Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
File:                     090356FA0F721D9A2449A75F672A23DBF91DA79D.mft (raw, json)
Hash identifier:          6grAuk5P0qW7ttDmOmdzMkfYscXkGN8mzTB+PoPcPSc=
Subject key identifier:   14:1C:7B:91:0F:D8:AC:0E:7A:8F:08:3A:3F:FC:61:ED:7B:17:57:DE
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Certificate issuer:       /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial:       7616CA817DCB994E6CE0BA79A82E6649DA718D28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
Manifest number:          018F
Signing time:             Sat 31 Oct 2026 01:10:23 +0000
Manifest this update:     Sat 31 Oct 2026 01:05:23 +0000
Manifest next update:     Sun 01 Nov 2026 02:45:23 +0000
Files and hashes:         1: 3230312e3232322e32342e302f32342d3234203d3e203631383233.roa (hash: MFj2Y8vN35UbFz/c4cSx/WpIcJn650ZPq1l2J6Fv7LU=)
                          2: 3230312e3232322e32342e302f32322d3232203d3e203631383233.roa (hash: 98gQk7tfGUs9pRvDwbcZtGSi6xreh7ZTsgIuv3pcGUk=)
                          3: 3230312e3232322e32352e302f32342d3234203d3e203631383233.roa (hash: UH+oFoq2yann0hghXVWtajLFKBb7Ef5WZDDqQ2Pw1dY=)
                          4: 323830343a313964633a3a2f33322d3332203d3e203631383233.roa (hash: cyI9TnrAXG4EH1ifG0QJQ9pHFHDG0QDBoC7kzrFfLWo=)
                          5: 090356FA0F721D9A2449A75F672A23DBF91DA79D.crl (hash: R+KyVYH7aKX91iIp0QS+ArYZTwS8ua0A10x3mTzNqYk=)
                          6: 3230312e3232322e32372e302f32342d3234203d3e203631383233.roa (hash: 8yd6vMry85HJiPM7/L+kf1JkW05+VgR6cDI6fBW4j5Y=)
                          7: 3230312e3232322e32362e302f32342d3234203d3e203631383233.roa (hash: IuE9qEXXl1d2+xJJVVo1437qrmnar46Ql035+T2MD9w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 02:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:16:ca:81:7d:cb:99:4e:6c:e0:ba:79:a8:2e:66:49:da:71:8d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
        Validity
            Not Before: Oct 31 01:05:23 2026 GMT
            Not After : Nov  1 02:45:23 2026 GMT
        Subject: CN=141C7B910FD8AC0E7A8F083A3FFC61ED7B1757DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:ee:54:d6:71:bf:52:33:d6:15:1f:d2:a2:
                    cd:76:c2:73:37:87:a4:d4:44:30:56:76:13:d0:b6:
                    72:93:f8:40:ca:a6:ec:bb:3b:35:ce:79:c7:1f:a2:
                    a8:05:8c:60:2f:6b:cc:46:99:7c:9a:91:4b:7d:bb:
                    17:0d:6c:17:32:55:55:b3:d5:25:15:9a:5e:60:ac:
                    7b:cc:99:32:c9:ac:9a:22:9b:95:ba:f9:6b:7c:df:
                    38:27:4d:e8:ee:43:ad:d0:57:c0:4d:60:a6:78:f2:
                    7b:40:4a:a6:ec:f3:dd:92:9c:81:8c:10:f8:09:71:
                    3b:8c:96:0f:9a:47:ab:d4:5b:be:f5:9f:89:a9:51:
                    b3:44:f2:8b:30:29:73:56:13:1c:df:ae:cf:aa:52:
                    67:f8:0e:0a:1a:c4:a7:07:94:7c:82:d4:48:2e:d9:
                    44:4f:99:b7:dd:b7:00:50:54:a7:5b:ec:86:a5:11:
                    9b:15:05:e0:1d:ca:54:8f:1d:dd:42:23:db:75:48:
                    31:0b:aa:3b:73:1f:82:1d:b8:d4:19:b7:6e:c2:db:
                    56:9a:30:f3:a1:bf:30:35:11:1d:f3:01:59:eb:e7:
                    95:86:33:0a:79:ad:85:f3:47:cf:0f:90:8c:b2:bd:
                    9e:80:a4:e5:94:80:88:e2:f4:d0:be:de:13:63:27:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1C:7B:91:0F:D8:AC:0E:7A:8F:08:3A:3F:FC:61:ED:7B:17:57:DE
            X509v3 Authority Key Identifier:
                keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:0b:a2:6b:f8:7f:f5:10:27:05:70:c9:fb:3e:ce:dd:73:
         7a:3b:40:9a:dd:8f:e1:79:5b:d6:e6:00:20:10:26:c2:c8:a2:
         0c:47:33:c2:de:d1:69:c8:ea:5e:1c:e7:f9:bb:a9:78:50:29:
         81:4f:92:39:7b:c1:fd:00:95:3a:c4:87:74:28:35:28:2c:f7:
         3c:f7:43:b9:4c:27:e0:d8:54:be:e7:b1:66:b1:47:67:6e:f8:
         73:cb:b6:5c:16:10:59:e1:88:f6:00:de:14:dc:4d:82:65:bd:
         c9:0f:23:b1:df:74:3c:ec:52:77:0f:b7:2b:27:d0:3d:6e:ec:
         d3:40:8d:d5:98:52:0d:b1:aa:cb:8e:30:55:f8:e6:df:39:ce:
         a6:9f:ea:a2:87:49:9b:8f:12:96:ae:7a:ce:b3:4b:9e:56:81:
         ac:80:d0:96:6d:f6:e8:b6:4d:52:c1:b9:fb:eb:66:51:ed:29:
         da:18:15:4b:7f:3c:0e:5d:d7:4f:d5:1f:89:19:47:4a:82:d5:
         62:17:70:95:aa:20:c5:7c:19:5b:fa:4b:17:0b:bc:9f:f9:41:
         d2:cb:23:8d:f0:a5:1c:93:1d:a0:24:fb:6e:5e:f8:b8:1c:7d:
         7c:4f:f9:ea:6b:70:1a:f0:bd:c5:a3:5d:df:17:6d:ba:fe:d1:
         a0:c3:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 13:23:06 2026 by rpki-client