Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft
File:                     0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft (raw, json)
Hash identifier:          pVxnqAQQqQdJPqjIQ5Dz6LaakRQBFLWZ5tkp2yLHpBM=
Subject key identifier:   1A:02:53:FF:77:B2:47:F4:C4:9D:D1:A5:39:BA:32:B0:F2:1C:1D:A9
Authority key identifier: 0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51
Certificate issuer:       /CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
Certificate serial:       7FD5F589B504F0F2A940F4DE6B8EC36F0DD3EE08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft
Manifest number:          66
Signing time:             Sun 11 Oct 2026 13:40:10 +0000
Manifest this update:     Sun 11 Oct 2026 13:35:10 +0000
Manifest next update:     Mon 12 Oct 2026 17:04:10 +0000
Files and hashes:         1: 323830343a333538633a3a2f33322d3332203d3e20323636323933.roa (hash: aoL1iYKVJLFss8rcUwwxQ8HyydLc9zUetpDfuqH0In8=)
                          2: 3137302e37392e3133342e302f32342d3234203d3e20323636323933.roa (hash: J0fQ6kITkNpdow2dd+tJ09/zoIPzQQciyRL7sTfxsZc=)
                          3: 0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl (hash: 0c+XFdbEG9KQtT5A3xPe81tVKBEZzLYGGMtu31aNTXM=)
                          4: 3137302e37392e3133342e302f32332d3233203d3e20323636323933.roa (hash: Uzgv7eL9nccJHS0wkBifPxy8W6pHya83bKlrLkn7vTE=)
                          5: 3137302e37392e3133322e302f32342d3234203d3e20323636323933.roa (hash: KPhMMYln4qHdUZAXZxT0HF5ypR1ofpXdiIBVbtZEZdw=)
                          6: 3137302e37392e3133352e302f32342d3234203d3e20323636323933.roa (hash: iT/inoGcMZfVlsYfwusVcsBMQzJeg+rDSVTE305131w=)
                          7: 3137302e37392e3133332e302f32342d3234203d3e20323636323933.roa (hash: siaf6jMcNGoMVAb5lSA5AgccwuyHhvsFC1BH0baXCjo=)
                          8: 3137302e37392e3133322e302f32332d3233203d3e20323636323933.roa (hash: 3DFqLdMW3arjQvoiiaOaErIJO94EP7LRXDygAGA57eY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl
                          rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d5:f5:89:b5:04:f0:f2:a9:40:f4:de:6b:8e:c3:6f:0d:d3:ee:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
        Validity
            Not Before: Oct 11 13:35:10 2026 GMT
            Not After : Oct 12 17:04:10 2026 GMT
        Subject: CN=1A0253FF77B247F4C49DD1A539BA32B0F21C1DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:3c:4e:d1:17:1b:d5:f2:3c:04:e8:2b:31:
                    73:67:13:de:e3:d7:fb:11:da:c1:36:34:2c:52:eb:
                    19:4e:52:68:17:e7:c2:3c:63:09:5a:b8:62:e6:09:
                    35:f2:51:b2:db:a5:07:e3:ce:38:06:c6:f2:de:c9:
                    a0:ae:eb:16:d6:e6:c8:ec:f4:33:c5:b1:f0:e3:5e:
                    0a:75:94:80:a3:1d:37:58:c9:1a:c0:e2:b6:b5:eb:
                    3c:a6:62:b8:0b:24:e7:24:cc:bf:ec:b2:11:55:bc:
                    2f:f8:0d:d9:03:32:bf:37:16:9a:69:df:87:71:87:
                    11:fa:e7:0f:54:9f:2c:7c:7b:61:a4:e4:17:e0:5e:
                    70:36:35:40:83:09:a6:0e:3d:3f:1c:cf:66:48:50:
                    3d:0b:e5:b7:64:5e:f8:87:38:7b:90:53:44:15:cf:
                    12:cf:cd:a4:b2:1b:90:35:79:c0:58:b7:87:2e:11:
                    35:b3:83:ae:67:e5:1d:d0:34:c0:b8:92:2a:55:cc:
                    6a:f0:30:f6:4c:8e:a2:51:15:4c:2c:23:0a:01:bf:
                    27:7a:f7:10:a7:98:3a:e7:24:a6:e7:7e:c7:99:d5:
                    2f:41:c5:98:21:60:93:dd:e3:b9:ce:5b:a6:3a:dc:
                    de:44:05:fc:f2:ae:c6:5b:ea:cc:e9:d2:15:b1:77:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:02:53:FF:77:B2:47:F4:C4:9D:D1:A5:39:BA:32:B0:F2:1C:1D:A9
            X509v3 Authority Key Identifier:
                keyid:0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4f:89:25:88:05:cb:07:3c:02:80:92:15:15:2c:c6:cd:dc:
         ed:e0:4a:37:fd:b6:94:a1:78:4b:17:bb:40:a4:8b:23:8f:d7:
         fa:5e:39:95:57:23:45:32:b5:4d:f5:39:47:57:4a:65:64:27:
         42:28:1b:49:51:08:40:fd:82:23:75:3b:56:3d:7d:b9:7d:8c:
         df:4c:05:f8:60:d4:7d:fa:d9:4f:ac:27:20:25:24:29:d8:82:
         2a:36:39:81:6c:ef:84:29:7d:1a:36:98:2e:f8:ca:88:58:96:
         07:b1:de:6b:13:32:18:d6:ae:74:9b:d8:e7:ad:63:82:dd:cb:
         66:09:46:c8:87:8a:a9:b9:29:12:13:ca:5b:18:47:36:24:9f:
         fd:39:6e:b4:b3:7e:ef:96:82:ac:9f:30:69:24:21:fe:55:cd:
         7f:1d:f0:05:a7:bf:9a:7e:5e:8f:d1:c1:f1:78:7f:93:22:f6:
         5c:47:9a:fc:bc:9e:bc:2d:47:f1:3c:57:da:63:af:9b:0e:28:
         08:63:81:45:86:9c:db:3d:a8:65:3e:02:8a:c7:52:27:94:d3:
         04:1b:0a:1d:de:77:2e:18:ac:ac:3d:68:79:9f:be:fb:db:d0:
         1d:a8:60:19:da:96:51:6c:01:ac:90:b9:30:fa:45:f5:85:e4:
         0a:82:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:36:37 2026 by rpki-client