Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
File:                     4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft (raw, json)
Hash identifier:          1ZdBDBnGb7Wnu5lt8gG25aN0XF3rh3OiUDkC+lEhN1s=
Subject key identifier:   3A:7C:66:48:06:D7:F7:8C:B6:98:69:BC:FB:AE:D8:91:3E:7E:15:87
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Certificate issuer:       /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial:       1D3FDF94BFD9EE2486CB2159A356A3EDDAEC5AD7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
Manifest number:          04E0
Signing time:             Tue 27 Oct 2026 18:17:52 +0000
Manifest this update:     Tue 27 Oct 2026 18:12:52 +0000
Manifest next update:     Wed 28 Oct 2026 19:44:52 +0000
Files and hashes:         1: 3137392e3130392e38302e302f32312d3234203d3e20323633353832.roa (hash: k0QaN0Xzr0Me+/8RIti1hztDlTpfQSBYLc0Lm5bMeMk=)
                          2: 4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl (hash: RwaIXq/qJikiedrefU5s2bEItWh9PhWF+Lnsembtakc=)
                          3: 3133312e3235352e3230342e302f32322d3234203d3e20323633353832.roa (hash: cniqhdpcvtuuOAMcwIb0kYAvehMpV+qrGIJ9JMnFwck=)
                          4: 3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (hash: S/sgvUl2xFvt52MJPUZCM7qWhvaQ4IMQxb1FiuLG1WU=)
                          5: 323830343a6636303a3a2f33322d3438203d3e20323633353832.roa (hash: 5vnYdXuW/wBGj1jxK3JU+yljvnLX+X3G48MwKOnazDk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
                          rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 19:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3f:df:94:bf:d9:ee:24:86:cb:21:59:a3:56:a3:ed:da:ec:5a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
        Validity
            Not Before: Oct 27 18:12:52 2026 GMT
            Not After : Oct 28 19:44:52 2026 GMT
        Subject: CN=3A7C664806D7F78CB69869BCFBAED8913E7E1587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:b2:69:59:6c:91:16:8d:b7:58:70:c8:c1:
                    2a:bb:02:ea:bb:95:8d:ed:fa:69:a6:91:34:4e:c3:
                    52:ee:dc:d4:1f:7b:36:11:ff:b7:88:e4:38:18:b4:
                    48:c2:ff:d5:88:ef:02:ae:31:c2:41:69:c4:34:e8:
                    58:1d:9f:22:df:76:1a:aa:a7:a0:8e:2a:ec:db:62:
                    9c:14:60:cf:3c:22:55:a4:aa:19:55:81:18:c4:62:
                    96:d8:2c:99:76:ae:b3:f1:b8:9f:8f:d9:71:de:11:
                    f8:3c:b8:0f:1c:88:79:54:7d:20:ea:1d:76:64:f5:
                    90:93:33:9d:ea:13:49:c8:26:57:5e:2e:0b:8a:6f:
                    b8:4a:dc:c4:44:b4:63:e9:6e:6d:04:3b:38:78:76:
                    15:75:5d:96:d4:77:94:4f:46:29:08:22:85:58:48:
                    66:59:47:9f:61:ef:1e:98:56:6f:ec:98:9d:10:63:
                    bb:59:71:d6:94:8e:59:43:c0:1f:72:ba:a1:12:9c:
                    c1:5c:74:bd:50:c9:d7:16:24:0e:6b:ea:6a:11:da:
                    26:2c:37:25:e0:84:34:d5:f5:85:23:ec:34:c6:27:
                    e8:89:ae:53:70:31:7d:ac:51:76:7d:ba:6a:d4:29:
                    2b:c3:ba:ac:f6:71:cb:79:2b:55:b4:63:7f:61:1b:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7C:66:48:06:D7:F7:8C:B6:98:69:BC:FB:AE:D8:91:3E:7E:15:87
            X509v3 Authority Key Identifier:
                keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b3:ec:9d:7d:81:10:40:19:82:82:60:5d:a6:bb:2e:5b:ba:
         02:ef:15:d7:ef:e0:96:d2:8c:a5:6c:6e:7a:03:06:ef:ed:0c:
         d8:db:be:59:96:a9:61:92:46:85:3a:49:1a:53:83:1b:3d:d9:
         b7:80:dd:97:fb:34:b5:ed:61:96:22:3d:be:23:08:2a:5f:eb:
         aa:d6:bb:27:a0:fd:49:16:4f:da:81:6f:74:40:51:4a:85:d2:
         19:7f:e1:e3:8d:e7:12:6f:aa:32:90:de:53:52:eb:cd:2b:67:
         40:c4:c3:e0:cc:f8:ca:36:5b:f0:7b:ea:92:e4:24:22:d2:3c:
         c0:9c:97:b8:de:00:f8:d9:20:2d:dd:06:58:32:56:87:be:af:
         b8:7d:cc:20:51:50:26:18:23:68:12:d1:fe:3a:aa:ee:d4:b7:
         b9:3d:56:45:ff:e2:35:3b:2f:bb:e6:14:3f:cc:3f:a3:53:17:
         97:ed:73:70:4b:c0:db:2a:82:95:00:48:95:c8:34:03:31:e9:
         f0:bb:0f:fb:25:f0:01:d3:20:04:44:90:dd:82:f9:a8:9d:bd:
         f3:e0:ee:ca:7e:03:6a:84:95:93:47:6c:da:d4:73:e7:22:77:
         b0:7a:cf:38:fc:5d:71:89:1f:13:d9:8d:86:1d:4e:77:f3:c0:
         ad:6e:e9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:56:02 2026 by rpki-client