Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          99B3XS0Mn7FQqIckvNvxvLDiUpsUQYufclV6vEiBSSk=
Subject key identifier:   D5:57:17:46:E0:13:5F:A8:09:B4:0B:8A:8F:6D:AB:61:79:92:BF:56
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       1A0E8BBA64BCEAAA48FB03A430ECFBB51B3B3594
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          02ED
Signing time:             Tue 27 Oct 2026 21:28:23 +0000
Manifest this update:     Tue 27 Oct 2026 21:23:23 +0000
Manifest next update:     Thu 29 Oct 2026 00:19:23 +0000
Files and hashes:         1: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: RbML9he/VmMaP1ajnHuOX5kL7/vOCfRUNYMMK+cFvpQ=)
                          2: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: zJIEvaM0WJcxrr33cCNOh+VZsaf0oLfi9pDp+uNU3vQ=)
                          3: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: DmzsObsrsiYZ4OK3Z0PwJDOKvtBM6IpTL3fvwt7Ze2E=)
                          4: AS263509.asa (hash: rFmj0qgkRzo+dZnUTWdq4PTlsjp0iMSBPFOL0EFMTkU=)
                          5: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: PnlRhvcAbWpprsjTQ+t1SYUVrs72aNfkdI9Tn6VRsSc=)
                          6: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 5kLhybl24AOxKrKqNUo78ON3LjewIgoUurgRdbYZj3I=)
                          7: 3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa (hash: ZIrz1nDyOgw9DL/Cn4VcYzDTXSlfJne+sphMDrtPGvI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 00:19:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0e:8b:ba:64:bc:ea:aa:48:fb:03:a4:30:ec:fb:b5:1b:3b:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Oct 27 21:23:23 2026 GMT
            Not After : Oct 29 00:19:23 2026 GMT
        Subject: CN=D5571746E0135FA809B40B8A8F6DAB617992BF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:81:af:30:3a:0d:9f:ee:ee:c3:a5:76:3b:
                    1d:f3:ed:b7:dc:af:d7:12:79:24:76:4f:cf:31:a8:
                    3f:0e:46:80:70:00:a4:f6:ce:76:e9:59:cd:1b:79:
                    a9:64:a0:9c:a6:59:85:82:d8:d7:c4:2b:98:67:a4:
                    63:cd:b9:dd:4e:d1:f7:f1:78:0a:f6:77:c3:a5:56:
                    01:36:e1:64:6f:5e:14:e7:82:cd:e8:6f:e3:28:d3:
                    80:95:a6:d1:98:ea:f4:9d:81:4d:4d:8f:66:1d:30:
                    c2:90:ed:73:f5:14:c7:7b:33:03:46:ec:f8:ba:80:
                    c9:87:82:44:93:6c:d0:39:dd:dd:ae:ed:6d:ce:d0:
                    85:5e:a8:a3:95:fc:69:91:d8:51:07:8b:bc:8a:fc:
                    37:77:b6:11:94:a9:88:17:0e:5f:37:76:ac:bd:bc:
                    3d:d3:f8:cd:bf:5e:f4:8a:2a:02:17:4a:ca:cc:2d:
                    4e:db:13:2c:6b:c2:c7:aa:82:cd:5a:63:47:2b:b8:
                    b3:6a:9f:3e:45:28:77:f6:5a:51:2b:ee:35:4f:da:
                    1f:c9:3e:55:ca:09:98:36:58:7c:be:db:3d:18:cd:
                    65:4d:45:c7:cf:c9:1f:d7:82:81:ca:04:40:ee:bc:
                    87:5d:20:23:26:9b:83:02:91:4a:ad:a9:c8:f3:80:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:17:46:E0:13:5F:A8:09:B4:0B:8A:8F:6D:AB:61:79:92:BF:56
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:25:ed:f3:00:ec:80:3b:aa:b6:65:57:08:7e:bf:8a:a8:07:
         d2:07:07:6e:dc:d5:67:58:a4:8f:2d:21:cf:b2:cf:c0:78:cc:
         89:96:2a:37:df:6a:e5:9e:14:bd:a4:09:66:d6:8c:78:a1:54:
         b5:ed:e3:e2:97:67:34:50:51:e2:be:9f:1f:d8:b9:23:89:37:
         2e:61:4d:11:45:7c:68:ba:4c:bc:c5:0c:be:20:ed:f1:f1:cc:
         3e:ac:7e:ec:d0:20:1e:c1:e2:98:ce:e2:4a:09:17:16:b5:39:
         9e:33:04:d0:71:04:d2:1e:31:75:dc:10:36:3c:42:d4:a9:7b:
         4e:04:ba:c5:9e:f3:10:0d:21:97:52:e1:38:9c:a9:2d:30:49:
         72:fb:bf:e8:e9:87:09:86:68:d5:22:cc:4a:4f:30:6f:c4:37:
         92:2d:fd:ff:25:33:a0:27:d6:d8:56:4f:09:0e:b3:88:5b:95:
         36:b7:ba:88:54:7b:97:c1:b7:49:1b:03:16:87:17:2b:cd:0c:
         bd:fa:9e:5c:73:cc:c6:23:da:2c:6a:31:8f:2f:18:1d:10:be:
         68:8d:c7:f8:e7:94:df:fe:68:6e:6e:67:9b:d7:c8:a9:04:4b:
         11:94:05:df:7b:10:00:9e:7f:20:0a:e8:b9:f8:d1:e2:ea:01:
         d1:6a:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:49:19 2026 by rpki-client