Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
File:                     CDD7619BD4F71987C247C8670D9064F291B3E36F.mft (raw, json)
Hash identifier:          9rIk6WEDOsMzT1rCr/kkVAxzysebQ06LaOu8LV48DiA=
Subject key identifier:   D3:F0:44:96:E8:5E:B8:A2:3E:20:E5:54:2B:14:E7:88:62:27:2B:BC
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Certificate issuer:       /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial:       55DAAA050074A59788D6E91CDC5D3F2E281C3622
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
Manifest number:          0223
Signing time:             Wed 14 Oct 2026 08:13:03 +0000
Manifest this update:     Wed 14 Oct 2026 08:08:03 +0000
Manifest next update:     Thu 15 Oct 2026 10:43:03 +0000
Files and hashes:         1: 34352e362e3131382e302f32342d3234203d3e20323734353138.roa (hash: ve4fLz0B2mal5lzFXG/y6J3v/V9Sy+iRx6Bl6B2bVWs=)
                          2: 323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa (hash: CsNGBBkgROWPwcILTnjdywS4+uNUgjYdWa4WjzziY3A=)
                          3: 323830343a393537633a3a2f33322d3332203d3e20323734353138.roa (hash: 2ZeQRc/NSX/ljVEWFKO/ot5/zSGMMQ5+/x7fleYPYY0=)
                          4: 323830343a393537633a633030303a3a2f33342d3334203d3e20323734353138.roa (hash: esDluE1rmbeLjrzQuCnxYV5/VcvmW0ihbBI/ojPHqww=)
                          5: 323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa (hash: fY7ccb4cCtsw5Gk7z2fZJjoHa2DSv6RKSyzL2Tmgmpo=)
                          6: 323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa (hash: aNxcI01/C1zIq2Pm8px4jb5l82tKZb/xBWvU7kfxsJ8=)
                          7: CDD7619BD4F71987C247C8670D9064F291B3E36F.crl (hash: 7ZCcu7pmraWor7qrDpy6O1klNnWnJvLPpHmRIlC3Dgw=)
                          8: 323830343a393537633a3a2f33332d3333203d3e20323734353138.roa (hash: SmqLQ01GoLnCtJJYIflQsiva0NFaB4nrcNDEqxpY5tY=)
                          9: 34352e362e3131392e302f32342d3234203d3e20323734353138.roa (hash: hTclHVMT2Bo9t3qjrSSSE5344TOlnL2pBNe+1fy0048=)
                          10: 323830343a393537633a3a2f33342d3334203d3e20323734353138.roa (hash: KLDbgi47rIj7mV455QnFtaUFMV9RMQXdZNvi4MfomOw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
                          rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:da:aa:05:00:74:a5:97:88:d6:e9:1c:dc:5d:3f:2e:28:1c:36:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
        Validity
            Not Before: Oct 14 08:08:03 2026 GMT
            Not After : Oct 15 10:43:03 2026 GMT
        Subject: CN=D3F04496E85EB8A23E20E5542B14E78862272BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:df:b4:15:2a:67:07:6d:8f:6f:0e:75:8c:
                    52:74:20:ed:83:e7:3c:a4:ff:fb:b4:6a:13:63:59:
                    ca:c8:3c:41:76:05:24:d4:86:96:1d:bf:24:dd:2f:
                    d6:f7:36:63:81:76:bb:eb:17:43:aa:b8:ea:41:15:
                    a3:8f:e6:56:74:ea:71:76:1b:20:bd:89:90:ad:dd:
                    e9:20:f6:35:62:a8:cc:ea:f5:7f:85:09:55:46:95:
                    39:9a:8a:b3:55:b3:e9:8e:89:62:b4:0e:49:f6:42:
                    69:8d:90:a7:fe:8e:69:9d:41:82:f6:37:f4:96:43:
                    24:c8:de:99:5b:9f:f6:c6:02:8e:67:d7:dc:7c:d4:
                    ac:01:73:b1:b3:66:46:6b:3a:3f:29:96:72:b1:e7:
                    0d:95:2b:ac:e9:ea:b8:58:e9:3b:3c:d8:3c:7e:dd:
                    6b:9c:5c:06:b6:07:d0:98:c7:bd:e9:0b:6c:f1:31:
                    fe:96:88:14:2b:a0:00:13:d3:01:cd:67:90:c6:8b:
                    ef:0e:75:00:6a:cb:c1:2e:c2:56:00:6a:d1:6a:34:
                    70:89:e4:a5:4b:76:2f:83:46:40:4e:b3:c8:16:07:
                    ed:66:48:87:2e:dd:e6:df:ba:66:43:ad:7e:e1:1f:
                    b2:9a:46:ef:22:8f:56:f9:40:81:34:45:81:37:2d:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:44:96:E8:5E:B8:A2:3E:20:E5:54:2B:14:E7:88:62:27:2B:BC
            X509v3 Authority Key Identifier:
                keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:e6:e2:0d:8f:a5:9e:30:57:80:74:9f:b6:df:ee:87:f0:
         66:aa:97:d4:36:4a:e4:41:b6:16:a7:1c:b9:32:45:ea:49:42:
         d7:a5:7c:3c:f1:92:0b:b2:4b:c7:24:1c:c0:5f:5d:33:f0:46:
         9d:97:eb:76:55:c8:c2:fb:8c:30:51:e5:59:1d:6c:74:13:d0:
         12:a7:20:30:d2:ab:43:f8:37:eb:2d:7d:c8:2d:1c:eb:39:d5:
         d3:4a:86:b1:ba:3f:4d:74:4f:39:10:be:e7:f8:a4:b9:47:29:
         37:fe:5c:72:ed:6a:a4:71:d2:d5:b8:57:fb:5e:5f:7b:dc:2b:
         64:db:45:1d:fe:dc:57:4d:66:7a:be:e2:af:a6:98:90:3c:ee:
         dd:2a:8a:3a:0b:71:f7:b9:c5:1a:85:f4:2c:42:a2:eb:c2:f7:
         aa:ef:86:f3:f4:6a:0f:6e:1b:45:36:e6:6d:ab:a9:e6:8a:b1:
         a3:91:a2:11:34:9d:7d:d1:0b:30:5b:ba:de:0b:c1:15:ac:69:
         4b:51:52:d3:a7:9f:fc:1a:2b:e8:03:17:3b:26:2a:6a:e9:83:
         3c:a0:dc:ab:4a:ec:07:df:2e:44:37:c8:3c:fa:93:1e:84:6b:
         ed:ad:33:22:b7:32:f1:fe:c6:66:06:94:3c:7e:c0:5d:b7:5e:
         10:f8:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:58:10 2026 by rpki-client