Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
File:                     FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft (raw, json)
Hash identifier:          VT5uEulPEinmcThKWNRz9uNUnsPsIVTDxhG2+5T7koU=
Subject key identifier:   C4:D4:11:CC:1F:89:61:D4:D9:1A:32:AA:02:67:66:74:5A:7B:61:3F
Authority key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Certificate issuer:       /CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
Certificate serial:       75F717A0C65B35A6AF2F498A4004356A3EF3A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
Manifest number:          04D4
Signing time:             Wed 28 Oct 2026 10:57:25 +0000
Manifest this update:     Wed 28 Oct 2026 10:52:25 +0000
Manifest next update:     Thu 29 Oct 2026 12:36:25 +0000
Files and hashes:         1: 3230302e3132342e3136342e302f32322d3234203d3e20323730323737.roa (hash: J8jIMCvEjl6vVle5cWfCfgA491Vo8PDn8PBaUGMUX48=)
                          2: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl (hash: mlf+cX1+VlMJ42CC9YtV0dAIXxfVtL665gMtxmqhTDo=)
                          3: 323830343a363938633a3a2f33322d3334203d3e20323730323737.roa (hash: orL7FTz+mFf13FHlczzu0BX6cB95fhLXUECmK+7Vv0c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl
                          rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 12:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:17:a0:c6:5b:35:a6:af:2f:49:8a:40:04:35:6a:3e:f3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Validity
            Not Before: Oct 28 10:52:25 2026 GMT
            Not After : Oct 29 12:36:25 2026 GMT
        Subject: CN=C4D411CC1F8961D4D91A32AA026766745A7B613F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:b0:f5:c2:ac:a5:35:08:6d:ff:bf:38:ee:
                    91:86:57:25:19:77:b2:80:6e:15:40:c4:af:55:78:
                    e6:33:6d:fe:b3:10:25:0f:c6:ad:1d:98:5a:e5:3b:
                    37:63:81:9e:02:51:9a:b5:a7:3d:3f:8d:67:47:75:
                    a0:4d:ae:61:6c:99:e5:b9:fc:8f:9b:70:1f:99:21:
                    a3:64:15:7c:76:07:fe:15:a9:b7:37:a7:8b:b4:24:
                    b7:52:ee:86:ea:eb:60:e5:bc:c4:71:a5:df:ee:83:
                    b0:06:1e:52:6a:3b:3b:22:d3:62:bb:a6:87:94:b2:
                    86:62:7d:69:ea:a8:e6:e0:d1:c3:e3:be:5c:e2:6a:
                    f0:ff:0b:4d:03:12:5e:94:bf:0c:80:37:5b:42:08:
                    32:05:9e:bf:e5:d6:fa:4e:6a:4a:01:a2:93:f9:ae:
                    1f:07:9d:b6:d8:74:12:68:bb:9a:1e:8a:68:94:7a:
                    26:82:69:de:ef:4e:93:c5:2d:0b:9e:9d:ad:91:3d:
                    de:b6:a7:c8:2b:05:2a:8b:b8:fa:8d:fa:55:f0:b3:
                    12:28:7d:37:b5:a6:6b:49:19:fd:51:a3:c8:f0:93:
                    2b:64:bc:24:35:c3:3f:00:ff:bf:88:92:c2:6d:a5:
                    00:ac:2a:ef:40:bc:4e:e7:b4:76:76:f5:0b:cd:aa:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:11:CC:1F:89:61:D4:D9:1A:32:AA:02:67:66:74:5A:7B:61:3F
            X509v3 Authority Key Identifier:
                keyid:FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:41:37:37:4a:e2:b3:59:8a:c8:b5:87:a6:e6:bf:1d:6e:
         1b:50:18:99:63:f8:c9:4f:36:4d:d1:d6:e4:e5:72:25:2f:40:
         d2:a3:1c:5d:03:93:55:35:f5:90:87:01:9a:cf:c5:1b:da:51:
         8f:13:55:af:5e:66:83:04:1a:e1:c3:7d:49:c2:17:91:be:0f:
         fb:41:59:c2:ce:14:e2:ba:e7:0e:e5:7b:aa:97:19:65:1e:e0:
         27:0e:fb:a0:1b:c0:1c:a9:65:ce:8b:39:2b:6a:c2:3a:fe:19:
         67:30:12:5a:a7:1b:0b:2f:28:c7:8f:33:bb:88:f0:34:76:55:
         71:68:7d:f6:a8:00:b5:2a:1b:0a:dc:f0:17:48:49:53:2a:3f:
         5c:9a:ea:a2:86:26:61:24:10:76:e0:40:51:42:8c:bc:b9:a1:
         6d:b1:59:12:f7:8e:a8:7c:15:1f:ab:ab:2e:aa:f8:2f:47:b0:
         46:c9:7a:2b:66:ff:80:89:79:9f:b9:82:58:09:44:b5:16:31:
         20:b1:84:ce:52:bd:59:a2:a1:41:02:02:9b:35:ac:04:58:fc:
         b6:8e:f1:7e:be:4e:32:65:e1:1c:e4:a0:56:0c:9b:74:36:cb:
         2d:66:81:b8:75:c9:cd:ee:f3:73:87:a0:0d:07:2e:dd:e1:fb:
         79:98:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----