Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
File:                     D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft (raw, json)
Hash identifier:          YtydvMgf4yyQO41yH+222P2w3zV59E2eFaO9ygx+eE0=
Subject key identifier:   74:35:BF:0B:95:89:D5:39:62:09:23:AB:EF:B5:14:B4:C3:81:86:D6
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       0241ED3AA3E98E43543203CD8C2C927924B55B1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
Manifest number:          04E2
Signing time:             Mon 02 Nov 2026 04:22:18 +0000
Manifest this update:     Mon 02 Nov 2026 04:17:18 +0000
Manifest next update:     Tue 03 Nov 2026 07:28:18 +0000
Files and hashes:         1: 3137372e3132342e32332e302f32342d3234203d3e203532363132.roa (hash: DnV9ktyi+mMh6Qkdm2wHNfeAbuHm03E1AsiML22DIsU=)
                          2: 3137372e3132342e32302e302f32322d3232203d3e203532363132.roa (hash: mxAPDXG7E3L1sfighc5nxh8cEDPiZVvJ39J9C/rgViM=)
                          3: 3137372e3132342e32312e302f32342d3234203d3e203532363132.roa (hash: IgWam9gFjQk59l0wl363sX+2WmajH/AjPLKVKXJGgqs=)
                          4: 3137372e3132342e32322e302f32342d3234203d3e203532363132.roa (hash: kPepkfX92SsHB2LO/dXF8r35+O+WfTNE+cQ9z5tHxvM=)
                          5: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl (hash: BfRZPziJqoRADKyClnqDL3w0OUEZ5QrmHuKMCzAG5kQ=)
                          6: 3137372e3132342e32302e302f32342d3234203d3e203532363132.roa (hash: syjiQ1Oi2gBn8KFjx7aAbyZrBkzd4oua6u6ieBXpldM=)
                          7: 323830343a323266633a3a2f33322d313238203d3e203532363132.roa (hash: Abzz5MjZDNjsOKylknymm1lROFeNR+fLAyXVbvfnd1k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 07:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:41:ed:3a:a3:e9:8e:43:54:32:03:cd:8c:2c:92:79:24:b5:5b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Nov  2 04:17:18 2026 GMT
            Not After : Nov  3 07:28:18 2026 GMT
        Subject: CN=7435BF0B9589D539620923ABEFB514B4C38186D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:2f:32:c6:6d:56:8e:56:81:70:a5:ee:10:
                    ed:8e:4e:a8:43:37:9c:66:04:98:8b:1a:a5:12:b5:
                    4c:b5:0e:a4:32:1a:9d:67:60:90:f6:3f:55:25:76:
                    8f:10:ff:42:14:68:9b:df:1b:dc:03:ac:f1:b8:18:
                    8c:69:3f:cf:89:78:4b:e2:bd:6d:79:51:3f:69:27:
                    f5:14:b1:29:4e:34:b7:d9:d2:e4:f8:90:fd:36:ba:
                    8a:d7:b9:17:60:db:8f:2a:95:dc:64:e1:86:e3:67:
                    f0:99:2a:cd:38:a2:cf:e8:6b:00:74:d2:1c:e3:5a:
                    fb:37:e0:14:f4:83:c7:54:b5:9f:ce:9e:ff:2b:49:
                    a6:fa:6b:fd:96:31:13:49:65:3b:16:dc:e3:98:43:
                    d5:33:ea:8b:47:7e:28:04:16:48:19:4d:88:26:5f:
                    6c:56:02:0f:e9:6b:95:fb:ee:84:8f:9c:30:2b:eb:
                    5a:38:c5:61:12:f0:10:cc:66:68:84:48:01:a1:dc:
                    da:71:13:60:1d:b6:a8:00:9a:f2:79:3c:7c:bb:2b:
                    9f:21:85:33:46:b3:b8:2a:a5:f9:46:4b:08:64:1d:
                    cd:81:db:8d:61:04:ce:97:f1:b6:d6:a9:d1:d9:09:
                    47:3a:30:35:8a:63:90:f2:9e:42:38:92:d3:ee:d4:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:35:BF:0B:95:89:D5:39:62:09:23:AB:EF:B5:14:B4:C3:81:86:D6
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2d:5e:f3:bc:de:b5:c0:62:d1:c6:d7:96:de:50:cb:5e:66:
         e6:07:81:5e:aa:2d:c9:13:99:18:a5:19:89:42:7d:fc:7a:f4:
         05:a6:0e:f1:b2:be:dc:5f:ce:56:31:82:4d:02:f2:e0:d9:f6:
         d9:de:43:6c:cc:da:5f:22:57:48:af:cb:29:53:4c:8a:66:d2:
         22:49:e8:7f:e2:f8:e2:8b:4b:21:b6:56:5f:d5:36:e4:02:09:
         ac:0d:cd:ef:f7:d0:89:7d:b3:74:a5:1b:67:a0:56:d4:ba:f7:
         96:25:df:87:66:97:e4:ac:c7:9e:9b:64:71:19:40:8d:d9:65:
         a8:f3:03:8e:95:d4:8b:ce:6c:e5:d3:4d:f6:96:2d:d2:90:c4:
         dc:ac:ad:8c:11:d5:07:39:eb:e4:b5:84:4f:28:d3:43:4e:18:
         75:f5:15:2e:4f:a8:59:08:8a:af:f2:b8:e0:a7:e3:09:22:57:
         35:e5:af:36:8e:fc:08:0d:16:a4:5f:96:d2:c0:b0:35:ca:6f:
         ea:2f:28:99:c4:fe:f0:60:4d:32:0c:2a:cf:c8:5d:ef:d4:db:
         96:3c:45:49:c2:81:08:58:96:d3:8c:d8:c0:f9:3a:ed:19:56:
         f7:a6:5a:8c:08:59:5a:ae:32:f4:8d:52:7b:da:c0:cf:b6:7b:
         d3:e1:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----