Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
File:                     8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft (raw, json)
Hash identifier:          uVb7h312lFmpYFtpjEWSRjLQOoGEPAib0mcFIzCPnYU=
Subject key identifier:   84:46:65:84:78:FE:F3:76:0E:DB:03:FC:B8:2E:36:C1:64:CE:03:50
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       41A13A9818F11742F1D34365F5911D67115ED8BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
Manifest number:          03D5
Signing time:             Mon 02 Nov 2026 14:21:37 +0000
Manifest this update:     Mon 02 Nov 2026 14:16:37 +0000
Manifest next update:     Tue 03 Nov 2026 18:10:37 +0000
Files and hashes:         1: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl (hash: V0tPGi54krjb/iZgFSqnKfokV2oCuIg1dC2cJ+5yhVU=)
                          2: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (hash: EMJjEIPjqb0pJuc8k5iqWPchZ1P4du9stTcPeibH9XA=)
                          3: 3133382e39372e3134362e302f32342d3234203d3e20323636313738.roa (hash: 7334nlQg/xpg15NrQIjdp536ocTOIU6vJfkWVg6TQMU=)
                          4: 3133382e39372e3134352e302f32342d3234203d3e20323636313738.roa (hash: HiCD2aNFCD2gdPv7DAFPyFKNJzqsvNngQzMJGV9Hy3A=)
                          5: 3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (hash: Y7wWmCKJQWPPPvEuNiGWiJC32jLM3Rj077YoMp/O8rQ=)
                          6: 323830343a336265343a3a2f33322d3438203d3e20323636313738.roa (hash: pbTRcYqu0xp7wJ3/QTzOzuX2E0FB18LAxEe5+ZoQvPI=)
                          7: 3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (hash: i/GAFmfbSdcJ6NioCdEiixxEfCz8mRf1MONaM2ODrXg=)
                          8: 3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (hash: S1bJy5QJE0LNVISg6s/zzbDwrWW/KG0G15HkJX2hzyE=)
                          9: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (hash: UoF7SOSrCd44zeXktu5ZCPyIu5hdVWA41pO5DzfhYJk=)
                          10: 3139322e3134342e36362e302f32342d3234203d3e20323636313738.roa (hash: zucAfQu0ifHpmqC5xLZPVAPRi4zTTLUEUK9iVex/Cks=)
                          11: 3139322e3134342e36352e302f32342d3234203d3e20323636313738.roa (hash: Q0IfG4q0aaE6deEnWBfPSgqMy370Uc0PPGVTB7I0T4Y=)
                          12: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (hash: MQSsEBmbTFs+u836IYuAxkGUz5TinycGzPBh0NSq8PI=)
                          13: 3139322e3134342e36362e302f32332d3233203d3e20323636313738.roa (hash: D4627DR8A/Yx8sOp5ZyW7rLwAu5i+B/sIX2FXoXySBU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 18:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a1:3a:98:18:f1:17:42:f1:d3:43:65:f5:91:1d:67:11:5e:d8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Nov  2 14:16:37 2026 GMT
            Not After : Nov  3 18:10:37 2026 GMT
        Subject: CN=8446658478FEF3760EDB03FCB82E36C164CE0350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:b0:c9:93:f7:d6:02:65:87:df:6c:b9:36:
                    88:23:40:43:6d:80:6a:8f:5a:3c:24:82:6d:ff:6e:
                    9b:38:d0:32:3d:a8:8e:d6:c9:ee:1e:91:93:38:b0:
                    93:53:b1:0e:b6:ac:3a:0f:94:ad:a1:45:5f:98:38:
                    eb:b1:e5:20:74:6f:a4:a1:ac:db:75:b9:3a:aa:b4:
                    84:70:75:d1:f1:e1:39:6a:bf:d4:31:1d:e3:e1:2b:
                    00:bf:27:54:31:03:e7:11:59:9b:69:e0:1c:aa:c8:
                    31:c5:18:3f:5b:89:2a:57:c0:2c:5c:b1:bd:a8:83:
                    00:a2:45:98:2c:ef:9e:f8:60:e8:c2:cd:65:77:3e:
                    4d:53:81:52:92:6b:df:5b:c4:c8:b1:ef:19:25:2c:
                    fc:d3:70:84:f6:f0:7f:1e:65:a1:d7:71:e1:23:d6:
                    62:a5:d7:31:9d:93:90:a0:47:69:80:97:b9:a4:f2:
                    5f:10:d4:ad:84:d9:4e:88:e9:e6:7b:25:32:c9:7e:
                    d6:cf:02:31:c3:bb:b9:15:18:ee:23:39:e5:0e:e0:
                    cb:cb:10:65:c2:88:3e:3b:22:9e:93:ce:db:f1:d5:
                    18:ee:58:3a:af:78:fc:8d:d5:fe:83:cf:41:ee:65:
                    a0:a0:c1:84:f9:91:be:ef:a1:69:f4:fc:fa:d4:14:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:65:84:78:FE:F3:76:0E:DB:03:FC:B8:2E:36:C1:64:CE:03:50
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:4d:5c:2a:ba:98:5a:ef:9f:2f:0b:41:0e:ab:d1:f4:ba:
         14:ea:31:88:c9:1a:9c:2a:62:87:5f:81:ff:cd:1d:5c:0b:bb:
         fe:20:0a:b4:ea:1e:9c:2e:ff:ed:fa:42:8f:04:ed:7d:ee:a5:
         09:1e:fc:4a:14:ae:e2:ec:e4:a6:0a:61:c6:20:cf:5a:cf:73:
         db:a0:41:52:b2:ae:e3:45:27:c6:9d:90:41:1c:b7:7b:fe:ab:
         7a:dc:51:c3:93:f6:24:ea:f4:7d:ab:aa:32:46:b4:99:3e:f1:
         7c:dc:d3:4e:08:b4:d6:de:5d:48:e3:5f:3c:40:74:a6:4c:88:
         7d:6e:7c:e9:01:d9:99:b1:4d:03:cd:4d:52:6c:a8:3c:21:11:
         f8:90:43:d2:c9:21:9b:70:c3:67:e9:f1:48:19:7a:0c:6a:a5:
         53:c4:e8:7b:f5:84:10:81:75:2e:db:38:bb:c9:5d:72:c8:89:
         f5:b6:d4:c3:86:3e:17:35:04:bd:46:7b:47:05:f6:bb:1a:e1:
         c2:22:0f:51:e2:61:5f:3b:e8:96:4c:4f:e5:b5:ba:0d:47:c5:
         61:2f:c1:a2:7c:8a:07:95:c0:27:26:2f:06:2f:2a:22:08:a4:
         50:dc:d8:0e:ec:c6:6b:28:18:8b:98:48:bc:a5:46:85:9c:15:
         8e:26:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:20:40 2026 by rpki-client