Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft
File:                     0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft (raw, json)
Hash identifier:          JQfiUOT4BAM/Ki9JmTacAdI7Kj4ROOtPiLBRTA/4t7A=
Subject key identifier:   F6:88:6F:6A:34:89:09:7C:03:BA:8C:99:12:CE:FD:6C:18:86:41:52
Authority key identifier: 0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED
Certificate issuer:       /CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
Certificate serial:       15BAC2912A504207164A197506F34530A6F255E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft
Manifest number:          36
Signing time:             Sat 10 Oct 2026 11:39:10 +0000
Manifest this update:     Sat 10 Oct 2026 11:34:10 +0000
Manifest next update:     Sun 11 Oct 2026 15:37:10 +0000
Files and hashes:         1: 34352e3233392e382e302f32322d3234203d3e20323634353632.roa (hash: +A2KlcAHuTpZuEXT4FJeaCdLkKdjYqk/zScV0RLpNVA=)
                          2: 3138372e34392e3137362e302f32322d3234203d3e20323634353632.roa (hash: sxpwtxvrCycE4/eoAg22WkcSwbTrjy2lZny7h1fRrSI=)
                          3: 323830343a323139303a3a2f33322d3438203d3e20323634353632.roa (hash: 4tyUOVZN8NSg7BgHdA8VN+AfDlWI9nyB7Iu3UCAIPDQ=)
                          4: 3133382e33362e302e302f32322d3234203d3e20323634353632.roa (hash: w2A+ezFF38Sg12+Dr28dWB8aWFWX3nuWn0IJHwMQjFw=)
                          5: 3136382e3233322e38342e302f32322d3234203d3e20323634353632.roa (hash: Kse7/cVnPI8I0Fb+8Q6EvQH6wgWBJ5Zwy0EImNU6Uhg=)
                          6: 0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl (hash: 0ZqVlZYNgP1hwB2JRL2BRMa8mpeDfwi8WBwZqpvYWgc=)
                          7: 34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (hash: O/f12TFogwyA2DqlFLdtaTsjy6oNsEWMVe8Khxsr8Wc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 13:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:c2:91:2a:50:42:07:16:4a:19:75:06:f3:45:30:a6:f2:55:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
        Validity
            Not Before: Oct 10 11:34:10 2026 GMT
            Not After : Oct 11 15:37:10 2026 GMT
        Subject: CN=F6886F6A3489097C03BA8C9912CEFD6C18864152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:10:b3:d0:af:6f:c4:a5:88:a3:2c:21:5b:
                    cb:b8:18:52:18:9c:f8:ff:50:57:08:b2:71:8f:58:
                    d0:ca:98:47:a4:64:b3:9b:9e:44:53:90:45:6d:1f:
                    99:46:a8:b1:9a:17:2b:7e:c8:0e:f3:8b:41:d0:48:
                    6a:44:3f:fe:0f:78:1c:3e:fa:af:8e:dd:60:02:4d:
                    97:4e:f2:46:8e:34:dd:49:c9:a9:2d:fc:05:60:48:
                    b4:45:bd:14:62:96:07:1d:23:fb:37:3d:51:f9:4d:
                    27:b0:55:46:40:59:3c:75:c2:6b:e3:6b:87:f3:15:
                    13:65:35:1a:1c:f4:9f:30:fb:5b:c6:7e:5d:31:0a:
                    81:b5:0e:b5:8c:38:6c:52:aa:80:b6:12:0d:ea:db:
                    5c:a8:9d:95:55:7c:69:0d:c3:2f:a2:e6:fd:42:27:
                    c4:5f:a0:5d:1a:29:3d:2a:80:a1:28:ef:9b:79:94:
                    1e:60:82:88:1e:99:13:1f:6e:5b:5e:79:3d:9d:b6:
                    5c:3b:8f:15:b3:4c:48:9a:7a:b4:78:4b:51:6e:2b:
                    cb:7f:cd:81:1a:1b:25:83:f0:f5:05:71:eb:b8:32:
                    1d:2b:6e:20:5d:61:38:7b:76:e6:d2:3f:67:ae:51:
                    8e:32:79:3b:aa:79:c4:8b:9f:fe:35:f5:39:c5:e9:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:88:6F:6A:34:89:09:7C:03:BA:8C:99:12:CE:FD:6C:18:86:41:52
            X509v3 Authority Key Identifier:
                keyid:0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:f2:3a:f0:9e:cd:21:2b:4f:ec:da:b4:bb:22:dc:5c:b8:
         0e:74:71:5d:ae:0e:2b:09:de:d0:4a:b1:d9:eb:f5:6e:e2:74:
         11:59:42:71:10:56:f9:74:e4:46:d8:4f:88:f2:53:61:45:24:
         d1:30:50:5d:d2:e3:b3:f1:59:c4:9e:c9:06:3d:ca:39:1c:4b:
         e6:ea:08:5d:2d:39:04:7b:17:c0:ee:bd:a7:fe:98:f6:27:2e:
         e2:62:08:80:3c:29:37:5a:2a:cf:42:3f:c5:48:4f:8e:d0:a4:
         45:22:19:bd:e5:c3:9e:61:35:a7:3c:40:53:46:bd:49:40:3f:
         6c:7b:4b:54:5a:b1:ce:41:80:6c:6c:45:25:2d:c2:61:bc:ff:
         3b:35:4d:6c:bd:96:21:f6:63:61:e6:d7:5c:71:5a:ce:1f:ed:
         f0:ab:9c:de:81:9a:5a:2d:e8:da:0f:54:56:c4:e8:69:67:03:
         34:1f:fb:72:ae:1d:a2:25:74:bd:ca:8f:ce:c7:cc:45:d7:b8:
         71:b2:1d:21:3e:d3:e6:86:ed:37:12:f2:9b:65:e3:36:fd:c8:
         7f:80:3d:45:45:4e:2f:51:45:84:44:c1:50:fb:1a:11:1e:26:
         34:a6:21:35:54:b6:9e:07:d8:8b:7f:bf:18:fe:c4:44:b3:c6:
         44:d2:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:10:12 2026 by rpki-client