Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft
File:                     98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft (raw, json)
Hash identifier:          po0qokTdZfiFPsKm54TMmLgtkSo8+CaoMWxfeVVKkf4=
Subject key identifier:   D3:57:0C:2A:1F:F1:F6:1F:21:06:CC:8F:6C:54:38:02:C8:33:9A:4B
Authority key identifier: 98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C
Certificate issuer:       /CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C
Certificate serial:       32CDB24168ADE67769F3B6DBB0EE3902CB1C63DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft
Manifest number:          3D
Signing time:             Tue 13 Oct 2026 09:42:11 +0000
Manifest this update:     Tue 13 Oct 2026 09:37:11 +0000
Manifest next update:     Wed 14 Oct 2026 10:48:11 +0000
Files and hashes:         1: 323830343a346161633a343030303a3a2f33382d3338203d3e20323637323536.roa (hash: JDiQm9+CHtvh3gw2aBYNB/Y8wrgrCpCGc0zv7T58AtQ=)
                          2: 323830343a346161633a323030303a3a2f34382d3438203d3e20323637323536.roa (hash: ENxiki4mr5AfY5ZDETNy1Up4S/oYo16tYmJCpNweQfA=)
                          3: 34352e3233322e35302e302f32342d3234203d3e20323637323536.roa (hash: VloQF014zxzTvGXqHCwsHiczouqLSS2fJLv9dyJrfFU=)
                          4: 34352e3233322e34382e302f32342d3234203d3e20323637323536.roa (hash: 28fzU7JmSJVevmYpFPEDvpVdd3y1NimeVDP6FN9ml90=)
                          5: 323830343a346161633a313830303a3a2f34382d3438203d3e20323637323536.roa (hash: 2Ml3DQIY2urk6EPOPWKKLTFWUBeBTjRoCnHIfYFVdSU=)
                          6: 98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl (hash: d2IUGP+Hg0ZmNGR1+tDiUvIH2/iM1UROwQeikHSvTJs=)
                          7: 323830343a346161633a313830303a3a2f33382d3338203d3e20323637323536.roa (hash: LO03Fbo8Y/zZktOVqd/jE8gx8eQ5MpBg6adKsZ04lgk=)
                          8: 323830343a346161633a313030303a3a2f33382d3338203d3e20323637323536.roa (hash: UU1aqMqz97Dk+2UTwb/r47C/25jQNYVxZe7Yrosazso=)
                          9: 34352e3233322e34392e302f32342d3234203d3e20323637323536.roa (hash: uPHWA+438NQpulIaRVx/+k8trB/BEtJKf/l48ied8DE=)
                          10: 34352e3233322e35312e302f32342d3234203d3e20323637323536.roa (hash: Wt8wZRFPIlsrpWvcmCZI9HxwbuBHPTq8AUFhKs8nY70=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:b2:41:68:ad:e6:77:69:f3:b6:db:b0:ee:39:02:cb:1c:63:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C
        Validity
            Not Before: Oct 13 09:37:11 2026 GMT
            Not After : Oct 14 10:48:11 2026 GMT
        Subject: CN=D3570C2A1FF1F61F2106CC8F6C543802C8339A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:11:cb:08:80:e3:e6:df:4d:17:66:69:f7:d1:
                    6e:b0:62:57:c0:6b:22:36:b6:30:7a:d4:2e:b4:1f:
                    8a:1f:46:39:76:4b:ec:51:4e:fc:04:b5:49:1d:f5:
                    b4:f6:c1:46:11:e6:94:da:33:91:ff:eb:46:55:a1:
                    52:95:c8:00:0f:9d:f1:23:c3:bc:cb:70:56:05:d0:
                    1f:50:42:02:8a:ef:eb:8e:33:47:5e:b3:fb:ac:dd:
                    ad:6f:c1:fd:29:31:e3:44:de:11:e5:25:e0:04:77:
                    09:c3:b3:bb:fd:57:56:e0:2e:9e:95:c6:4f:bb:84:
                    88:bf:a3:15:b5:f5:45:70:3f:fd:d1:89:e2:09:66:
                    e5:70:1f:fa:5e:56:0f:2e:6e:6b:29:f3:0e:e9:7d:
                    8b:a8:c2:ac:9b:f1:42:63:50:85:72:c0:2b:ee:df:
                    61:79:ed:92:36:af:aa:1d:16:db:e4:d9:65:e9:b8:
                    53:dc:b5:58:25:a1:97:40:47:53:50:38:b0:b4:aa:
                    5b:34:25:a4:fb:11:b1:38:1b:24:11:18:eb:56:49:
                    f2:0e:f0:10:de:75:3e:b8:2f:7c:91:42:a7:0d:8d:
                    c8:c8:6e:c9:91:0f:e5:54:cf:3d:5c:cb:b5:61:59:
                    f5:3a:af:bc:e5:e6:1e:01:d1:1e:c2:bf:9b:50:13:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:0C:2A:1F:F1:F6:1F:21:06:CC:8F:6C:54:38:02:C8:33:9A:4B
            X509v3 Authority Key Identifier:
                keyid:98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7a:03:5c:9a:b5:08:df:d6:c5:a7:09:2d:09:9c:24:9b:94:
         70:48:0d:c0:fd:3a:df:7c:bb:46:a6:db:59:4f:39:d3:a3:d3:
         f0:37:f0:e2:2c:c3:95:c3:5e:f5:43:40:7e:64:23:01:15:73:
         b7:c5:8e:db:0a:8f:2e:f5:53:4d:6c:09:db:67:a9:e5:16:5b:
         c4:38:37:1e:33:eb:83:c3:03:a1:aa:bd:ca:e0:28:9a:17:0c:
         11:92:cd:b7:07:bc:47:39:1f:1c:bf:fd:f5:c2:9d:2a:92:e0:
         fb:25:d3:08:e2:d3:96:78:40:97:77:59:cf:3b:58:26:ae:c6:
         07:c5:31:0f:1c:3d:84:83:bc:05:92:70:c3:cf:fc:13:ae:82:
         ec:6d:ea:aa:eb:8a:f1:26:e6:f2:74:f3:31:81:6c:54:04:b9:
         87:4c:e7:b5:d8:15:8b:e5:ca:b5:98:d5:c8:20:0d:0b:16:39:
         09:ca:6a:a0:f3:a7:33:00:82:b1:7c:84:3a:d3:5b:99:bc:7c:
         b0:63:6b:8a:68:64:85:35:a7:0f:f2:82:38:33:26:0e:29:99:
         75:ba:73:94:51:f4:98:00:8d:0a:f9:78:61:d5:27:44:3b:a2:
         ea:d6:26:6b:73:b2:37:e4:a7:24:b4:e0:21:51:91:85:0c:de:
         7c:09:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:43:13 2026 by rpki-client