e9:95:73:21:2e:c5:ce:0b:f1:cb:84:
         a8:e5:7f:e1:59:50:cf:08:f6:f0:63:bd:b0:d6:2c:ee:f7:2c:
         ba:e7:b5:2b:3a:4d:a2:96:61:0f:be:8b:8f:0e:fe:72:c3:29:
         08:84:7f:6d:98:1d:aa:30:d4:5b:38:69:cf:71:d0:83:c7:54:
         d0:04:9c:ae:f6:50:1d:6b:cb:56:20:8a:28:ea:7d:f9:04:8e:
         82:8b:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----