Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
File:                     DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft (raw, json)
Hash identifier:          5ZAJLK1RpJzyMk31L+QxeKmuy2UckzxF1v+5LFRHKFQ=
Subject key identifier:   46:4D:C2:FF:10:3A:3D:32:D1:DD:0F:C5:1B:81:50:BB:86:CB:54:73
Authority key identifier: DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27
Certificate issuer:       /CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
Certificate serial:       7DBBC1D3F5DDDF8F8E16270520237F16CA1C3414
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
Manifest number:          57
Signing time:             Sat 31 Oct 2026 09:20:25 +0000
Manifest this update:     Sat 31 Oct 2026 09:15:25 +0000
Manifest next update:     Sun 01 Nov 2026 12:06:25 +0000
Files and hashes:         1: 323830343a376463383a3a2f33322d313238203d3e20323731353832.roa (hash: NG3Cc2awhZ74kUhI7ET0NgW9jgRu3ClW53Mlgk0l3Gg=)
                          2: DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl (hash: Jlgd2cJwX7UeuYV4un5Lx5B/e1kB8edbLu/Je3hlNls=)
                          3: 34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa (hash: js1ATq81mKsi1JMjqMQYhk2UNrpjJyneFGoy+4NpdMI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bb:c1:d3:f5:dd:df:8f:8e:16:27:05:20:23:7f:16:ca:1c:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
        Validity
            Not Before: Oct 31 09:15:25 2026 GMT
            Not After : Nov  1 12:06:25 2026 GMT
        Subject: CN=464DC2FF103A3D32D1DD0FC51B8150BB86CB5473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:91:b0:9d:09:d6:cd:69:77:b8:a1:cc:9c:
                    f4:c6:e8:6a:cb:b6:12:c5:b4:38:a2:8b:73:7f:97:
                    87:7c:b1:b7:a7:95:3f:ea:e3:62:14:7f:1b:6c:6d:
                    44:26:92:37:70:e5:ad:5b:cb:4a:95:09:4a:4d:00:
                    fb:70:f2:aa:e8:81:12:eb:11:ba:f4:96:67:dc:61:
                    3a:08:cb:13:55:79:7c:d0:a6:08:65:04:81:63:55:
                    00:45:b4:25:a7:36:84:92:fa:72:b4:cc:24:ef:a6:
                    f0:ef:5d:8f:73:c5:94:d3:c0:6d:f0:65:d3:19:49:
                    8a:6c:8a:d2:db:7c:f2:5f:37:1b:77:1d:d9:66:db:
                    da:00:b7:20:28:86:48:07:66:71:62:f3:d8:83:90:
                    af:7d:71:a1:3f:7f:d4:72:21:fd:3d:62:d4:af:31:
                    14:9c:e2:48:27:fb:e4:a5:41:06:eb:e8:c4:73:af:
                    86:1b:54:7b:59:b5:5a:0f:45:3f:73:74:f7:0e:19:
                    71:3b:0e:6d:c7:93:9f:0e:45:f5:87:b8:df:8e:c1:
                    fc:c8:b6:79:e8:95:7a:7f:21:c2:a5:e1:dc:7c:45:
                    cc:5a:95:17:61:39:b0:65:10:b6:13:b1:7f:d6:b5:
                    21:f3:53:9f:39:8f:62:33:84:86:08:00:63:1d:67:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4D:C2:FF:10:3A:3D:32:D1:DD:0F:C5:1B:81:50:BB:86:CB:54:73
