Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
File:                     3D4867F11A1D652682FA95ED911B20D81139853D.mft (raw, json)
Hash identifier:          k6REDA9ebHdQ2EMxKYlz4g6tD/rjidyIwN/OU3F6dOg=
Subject key identifier:   63:C8:05:D5:07:65:08:F5:BA:60:10:0E:76:60:B8:11:FE:3F:83:07
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       7B1D39C31E51A1BE08C858C73E5577E3A70D4A5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
Manifest number:          0429
Signing time:             Tue 03 Nov 2026 05:02:37 +0000
Manifest this update:     Tue 03 Nov 2026 04:57:37 +0000
Manifest next update:     Wed 04 Nov 2026 08:22:37 +0000
Files and hashes:         1: 34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (hash: 5xcuYjxsyYIsQe06yVZ/OpqCQMoiYJV6WQZpxD7kp7A=)
                          2: 34352e3138322e35342e302f32342d3234203d3e20323639323835.roa (hash: V75h7ylVGihrzt5p+59jg/tWrI1wgEeppFAJPChd55Q=)
                          3: 323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (hash: Y4FFf0Yu2yN/JXuvd+a1MVQDBDhuKLo5Srnwc76f/p4=)
                          4: 34352e3138322e35332e302f32342d3234203d3e20323639323835.roa (hash: oVAc0/sw2+IR9Vg17sCO48O6FK/AzXStl+Z2yIVeCD4=)
                          5: 3D4867F11A1D652682FA95ED911B20D81139853D.crl (hash: a4x4y315ronvCS6WuLogOdKOGGq9bVDU3XJzjMwul04=)
                          6: 34352e3138322e35322e302f32332d3233203d3e20323639323835.roa (hash: EQli3XF2UoNp3nPp41xIQde5xxjV5tnb2ABkEamlz7Q=)
                          7: 34352e3138322e35322e302f32322d3232203d3e20323639323835.roa (hash: puZyp6YGZYSBjt/M3N560MkgzbWydkHN2LvCtoBLDG0=)
                          8: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (hash: TCquUhvK83//2KXktaMnBeM5vR8jYFpVAdiVuGELKHc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 08:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1d:39:c3:1e:51:a1:be:08:c8:58:c7:3e:55:77:e3:a7:0d:4a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Nov  3 04:57:37 2026 GMT
            Not After : Nov  4 08:22:37 2026 GMT
        Subject: CN=63C805D5076508F5BA60100E7660B811FE3F8307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:33:78:ce:a0:9a:c1:0e:e0:23:ec:5c:61:
                    1c:94:f1:2a:5e:fe:65:24:b6:22:44:c7:b1:5b:ff:
                    32:f7:2f:44:4e:ca:fb:21:30:65:c6:c7:9c:b4:9b:
                    4d:ec:d2:0b:1b:b6:e6:7a:09:35:3e:cb:8e:3c:c7:
                    4d:e3:f9:1a:a8:22:ad:f7:1a:a3:ae:42:1b:e8:a3:
                    a0:33:23:7b:61:a4:a5:d1:ff:55:d0:ed:26:46:ef:
                    eb:fc:da:5e:31:be:bf:66:84:34:7b:1c:21:ca:e6:
                    43:83:9b:5d:98:11:e9:07:21:27:95:45:6e:59:3e:
                    9b:7f:ee:ed:da:b7:3e:ef:81:a5:c9:73:78:a9:7f:
                    22:38:cf:c7:16:d1:79:85:fd:21:38:a7:c7:e3:b8:
                    db:b4:e6:f5:ee:a0:36:d5:5f:82:55:87:a0:c1:6a:
                    3e:42:bb:99:24:72:fc:3d:b2:72:fe:68:69:fe:bd:
                    c8:ce:92:75:bf:8b:24:aa:dd:d2:72:87:7a:3e:3f:
                    97:08:0e:03:75:94:3d:b0:c8:0f:68:56:fb:b1:4a:
                    10:4b:37:94:64:c3:a4:b0:a5:88:3c:c9:e5:1a:7d:
                    de:ae:40:96:94:b2:2a:ec:fa:78:11:1c:0c:0c:a7:
                    2b:fa:05:b6:6c:57:f7:62:ab:d1:7d:26:47:9f:19:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:05:D5:07:65:08:F5:BA:60:10:0E:76:60:B8:11:FE:3F:83:07
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7a:c3:85:6e:ba:fc:72:ef:9d:26:5e:7e:63:6e:0d:a7:dd:
         3e:5f:35:31:18:e1:34:b3:9f:04:cc:c0:67:bb:13:b5:58:87:
         fa:11:cf:ae:98:f4:bc:0b:6f:1d:05:17:e3:1d:17:03:c5:83:
         0b:37:24:6b:c0:03:8f:9a:55:7f:b9:3f:a6:18:a5:96:18:41:
         d2:53:11:55:29:38:b6:39:26:b1:89:4c:6b:22:a6:73:84:eb:
         26:49:d8:91:6b:aa:9d:ad:19:82:e9:97:e9:ce:0c:1b:51:b3:
         be:35:11:81:c5:5c:b6:a8:b3:71:93:d8:4a:05:2f:05:3d:db:
         bd:e0:81:09:45:9c:d8:0e:19:cc:57:cb:65:03:6f:0b:70:48:
         5e:3e:9b:43:46:f9:26:95:90:0f:fc:96:b9:92:0d:00:96:ac:
         a4:8f:17:09:1f:00:c0:8d:46:1a:94:96:94:51:14:96:12:58:
         dc:14:be:b5:de:28:b2:56:f1:f1:62:51:4a:6c:b7:2c:dc:fd:
         be:a3:b2:b6:1c:23:cd:a9:fb:6d:20:b8:74:09:fb:08:79:9e:
         57:ed:55:89:e2:f2:db:d4:d3:54:79:c8:88:64:fd:61:aa:5c:
         ca:43:ad:8a:8a:3e:81:35:1c:2e:69:a9:9f:b3:d5:8d:4b:fe:
         93:f3:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 15:36:43 2026 by rpki-client