Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
File:                     44AA67B8361484903B52C5717C3AC07266651DDA.mft (raw, json)
Hash identifier:          RsBkw3FaTp5h3a+orIBFeSW923xHrxBLXeGv7pznc1g=
Subject key identifier:   C5:D2:82:23:25:4D:39:3C:F2:FC:29:77:E9:58:AB:52:B5:67:AF:D2
Authority key identifier: 44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
Certificate issuer:       /CN=44AA67B8361484903B52C5717C3AC07266651DDA
Certificate serial:       738E752DB6D07B39053D4E8155492D40ED064E24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
Manifest number:          CF
Signing time:             Wed 28 Oct 2026 02:11:54 +0000
Manifest this update:     Wed 28 Oct 2026 02:06:54 +0000
Manifest next update:     Thu 29 Oct 2026 02:40:54 +0000
Files and hashes:         1: 3137372e39312e302e302f32342d3234203d3e20323733333731.roa (hash: I+ai2zrryIB3jm/ZyUhGUCYdlQNlYlsJoBGvwg5y1Qk=)
                          2: 3137372e39312e302e302f32322d3232203d3e20323733333731.roa (hash: FJNudzw+KP3HO+d7mgZJJmAc6MZm7EnyiN6jQ/uu1fQ=)
                          3: 3137372e39312e312e302f32342d3234203d3e20323733333731.roa (hash: b+vlEn9PV+UPgjfoB6HaIT2kxWoQSIFG9HMDR0ANizg=)
                          4: 3137372e39312e322e302f32342d3234203d3e20323733333731.roa (hash: 3uxyq/H6+IL4AqA8WdQh52Drrhs8STO5IL5xDQRr1PY=)
                          5: 323830343a386461383a3a2f33322d3332203d3e20323733333731.roa (hash: dUSclG3hcnvmzCtZad0ztte8VuntvaZbq6OAKVQlXpg=)
                          6: 3137372e39312e332e302f32342d3234203d3e20323733333731.roa (hash: 4rJ2qZ0yZt79f8SRQfm6ezLUKfXsSzqk254BIL2m0NE=)
                          7: 44AA67B8361484903B52C5717C3AC07266651DDA.crl (hash: WmiNoSIHMPHnn2I2iSUaEMX1Bus5e5DU77oOukhwbiA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl
                          rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8e:75:2d:b6:d0:7b:39:05:3d:4e:81:55:49:2d:40:ed:06:4e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AA67B8361484903B52C5717C3AC07266651DDA
        Validity
            Not Before: Oct 28 02:06:54 2026 GMT
            Not After : Oct 29 02:40:54 2026 GMT
        Subject: CN=C5D28223254D393CF2FC2977E958AB52B567AFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:76:d7:fa:32:1b:65:6b:a9:19:ea:a0:63:
                    12:18:f7:59:50:d2:08:e7:69:8f:e9:cf:fa:c9:90:
                    11:55:67:3b:1c:bb:31:bd:69:89:61:86:7f:15:08:
                    3a:0e:03:6b:9a:ed:19:8a:d3:22:6f:5f:0a:81:f4:
                    e7:91:a2:94:32:25:24:40:9c:79:43:01:a8:f7:d5:
                    86:70:4b:41:ed:24:c5:34:6e:43:81:86:47:28:f8:
                    d9:46:38:c1:9a:4d:f3:0e:d7:67:ea:21:c5:04:02:
                    0a:59:3f:7f:2e:b5:d4:a0:5a:f0:aa:5a:8b:d6:9f:
                    52:2c:7f:d1:c5:b4:3b:27:36:25:fe:27:30:b1:95:
                    82:a3:9a:b2:18:2c:2d:eb:4a:15:7f:32:3b:b3:bc:
                    cd:85:43:d0:e6:8a:55:8f:dd:99:33:68:90:72:d2:
                    fc:1b:d0:cd:4b:b7:14:dd:6c:58:20:d9:20:53:09:
                    e9:33:9b:18:60:66:62:bb:54:28:41:3e:9a:01:31:
                    1c:bc:ee:14:48:af:ab:b7:6c:ea:87:41:b3:28:69:
                    d3:92:cc:64:00:08:dc:a9:0c:22:13:48:de:a5:05:
                    51:0d:3e:91:65:e7:00:3d:c1:a4:27:53:9e:be:47:
                    c8:41:71:dc:38:5e:ec:eb:23:fa:c5:f8:ae:95:96:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:82:23:25:4D:39:3C:F2:FC:29:77:E9:58:AB:52:B5:67:AF:D2
            X509v3 Authority Key Identifier:
                keyid:44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c6:72:97:2a:d7:ab:5b:d0:f4:c5:eb:1f:9c:fc:0b:95:c7:
         72:6c:21:a3:fe:77:bb:8b:72:50:8a:9b:07:4d:f5:f3:c6:d6:
         b2:64:1d:78:32:6b:f7:c3:86:3a:ab:9d:d8:e7:f1:41:2b:7a:
         41:50:64:9e:35:f8:6f:ca:36:89:9a:f9:33:cb:07:45:55:7b:
         2b:b6:fa:dd:76:d3:c6:0f:25:72:c7:cc:68:5c:34:57:e2:d9:
         a5:fc:eb:35:02:ef:69:e7:f7:6d:26:80:9e:9d:2f:4b:24:47:
         eb:62:7f:a3:f4:7c:16:29:52:09:df:58:b3:02:cc:2f:a8:9c:
         68:a7:be:a9:c2:f7:14:c3:00:af:82:4d:ba:fc:55:ac:66:b7:
         88:dc:85:a8:23:d5:ff:98:9b:65:19:f9:3b:87:31:cc:fb:df:
         86:55:45:e3:04:d3:94:b0:21:f4:49:2f:ce:62:75:a7:c4:3c:
         84:0c:5f:a2:56:21:46:55:59:87:88:2b:09:7a:2a:07:f4:1a:
         8f:75:42:c6:94:bf:8b:80:73:d2:02:0f:2f:f1:f5:ed:23:28:
         06:34:9e:c2:f1:52:09:4f:84:e5:1e:5a:22:0f:c2:e5:1c:55:
         0b:25:b6:ea:12:0b:38:8f:84:8b:cc:cb:f2:ec:09:cc:d7:11:
         a7:3b:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----