            X509v3 Authority Key Identifier:
                keyid:DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c9:ee:11:94:e3:20:c4:e9:07:d8:af:18:d3:5f:42:1a:81:
         2c:7e:82:74:bf:b7:d7:86:06:3f:ef:e3:c5:6e:73:33:fb:a3:
         1e:2b:2e:c7:02:86:be:3c:d5:71:33:a1:b7:44:16:26:3a:1b:
         96:09:e4:b5:7e:35:6f:40:d3:0f:80:ba:1d:3d:fe:57:2e:c5:
         79:d3:23:bd:32:a4:ba:46:a8:ed:a5:5a:ba:89:37:04:a3:3b:
         b6:44:ea:eb:0f:9b:fe:51:c2:93:c3:44:b0:c9:ef:4a:28:10:
         78:0c:10:49:91:84:4b:f1:00:6f:39:35:a4:a0:e1:e1:00:1b:
         5f:b8:0a:83:d2:df:4d:0e:40:b0:0f:00:b2:15:1f:0d:12:f1:
         50:35:39:af:b0:12:a9:5f:9f:90:ee:b7:f1:d9:f7:2d:ad:17:
         ab:54:b4:b0:e9:c7:15:62:a3:cd:7a:b3:8e:41:42:09:a1:83:
         c9:6a:b7:fe:12:ce:1e:fc:0a:e9:82:9d:fb:8c:ac:44:9e:b4:
         bc:55:dc:01:b1:1b:b2:55:d0:21:cc:74:60:57:a3:fc:8c:f4:
         2b:e8:c6:48:b5:0f:be:d7:d1:0e:aa:57:ce:e7:6c:28:ea:e5:
         5d:9b:08:1f:06:39:5b:c3:94:41:3a:9e:43:98:ef:cb:79:1a:
         79:20:24:95
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUfbvB0/Xd34+OFicFICN/FsocNBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwRTQ4M0YwRTcwNEZBNkJDM0U1RDQzQTAwMEM3REQ4
MDBBRkMyNzAeFw0yNjEwMzEwOTE1MjVaFw0yNjExMDExMjA2MjVaMDMxMTAvBgNV
BAMTKDQ2NERDMkZGMTAzQTNEMzJEMUREMEZDNTFCODE1MEJCODZDQjU0NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxJGwnQnWzWl3uKHMnPTG6GrL
thLFtDiii3N/l4d8sbenlT/q42IUfxtsbUQmkjdw5a1by0qVCUpNAPtw8qrogRLr
Ebr0lmfcYToIyxNVeXzQpghlBIFjVQBFtCWnNoSS+nK0zCTvpvDvXY9zxZTTwG3w
ZdMZSYpsitLbfPJfNxt3Hdlm29oAtyAohkgHZnFi89iDkK99caE/f9RyIf09YtSv
MRSc4kgn++SlQQbr6MRzr4YbVHtZtVoPRT9zdPcOGXE7Dm3Hk58ORfWHuN+OwfzI
tnnolXp/IcKl4dx8RcxalRdhObBlELYTsX/WtSHzU585j2IzhIYIAGMdZ/LJAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQURk3C/xA6PTLR3Q/FG4FQu4bLVHMwHwYDVR0j
BBgwFoAU3Q5IPw5wT6a8Pl1DoADH3YAK/CcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XOGI3OEZYdmtRV0F1aDE1Z2locHI5WFJybTNKQUU3YmpITWlaTDFEWXdB
LzAvREQwRTQ4M0YwRTcwNEZBNkJDM0U1RDQzQTAwMEM3REQ4MDBBRkMyNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ERDBFNDgzRjBFNzA0RkE2QkMz
RTVENDNBMDAwQzdERDgwMEFGQzI3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1c4
Yjc4Rlh2a1FXQXVoMTVnaWhwcjlYUnJtM0pBRTdiakhNaVpMMURZd0EvMC9ERDBF
NDgzRjBFNzA0RkE2QkMzRTVENDNBMDAwQzdERDgwMEFGQzI3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
t8nuEZTjIMTpB9ivGNNfQhqBLH6CdL+314YGP+/jxW5zM/ujHisuxwKGvjzVcTOh
t0QWJjoblgnktX41b0DTD4C6HT3+Vy7FedMjvTKkukao7aVauok3BKM7tkTq6w+b
/lHCk8NEsMnvSigQeAwQSZGES/EAbzk1pKDh4QAbX7gKg9LfTQ5AsA8AshUfDRLx
UDU5r7ASqV+fkO638dn3La0Xq1S0sOnHFWKjzXqzjkFCCaGDyWq3/hLOHvwK6YKd
+4ysRJ60vFXcAbEbslXQIcx0YFej/Iz0K+jGSLUPvtfRDqpXzudsKOrlXZsIHwY5
W8OUQTqeQ5jvy3kaeSAklQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 01:53:45 2026 by rpki-client