Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft
File:                     338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft (raw, json)
Hash identifier:          +g37E4a4BzDiUM++E8ZN/zcVIJ7q8GjAs8C4u+69iG0=
Subject key identifier:   31:21:62:64:11:56:04:96:8F:57:CA:74:F6:97:0E:1F:87:DF:D6:37
Authority key identifier: 33:8D:01:8D:D1:A9:83:A4:96:F7:C1:7B:72:90:7F:6B:5C:E8:0A:C1
Certificate issuer:       /CN=338D018DD1A983A496F7C17B72907F6B5CE80AC1
Certificate serial:       6C402A6780568DC42A0663563DBA512EEE958E9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft
Manifest number:          D1
Signing time:             Sun 01 Nov 2026 03:25:01 +0000
Manifest this update:     Sun 01 Nov 2026 03:20:01 +0000
Manifest next update:     Mon 02 Nov 2026 05:31:01 +0000
Files and hashes:         1: 338D018DD1A983A496F7C17B72907F6B5CE80AC1.crl (hash: PdZX7NqS642T8sTWu/hVpG8DSoVIvpM91c2F9ed6JOc=)
                          2: 3133382e3138352e3235322e302f32322d3234203d3e20323633393430.roa (hash: Uh0wyjJbN+qDHOh4F+h0DMVVA4FJkPRqqRLvTE+BR3E=)
                          3: 323830343a323831383a3a2f33322d3334203d3e20323633393430.roa (hash: HAcosWONXfRVbCn5V6Ha7QqAi2SF70VKX+uj2wgahL0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:40:2a:67:80:56:8d:c4:2a:06:63:56:3d:ba:51:2e:ee:95:8e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338D018DD1A983A496F7C17B72907F6B5CE80AC1
        Validity
            Not Before: Nov  1 03:20:01 2026 GMT
            Not After : Nov  2 05:31:01 2026 GMT
        Subject: CN=31216264115604968F57CA74F6970E1F87DFD637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:6b:8b:3f:96:91:dd:19:54:49:80:2d:7d:
                    64:f9:65:30:e6:27:80:c8:ca:b0:a6:97:52:c4:70:
                    94:9b:e9:ad:62:ca:6b:7e:9d:e0:1b:d1:90:f9:d1:
                    30:ad:b7:8a:e4:32:7d:28:84:f9:21:a9:a4:a2:bd:
                    77:f6:7f:c7:bf:dc:3f:24:25:de:27:cc:02:bc:fd:
                    0f:93:51:5c:4d:54:68:ea:e9:5d:56:5c:05:fe:ec:
                    9b:16:e0:64:f7:ac:99:a6:d9:4d:e9:2e:10:cb:a3:
                    e9:f8:5f:2d:33:1c:85:9a:f1:04:0a:aa:b5:5c:4c:
                    c9:60:ec:2e:37:43:57:4d:d7:a9:4e:a1:7a:bc:09:
                    db:d5:b9:d2:0e:5f:f5:3e:0c:6c:39:d8:e6:22:12:
                    7d:33:52:7e:8e:98:ab:c4:e5:3e:91:aa:52:b6:4f:
                    94:12:94:39:81:2c:db:9d:fc:47:1d:89:ac:83:9f:
                    ae:68:ec:2e:e1:58:ad:05:5f:8a:4e:a9:78:c7:19:
                    ee:cb:8e:a7:a5:84:73:f7:b0:5e:6a:17:a7:46:15:
                    ec:81:c3:0f:0e:5d:ca:8f:67:77:43:b0:63:5d:18:
                    46:4e:bc:d6:24:5a:62:3c:31:41:1f:e3:66:ec:ec:
                    e2:b4:0d:3f:d8:1d:44:bf:18:31:80:d8:12:d1:c9:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:21:62:64:11:56:04:96:8F:57:CA:74:F6:97:0E:1F:87:DF:D6:37
            X509v3 Authority Key Identifier:
                keyid:33:8D:01:8D:D1:A9:83:A4:96:F7:C1:7B:72:90:7F:6B:5C:E8:0A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/338D018DD1A983A496F7C17B72907F6B5CE80AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/338D018DD1A983A496F7C17B72907F6B5CE80AC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:e7:a8:60:29:38:c8:9b:64:a2:ff:70:08:ff:c9:95:a2:
         b4:42:d2:ee:76:76:c7:6b:b1:01:1c:2f:19:b4:40:9a:30:5b:
         7b:d4:b1:f7:5b:aa:4d:fa:83:1d:20:07:73:52:a4:7c:37:67:
         d0:ed:d4:6f:f8:05:a7:e4:e4:c1:61:fc:e5:76:33:94:e2:72:
         b8:c7:94:b4:fd:d8:13:fa:65:ff:aa:fb:e1:0b:e3:51:f8:58:
         f4:ca:43:a2:b5:61:02:23:4b:21:b7:84:68:2f:d9:91:fc:b2:
         fb:b2:a3:7f:2e:0d:42:50:70:7d:12:7c:93:2c:da:6d:22:4c:
         0c:48:01:f3:9e:fd:d9:56:4c:8f:31:ba:64:ba:84:6c:9f:d0:
         a1:a1:71:83:e6:1c:49:6a:ed:27:86:50:dd:d5:95:e2:23:46:
         5b:5a:a4:f1:da:c1:c9:b7:65:a6:db:94:da:86:be:64:f6:fe:
         1a:1c:b9:9a:14:22:2d:8c:c1:ae:e7:b7:b9:fb:8a:d5:a0:8e:
         e4:f8:db:a5:da:be:b8:3e:a7:84:8e:c4:63:93:8e:dd:5a:3d:
         af:fb:ac:3d:bf:9a:4e:5f:29:07:e9:98:c3:36:05:b6:b6:12:
         10:9a:c3:50:3a:da:3a:f4:bc:05:0a:0f:58:c4:9e:60:c4:9d:
         8e:fb:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:47:29 2026 by rpki-client