Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
File:                     36ED969D92322E6C7F28A050D3ABC47947497160.mft (raw, json)
Hash identifier:          eybKfQvDlxMEiJHxrWJZ67e3YgemYoGDOBKHCrk0Rlc=
Subject key identifier:   41:50:25:3D:C3:9D:AB:A6:4B:EA:47:A1:DB:7C:DC:C9:88:30:E4:D3
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       7AB766C182DBBE4B34AC7481A5CFDDDA3FC07688
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
Manifest number:          04A1
Signing time:             Sat 31 Oct 2026 12:28:33 +0000
Manifest this update:     Sat 31 Oct 2026 12:23:33 +0000
Manifest next update:     Sun 01 Nov 2026 15:35:33 +0000
Files and hashes:         1: 36ED969D92322E6C7F28A050D3ABC47947497160.crl (hash: BjXWfhia305buEllqmh2UQ5eiDXfT2EFmgCTwR02vwI=)
                          2: 323830343a313962343a3a2f33322d3438203d3e203631383133.roa (hash: 634Zk57vNJ6xS0Y4+2TCXWt9fxtitSuJc1Ql07m+6BM=)
                          3: 3133382e3132322e3139362e302f32322d3234203d3e203631383133.roa (hash: n+HoyJG26++b3FJA1fVxT685DhRMUTDWbcID6VZG3yc=)
                          4: 3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (hash: Pz5jvf5pyC7yvc8HVLt0O6AXU3kBiFIaZeqlerxaAYg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 15:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b7:66:c1:82:db:be:4b:34:ac:74:81:a5:cf:dd:da:3f:c0:76:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: Oct 31 12:23:33 2026 GMT
            Not After : Nov  1 15:35:33 2026 GMT
        Subject: CN=4150253DC39DABA64BEA47A1DB7CDCC98830E4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:8c:64:6d:29:4d:f7:c6:f8:38:ef:ea:15:
                    5f:de:58:a0:3a:8b:f4:b5:a0:18:b0:82:e1:89:03:
                    24:62:f1:2e:e8:e3:bd:d2:8b:be:c1:90:68:d5:ce:
                    0b:c1:a4:17:5a:64:eb:56:fc:09:82:43:a9:0c:e1:
                    51:33:10:3d:37:c3:33:77:3f:d0:62:34:5d:57:d1:
                    15:4b:7a:4e:4d:71:ee:56:51:f1:23:97:43:00:c7:
                    4b:68:92:17:a9:ea:c7:88:0d:0d:5d:c9:bb:58:7f:
                    2f:dd:3f:7d:06:ed:69:d0:0b:0c:2d:60:0f:2b:fb:
                    61:96:dc:4d:1f:48:fe:07:35:bf:12:28:7d:0a:7b:
                    30:c5:a6:06:f7:d3:37:a1:fe:db:72:e5:f7:51:f5:
                    66:af:4b:3d:12:bd:13:52:96:e5:b4:00:3d:06:89:
                    48:d6:37:25:c0:a6:e8:8e:64:9d:54:a7:49:eb:d3:
                    f0:41:41:ba:76:23:30:c3:dc:16:ea:17:4a:9b:21:
                    5b:ac:5a:a2:0a:c3:f7:52:5d:5a:e6:47:b5:c5:b9:
                    e5:24:3c:d0:1e:4c:6c:a7:9d:93:d0:b6:ca:47:b6:
                    c5:84:2a:02:d1:9b:39:92:f0:99:9b:bd:ea:45:f6:
                    02:ed:93:af:8f:fd:68:79:a4:67:e5:2b:0c:79:2a:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:50:25:3D:C3:9D:AB:A6:4B:EA:47:A1:DB:7C:DC:C9:88:30:E4:D3
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:c6:7f:1a:8e:16:0a:92:5e:6e:ea:51:06:9c:92:f3:93:
         2f:af:30:8b:38:97:f1:be:f3:d5:89:4b:95:e4:54:8d:7a:97:
         cd:2b:f5:bf:b2:bf:ed:59:16:2a:92:ca:8f:a8:5b:86:f5:3e:
         e1:17:21:5f:d1:88:b7:0a:6f:23:36:de:11:89:71:b2:ea:bb:
         f2:7c:c5:b7:0b:99:f9:a0:1d:ff:cc:8d:bd:43:3a:cb:b7:d0:
         76:15:4e:ef:01:4f:07:20:b2:2a:18:44:d2:e8:fd:09:19:87:
         c6:19:1b:b6:20:72:f6:9e:34:05:11:8d:b7:88:2d:ce:22:11:
         ee:28:5d:00:1f:0c:77:98:16:1f:f4:24:6f:37:78:4f:9b:46:
         2a:02:e7:a9:c6:db:4e:88:af:62:9b:b2:cd:b4:e6:1d:da:f3:
         7b:d1:fb:74:30:d2:ad:e3:7b:8b:d0:e3:18:f5:a1:c6:e0:79:
         53:b6:f0:14:25:26:ac:2e:b1:6c:4d:52:b1:59:32:e7:86:27:
         95:c0:6d:43:fb:cd:11:ef:55:09:b6:97:3f:a5:f2:0f:01:0d:
         0b:70:cd:77:2f:88:a0:65:9d:78:9f:18:85:3f:c8:95:b5:4d:
         ff:00:db:65:5a:cd:a5:ee:81:5a:f4:c3:2d:fa:d2:9c:27:fd:
         c6:88:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----