Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
File:                     424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json)
Hash identifier:          wVCQgOKqt7P4VdzktTjrH7euULZ8RkYkrfUa4IfzGjA=
Subject key identifier:   C6:5A:B0:95:51:29:A9:D7:A4:B3:E8:16:D9:BA:9F:BB:18:9F:A9:E9
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       79252D9DD4C52CED11BE0399E4DE395EAE131832
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
Manifest number:          04E9
Signing time:             Sat 31 Oct 2026 20:38:37 +0000
Manifest this update:     Sat 31 Oct 2026 20:33:37 +0000
Manifest next update:     Sun 01 Nov 2026 22:10:37 +0000
Files and hashes:         1: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: /3sqQIBTa3hxn0UdcKO6Ja3KscMr40/b2Dee/G49wlg=)
                          2: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: dZA5MqLrfmhU1WJ0zgA4uW539AF+sTI7AJe3Edetv68=)
                          3: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: TMYk7Ho0KodBzVtCHwIpxNLPHTRDuFaSSLYPzV8TGDo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 22:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:25:2d:9d:d4:c5:2c:ed:11:be:03:99:e4:de:39:5e:ae:13:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Oct 31 20:33:37 2026 GMT
            Not After : Nov  1 22:10:37 2026 GMT
        Subject: CN=C65AB0955129A9D7A4B3E816D9BA9FBB189FA9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:08:4b:9d:34:09:22:c1:48:58:47:e1:fd:
                    f6:f3:97:11:0b:37:7f:2f:bb:f1:1b:1b:67:d7:0e:
                    74:e2:d6:db:3a:12:44:58:01:55:d8:42:0f:5e:53:
                    80:16:5e:17:c8:18:ce:86:5d:c5:38:58:7d:3b:29:
                    95:04:5b:1a:3f:de:e5:aa:53:19:02:fb:95:aa:d6:
                    f6:79:25:3c:bc:11:e5:b7:db:d0:f7:19:3c:f6:65:
                    54:6c:65:6f:aa:54:8b:ab:f6:24:c8:26:8c:f9:80:
                    ac:5d:2f:e9:66:c3:d9:df:39:28:02:d5:c2:a1:16:
                    47:97:5f:1c:0e:c2:ac:5d:fa:d2:f4:e4:40:4f:59:
                    7d:ad:11:6b:7d:4b:25:1a:54:ca:cd:a6:6e:5f:ff:
                    bf:e5:25:4f:13:77:5c:73:8c:0d:b6:64:14:e6:48:
                    66:95:e4:db:55:36:c2:a3:6c:d4:4a:65:59:2b:48:
                    0c:99:88:54:58:ea:8d:4c:67:d8:ab:ff:68:43:ab:
                    f6:8a:dc:c1:89:0b:fb:94:76:96:59:07:5d:f9:81:
                    40:25:6f:f1:be:66:6f:d2:e1:69:60:e3:b4:a3:9f:
                    ff:63:ef:34:0a:18:bf:56:0b:83:3c:c5:31:fa:d0:
                    65:85:53:87:d5:8b:0e:d0:74:73:b1:4f:4d:3f:1d:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5A:B0:95:51:29:A9:D7:A4:B3:E8:16:D9:BA:9F:BB:18:9F:A9:E9
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:da:e5:e0:55:ab:e6:69:61:b3:86:1a:4f:ac:cd:c5:23:
         9c:3d:6a:32:56:6a:9a:20:a3:ae:47:c0:cd:16:18:20:11:c2:
         40:33:4b:fd:28:7c:8e:44:fe:73:5e:bb:05:de:e5:54:43:74:
         f7:3b:13:99:b2:a1:53:7c:0d:05:68:ba:45:13:2a:ea:61:c3:
         f6:99:ab:83:94:6f:99:92:cd:57:a7:bb:d4:d5:a4:58:14:a6:
         1f:7f:c8:ef:59:13:3f:d0:9b:28:62:7a:26:f8:57:ca:5e:6a:
         33:20:9b:d3:ee:4a:13:44:7b:12:a9:ea:78:a3:f4:f5:9f:23:
         c1:fe:77:c6:f4:36:bd:ef:a3:a2:37:0e:8f:8f:e0:39:c8:a1:
         44:b3:c7:fc:7d:3b:2c:6a:59:d7:29:db:98:e1:30:59:26:ad:
         b6:79:13:6a:df:5c:d5:bc:bf:c4:64:87:68:5f:93:2e:92:d2:
         07:47:d1:eb:6c:9e:f9:92:a1:f5:c5:32:01:4c:ff:d3:34:01:
         a0:13:68:60:bf:20:6f:20:53:6f:a7:c1:3c:d1:43:f6:3f:62:
         56:e5:22:c6:1d:15:97:46:45:3e:cf:38:ac:73:99:3e:cd:15:
         a3:be:d9:f9:2c:33:64:7e:25:fa:f5:6a:d9:40:75:0d:66:c5:
         a6:45:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:40:47 2026 by rpki-client