Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
File:                     D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft (raw, json)
Hash identifier:          mpbp8dgg2q30LLA9RPn5AcEMGKMZ3Fg8O9fonIrGF2o=
Subject key identifier:   18:6E:AF:64:83:9C:63:D8:A3:F1:68:CB:A9:6D:83:7E:B3:4F:87:20
Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC
Certificate issuer:       /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
Certificate serial:       3D09FB86AF112E5B5E52B6EAE05F736DC261C8EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
Manifest number:          0228
Signing time:             Thu 29 Oct 2026 15:52:42 +0000
Manifest this update:     Thu 29 Oct 2026 15:47:42 +0000
Manifest next update:     Fri 30 Oct 2026 19:30:42 +0000
Files and hashes:         1: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: FCQaEvajlMSAeHHgctlNEKCcfEhOmFtR5ukcO+ic2sw=)
                          2: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: ZV+noFTPIQ+J/lIiAPeujpCr5ubJJ0yh9hPx9nnWckY=)
                          3: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: uS/c929Vp5K/OpAViuPnotBMsWLojeefMRwfLNOoitM=)
                          4: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: VqOssom1ZFq5PupneyV1GHkybA+avnvttosL6aoh/Xw=)
                          5: D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl (hash: cFOuiXcSb1IAJDa39ZrLs4Kc58p0Wc4vHo69ezOkTZg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 19:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:09:fb:86:af:11:2e:5b:5e:52:b6:ea:e0:5f:73:6d:c2:61:c8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
        Validity
            Not Before: Oct 29 15:47:42 2026 GMT
            Not After : Oct 30 19:30:42 2026 GMT
        Subject: CN=186EAF64839C63D8A3F168CBA96D837EB34F8720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:35:a1:af:a1:98:05:8b:69:7e:67:56:f5:
                    28:bd:ab:5f:cc:7a:0d:76:e3:ee:1e:16:0d:4d:89:
                    38:17:c6:f1:de:3c:4b:80:20:64:41:d5:7f:c4:4b:
                    b6:95:eb:d3:5b:23:d5:5e:c2:20:a3:21:86:7d:49:
                    f5:67:cf:db:60:0d:63:0e:27:c5:51:88:21:01:de:
                    c3:c7:6d:5c:fa:9a:a7:1c:53:f5:6c:04:5f:5b:76:
                    c5:af:84:eb:15:b2:54:d9:78:b1:50:17:3a:26:ed:
                    06:36:91:e2:f3:ed:34:87:70:e1:4c:7a:2c:1f:cb:
                    d2:85:a1:50:d9:44:56:1a:0c:ed:5b:16:ed:22:33:
                    e7:e5:9d:68:12:7b:ab:51:f8:e8:3b:54:6a:b9:0e:
                    17:65:7a:19:df:91:f3:48:3c:54:45:81:ae:58:ed:
                    9b:49:af:5f:49:0c:fa:8b:3f:78:87:3d:d0:45:e0:
                    07:cd:72:38:5e:90:a3:0d:3a:63:95:04:d6:40:a2:
                    df:22:21:33:66:aa:f9:9b:85:01:d8:95:3e:f5:01:
                    92:20:91:c8:5e:2a:9c:40:d9:32:85:aa:c2:2f:53:
                    dc:f2:f5:66:7e:6d:33:b8:d0:2a:ca:35:7f:eb:a3:
                    86:f6:89:d9:05:1b:ef:41:68:a7:f6:5f:bc:9f:6f:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:AF:64:83:9C:63:D8:A3:F1:68:CB:A9:6D:83:7E:B3:4F:87:20
            X509v3 Authority Key Identifier:
                keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:88:9b:8c:a8:63:a9:b3:d3:64:3c:26:08:0c:70:ac:ab:
         d7:3c:54:5e:77:23:dd:8c:0a:10:55:7c:ff:51:f8:4c:de:bd:
         45:62:65:61:6c:00:ed:60:48:48:f9:d4:d6:0f:d8:e5:17:f5:
         8a:12:cb:20:59:d5:ed:9e:a7:c1:37:65:34:55:09:8d:e9:77:
         3b:39:5e:1f:9f:2c:b1:7e:af:f3:7f:50:b6:50:03:d8:71:a1:
         2e:6e:9a:97:9e:69:fb:78:0c:80:3f:b3:72:a8:ea:24:4d:4f:
         11:8e:51:56:4e:f4:11:fb:4e:08:70:b6:50:ae:4a:66:83:c4:
         48:23:4c:c4:9e:57:e9:45:38:2e:f1:ea:46:86:7e:bd:f4:97:
         29:90:05:1c:c4:dd:84:57:eb:0b:12:e7:f2:54:8b:92:d5:32:
         43:3d:fc:0e:be:9a:4d:57:81:d7:82:e0:81:1f:19:fc:7b:d0:
         fb:a2:02:0c:dd:b4:af:50:0b:74:36:87:ca:25:09:2d:a0:dd:
         e8:5f:c3:e7:ec:7c:54:11:c9:45:79:8f:99:7c:80:cb:15:a4:
         13:23:3e:45:83:f3:66:60:6b:68:85:65:b0:18:9a:d0:5a:f3:
         bb:f6:12:62:12:ae:4e:5a:e5:33:a2:67:6c:e2:f1:92:9f:7e:
         70:49:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:05:39 2026 by rpki-client