Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
File:                     DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft (raw, json)
Hash identifier:          HokFZWRanR9/nWTWfMtH9ihQiIUK3aiB8Rk+5zzYNoo=
Subject key identifier:   06:B5:32:32:28:43:29:B0:70:08:92:54:C6:98:B5:B5:87:7F:96:89
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       18DD1187BFE0BD71618F88B566A860D12D874E5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
Manifest number:          04E8
Signing time:             Sun 01 Nov 2026 01:19:06 +0000
Manifest this update:     Sun 01 Nov 2026 01:14:06 +0000
Manifest next update:     Mon 02 Nov 2026 02:26:06 +0000
Files and hashes:         1: DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl (hash: MMIXInLpKCBXtsvKW9VHpSGyd0T1ce28jvOHuTHHNww=)
                          2: 323830343a386230303a3a2f33322d3438203d3e20323733373036.roa (hash: iXdeQrsL/ZXZtkAfzQDEs5xat1lBEQAGpkM4tLfClhw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 02:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dd:11:87:bf:e0:bd:71:61:8f:88:b5:66:a8:60:d1:2d:87:4e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Nov  1 01:14:06 2026 GMT
            Not After : Nov  2 02:26:06 2026 GMT
        Subject: CN=06B53232284329B070089254C698B5B5877F9689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:89:b6:65:91:db:59:fe:e4:c6:e3:e7:46:
                    0f:a9:c3:e2:41:58:34:e2:f7:53:f8:8a:8f:85:f4:
                    d8:89:6a:7b:ee:62:93:57:1d:b8:14:d5:50:e2:96:
                    90:df:06:47:7b:34:dc:d7:fc:8d:64:fd:06:dd:af:
                    5c:85:8d:e1:0f:d7:2e:c1:ce:b7:ca:3d:8e:fa:37:
                    b5:0f:7e:01:e2:c7:8f:c9:fa:23:c1:02:95:94:04:
                    50:13:75:7a:fd:ac:6d:73:34:e9:9c:34:d9:a5:9f:
                    52:61:c2:04:2d:92:a9:02:28:fb:40:ec:32:82:ba:
                    94:1b:a9:0b:33:56:ae:c2:98:ba:99:28:df:f5:1a:
                    be:95:bf:b8:c4:4e:11:23:61:2b:b6:c2:60:1e:2e:
                    dd:db:43:7f:3e:4a:25:9c:a6:86:13:1f:36:91:a3:
                    c3:33:2d:cf:18:df:72:d8:1c:d9:98:fc:03:b6:81:
                    ae:7b:23:ea:5b:1c:4d:1e:56:09:41:47:a6:5d:f2:
                    0c:e8:5c:44:81:4d:ff:b5:7a:ce:74:43:fb:42:5c:
                    a6:e9:f0:36:63:82:5e:d6:85:35:9e:41:af:8c:e9:
                    4b:3b:69:53:1c:8d:71:1f:37:4d:d9:21:d0:35:b8:
                    0a:87:52:dc:65:ac:23:b5:52:8f:b5:f1:b5:2b:cf:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:32:32:28:43:29:B0:70:08:92:54:C6:98:B5:B5:87:7F:96:89
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:56:ea:94:b7:d4:1b:53:f6:b0:c3:82:14:a8:d4:d9:64:77:
         22:e4:4f:0e:7c:38:33:9a:f3:93:12:1b:1c:36:aa:fa:ce:0b:
         b3:96:0b:e9:79:ad:c4:ed:53:a5:d4:4f:fa:25:11:c1:6a:86:
         8e:1f:24:53:20:8d:86:3a:b7:de:44:87:b6:73:e5:c0:cd:f9:
         d6:32:44:a6:74:fa:60:c0:9b:79:5d:47:f1:52:16:53:36:34:
         9c:1f:86:71:5a:a9:3f:16:cb:d3:f1:7e:e5:bb:76:5f:f9:72:
         ea:3a:4f:d1:bd:d2:36:04:5c:4c:08:ce:83:33:22:94:8b:fa:
         e7:3d:9b:7c:6e:64:0e:08:b6:c9:e3:81:3a:72:2b:3d:a9:db:
         79:bd:59:35:e0:0d:49:fe:a2:40:d6:65:c6:14:fa:48:51:4e:
         08:9c:1b:dc:42:38:98:24:39:d2:e6:31:f7:8f:c2:e9:34:6c:
         fc:33:d7:49:d5:17:6f:d3:f9:7a:9f:f9:8c:69:45:da:9b:0c:
         41:e1:b9:c5:2e:62:7c:f3:a5:a7:e1:aa:24:53:33:73:1b:54:
         cf:66:54:06:a6:56:23:c3:35:4b:84:93:78:2b:26:f1:dd:dd:
         1d:94:04:50:f6:c2:38:e3:46:30:4d:1c:7f:db:0a:17:25:ae:
         83:19:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:37:51 2026 by rpki-client