Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.mft
File:                     4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.mft (raw, json)
Hash identifier:          I9n4+fKMII4Bx2xsuCO3cqSgnbYH+tUSDU9u9oREjiU=
Subject key identifier:   9A:1E:63:5A:D4:41:58:5C:6D:7B:08:7F:91:1B:82:7F:65:76:EB:1B
Authority key identifier: 4F:86:DC:C9:2E:C8:AF:73:5F:F8:B3:31:5D:F2:4B:E1:4B:0F:D2:80
Certificate issuer:       /CN=4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280
Certificate serial:       6C8BC92704BFDAB08631333D187E163F62D10289
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.mft
Manifest number:          2C
Signing time:             Mon 21 Sep 2026 02:50:51 +0000
Manifest this update:     Mon 21 Sep 2026 02:45:51 +0000
Manifest next update:     Tue 22 Sep 2026 04:57:51 +0000
Files and hashes:         1: 4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.crl (hash: +Vel10Q9Y02cCXq2baO1GnDg9tZFMlbSyc1gXG5YuFg=)
                          2: 323830343a343532343a3a2f33322d3332203d3e20323637363735.roa (hash: 9oAz+516eN+m711h0i47AdD3xehE7mxuOdinCI+TxuE=)
                          3: 34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa (hash: 4Jnfsqa+x3k7/xk9LUZw7vsHs9D/QrapTbQ37W1aUuA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 04:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8b:c9:27:04:bf:da:b0:86:31:33:3d:18:7e:16:3f:62:d1:02:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280
        Validity
            Not Before: Sep 21 02:45:51 2026 GMT
            Not After : Sep 22 04:57:51 2026 GMT
        Subject: CN=9A1E635AD441585C6D7B087F911B827F6576EB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:c7:75:28:4a:08:48:9f:cf:08:56:15:bf:
                    64:7d:02:d1:68:aa:41:43:f7:14:24:84:b7:30:fe:
                    35:40:1d:5d:b1:a3:0c:e0:2d:a8:5e:39:50:93:3b:
                    f6:82:7a:c2:c6:72:01:34:13:ad:4f:89:b7:1f:45:
                    e7:b0:73:69:b9:e1:a8:d5:02:54:fa:55:b0:30:fa:
                    06:eb:0b:7a:67:23:50:32:d1:ec:49:de:c3:72:b6:
                    6e:5b:e8:61:56:f5:3d:b7:78:36:8e:70:f6:b1:59:
                    b3:40:d4:4b:ce:b3:95:c2:65:c2:52:9b:fe:b9:86:
                    69:8e:7f:6e:8f:4d:44:91:f4:99:c8:fa:2f:87:3e:
                    04:60:f6:0f:df:09:12:7a:9b:f4:bc:7f:30:f7:b0:
                    86:ee:ae:d2:96:cf:da:41:a7:ca:0f:29:11:d6:09:
                    6b:d5:98:4a:dd:f4:1a:76:69:e7:d3:67:10:a8:f3:
                    79:65:09:a8:c7:02:4a:6b:7d:ca:44:16:28:14:2f:
                    8d:cb:3f:1a:fd:0c:c6:84:0b:e7:84:04:c8:01:2a:
                    f0:24:c2:61:49:30:58:dc:39:98:a5:f2:64:47:f3:
                    08:fc:f4:6e:7e:ff:9c:cf:b1:7d:51:4b:9c:c8:ca:
                    25:84:87:16:6c:c9:6a:b8:28:af:cf:83:d6:c9:21:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1E:63:5A:D4:41:58:5C:6D:7B:08:7F:91:1B:82:7F:65:76:EB:1B
            X509v3 Authority Key Identifier:
                keyid:4F:86:DC:C9:2E:C8:AF:73:5F:F8:B3:31:5D:F2:4B:E1:4B:0F:D2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d2:eb:bd:88:75:28:eb:e6:b4:64:bc:d2:ae:ff:0c:02:82:
         10:1f:5e:91:ae:8c:31:c2:92:70:38:eb:c9:61:c5:6d:90:05:
         31:c7:42:bd:64:b3:49:c3:e3:2d:9f:6d:27:83:9a:b9:39:81:
         1c:b3:c0:27:d3:dc:bd:da:af:68:40:cf:a4:a6:6e:8a:53:47:
         b5:fc:f5:dd:9d:d2:40:b2:d3:6c:5c:d6:96:0b:6f:11:20:60:
         50:86:fa:38:48:b2:15:94:95:e4:8c:d9:3f:a0:68:8e:cd:4c:
         66:b8:24:8e:67:af:e0:90:81:88:7b:f1:8a:d9:80:3a:75:a1:
         c1:50:e3:53:9b:e1:34:b4:4a:5d:9a:26:dc:4a:af:c5:f2:62:
         b2:4f:c8:4e:43:12:01:9d:cb:66:1d:f6:ab:51:1c:4d:04:46:
         10:0f:eb:ab:5b:48:1a:8e:7b:6b:4b:3a:cc:0b:cf:d3:d0:f9:
         e1:ca:4a:5b:5f:b5:26:48:02:22:cb:23:cf:9a:1f:39:d8:7f:
         ad:b3:0d:89:63:bc:42:40:6d:44:44:c0:9a:08:7c:c3:08:72:
         b8:f0:71:49:a1:4e:6d:b9:24:ea:4c:0a:62:fa:37:ef:03:cb:
         72:37:11:ee:d4:bb:3c:5d:36:3f:ad:9c:bd:92:de:6d:a9:a6:
         00:67:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:26 2026 by rpki-client