Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
File:                     C3976BFC098E04D93A5507BBB046C3608B889670.mft (raw, json)
Hash identifier:          T3iQQ4i/tYwqs/YSCGtsRb4yjradOcFRG1AasIdFkPg=
Subject key identifier:   AB:9B:DD:0F:AE:49:38:F6:EB:F6:68:AC:1D:62:F7:E7:38:9C:91:DC
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       28E52D50F5641189C1715FD1B2D5514D949FCB7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
Manifest number:          0589
Signing time:             Sat 31 Oct 2026 01:00:00 +0000
Manifest this update:     Sat 31 Oct 2026 00:55:00 +0000
Manifest next update:     Sun 01 Nov 2026 01:00:00 +0000
Files and hashes:         1: C3976BFC098E04D93A5507BBB046C3608B889670.crl (hash: fXaXMOJiGh3DWeMXMc9A9Azne4WpnysoHKde4um9Nx8=)
                          2: 323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa (hash: 3pDxFqA/yFfHk+CAtGXogl/uiNeu0UZ54S2QUNUdoNA=)
                          3: 323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (hash: ZbjsSwMRWm9SrcYoBYdOEKdQGPU9q8shbg/hbHCpkQk=)
                          4: 323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa (hash: znG6mVdtuJf7OTpvcebCRJ6rRcTUzVPFmAEWycFohbI=)
                          5: 323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa (hash: a+0x97JcmUKYtxw1wlbVLfBbMv5HN34KM6tNZbfzoCk=)
                          6: 323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (hash: tMQrDW5AQq55OX25vS7sR8u3kgrjVThIuO5ojnSvHXA=)
                          7: 34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa (hash: 0m8+zDBDxvXL3n0SvabbxLxFpASSiSoHHAJ2i6fBMTU=)
                          8: 323830343a363631343a3a2f33342d3334203d3e20323639353332.roa (hash: FRp9INqXDhAYwybC+EuExcMHfp69A1qO1NeFzfuwAqE=)
                          9: 34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (hash: LaVXT9Gat57OXh1VksRLfzPee1kgO9ByuhkPIGFEVpA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e5:2d:50:f5:64:11:89:c1:71:5f:d1:b2:d5:51:4d:94:9f:cb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Oct 31 00:55:00 2026 GMT
            Not After : Nov  1 01:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:ce:2b:8d:bb:45:bf:75:df:aa:d8:62:1b:
                    ad:0a:a3:56:26:1b:27:2d:29:24:ce:9f:b2:26:cc:
                    f5:df:f1:74:10:56:90:0a:35:bf:94:b0:59:fe:c3:
                    95:8f:99:c9:a1:0e:77:da:4f:7d:83:c6:80:3a:f5:
                    06:36:5b:9f:56:2a:77:dc:bc:0f:8f:dc:d7:ce:39:
                    47:15:ac:06:aa:71:3c:66:97:b7:74:5f:34:aa:e6:
                    90:7c:26:18:77:2d:bb:77:00:88:8f:df:bc:a5:0a:
                    ab:f4:f0:9c:c5:59:f3:b2:a5:66:1c:60:d8:29:11:
                    a6:10:4e:2a:ab:d3:25:25:ef:19:28:58:b0:dd:b5:
                    7e:3e:66:17:4c:0b:a5:fe:95:14:36:a1:76:31:e0:
                    04:55:20:f4:d5:98:06:cb:5a:fc:30:9e:17:eb:ce:
                    2a:2b:57:98:89:ef:b8:b7:20:5c:e2:8d:e9:06:82:
                    61:71:59:7b:d9:01:56:79:13:97:ca:16:4b:42:57:
                    ac:a3:cd:02:af:01:4e:d3:ca:fc:28:cb:f9:ef:ad:
                    5e:13:07:4d:99:57:dd:55:3f:4a:4a:16:4b:3d:0d:
                    c6:c1:3e:1c:f0:1c:b0:4a:14:05:e0:2a:f1:d0:e6:
                    df:e6:bc:99:08:ca:63:8b:7b:74:95:2d:eb:21:4e:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9B:DD:0F:AE:49:38:F6:EB:F6:68:AC:1D:62:F7:E7:38:9C:91:DC
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:f2:3c:cd:07:bb:71:5b:88:d0:34:c1:5d:1f:d6:5b:00:
         7b:30:55:6c:f3:89:d0:5c:94:8a:65:d9:03:57:92:3b:4e:26:
         e2:85:5d:5f:f9:b3:64:8c:7c:d2:a1:79:3b:55:f1:c9:39:d4:
         6b:fa:4d:f4:3d:71:0e:0c:8f:60:ad:2d:95:7a:d4:ad:1b:4a:
         7e:98:00:90:83:a3:9e:52:b1:22:2f:bb:ab:b6:aa:ab:28:49:
         bb:bc:15:05:a1:83:ec:8e:82:1a:1a:24:5e:be:7c:6c:33:96:
         81:3a:df:ce:f7:69:c0:b4:cf:64:1b:b1:0a:ec:70:57:8a:d5:
         87:af:58:c7:0e:e6:73:56:e3:1f:f4:0f:89:9f:8b:fb:f2:dc:
         3c:83:6f:06:2f:10:a5:30:9f:fd:6b:4d:1c:fc:fc:75:b6:5e:
         08:ea:73:e9:e6:9c:59:57:d2:33:5a:59:74:61:f9:7f:ff:6a:
         09:fe:e3:d2:49:2f:50:be:b3:ce:14:b6:b3:7f:bd:5a:74:7d:
         c2:77:ef:94:c4:1c:57:5e:d9:ff:74:de:61:4e:f0:fe:4a:e1:
         7c:ef:39:38:eb:8b:a5:45:d2:e3:92:dd:fb:6d:64:6b:5a:df:
         f3:27:62:11:a7:15:30:bd:6c:b4:be:a8:7c:00:2f:9d:19:7c:
         23:6f:ea:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----