Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.mft
File:                     DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.mft (raw, json)
Hash identifier:          bqVFJauiVSXjfJipskPLZfk9evE8GLpsmnPolkAvMuU=
Subject key identifier:   18:19:CB:14:70:BD:04:D3:07:0C:A6:AF:78:97:72:F7:74:51:67:C5
Authority key identifier: DC:1A:F9:65:E8:8C:C5:CC:96:AB:70:0F:97:E1:08:9D:E1:A7:5A:19
Certificate issuer:       /CN=DC1AF965E88CC5CC96AB700F97E1089DE1A75A19
Certificate serial:       1743887E4128E21F179909F7B7914A2A201F69B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.mft
Manifest number:          04E5
Signing time:             Sat 31 Oct 2026 12:29:47 +0000
Manifest this update:     Sat 31 Oct 2026 12:24:47 +0000
Manifest next update:     Sun 01 Nov 2026 14:02:47 +0000
Files and hashes:         1: 3137392e34382e3136302e302f32322d3234203d3e20323731303931.roa (hash: 1Ztsb/C2ivzPH1QPIG2d8k8inClyZWefKC9Wc9d5Am0=)
                          2: 323830343a373632303a3a2f33322d3430203d3e20323731303931.roa (hash: P5Nd/yZBkgcdrAkO+XKlo0BQHkmqFu0GlWDbZaG6E40=)
                          3: DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.crl (hash: 2V9ZWBj5jukjLztpEaDR74/dfBsz0GPpRJboGZrbpSk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.crl
                          rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 14:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:43:88:7e:41:28:e2:1f:17:99:09:f7:b7:91:4a:2a:20:1f:69:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1AF965E88CC5CC96AB700F97E1089DE1A75A19
        Validity
            Not Before: Oct 31 12:24:47 2026 GMT
            Not After : Nov  1 14:02:47 2026 GMT
        Subject: CN=1819CB1470BD04D3070CA6AF789772F7745167C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:da:c9:94:4c:68:74:f9:1d:e6:70:9d:d5:
                    ce:d3:ed:f4:77:19:e9:25:97:2e:5b:d1:c0:06:76:
                    85:11:eb:67:5a:19:56:02:e6:4b:55:af:5b:41:72:
                    1a:54:e7:2c:c5:3f:c4:fb:e1:61:58:e2:d6:4f:4a:
                    ee:a2:c4:c4:47:99:25:16:3c:ed:62:21:e0:d1:58:
                    9a:64:d3:19:9e:2b:c0:8d:64:70:00:04:0e:a5:17:
                    58:e1:2b:2e:cb:34:60:4b:74:c2:8f:c1:96:b8:df:
                    99:60:04:ea:04:ea:98:cd:e5:9b:14:31:29:ec:e7:
                    f6:ae:e9:77:89:5c:05:5e:74:3b:c5:77:d3:ce:4d:
                    a3:23:d2:83:37:d1:df:1c:14:53:11:69:2c:2f:08:
                    e8:a1:b5:33:dd:4f:01:a7:7c:db:9a:f1:62:d7:98:
                    ea:73:29:2d:a7:c4:5c:14:de:89:27:1f:0d:7b:40:
                    8f:f6:b6:35:59:b8:da:6e:4e:40:23:6e:ae:df:f6:
                    f5:70:1e:df:9f:68:d7:f2:ce:5f:4f:eb:bf:06:39:
                    a0:6b:1a:10:9e:fb:19:01:a8:45:b5:a6:b3:1e:81:
                    38:64:90:32:e0:b9:65:7a:39:e6:e7:7b:d4:3d:06:
                    3d:a7:49:1d:f7:fc:ad:f3:a8:06:3f:1f:be:70:b7:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:CB:14:70:BD:04:D3:07:0C:A6:AF:78:97:72:F7:74:51:67:C5
            X509v3 Authority Key Identifier:
                keyid:DC:1A:F9:65:E8:8C:C5:CC:96:AB:70:0F:97:E1:08:9D:E1:A7:5A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dGmNshsi14s8SnyQWQhcfG5RiYdfcBTkwDMYxiQdVD9/1/DC1AF965E88CC5CC96AB700F97E1089DE1A75A19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:bd:25:31:2e:d7:4e:cc:59:21:e7:72:03:ac:73:43:1b:d1:
         78:a4:f0:b1:b4:db:56:49:2d:eb:98:0f:05:34:81:59:72:9e:
         ab:5c:34:04:2c:6a:95:11:f3:17:8b:91:bb:4d:04:60:13:2e:
         a0:24:32:6f:d8:00:f1:6c:a0:aa:bd:c8:c5:51:07:42:8a:1a:
         ae:c4:4e:07:f2:b6:49:40:6c:fb:7c:0a:28:a8:2b:df:fc:f8:
         28:c5:56:be:fb:c1:9f:c9:e8:81:d3:e5:89:d6:72:8c:5a:87:
         3d:cb:ce:48:7e:9c:d9:9e:61:fe:19:1c:d8:a9:20:5f:e2:49:
         f4:9e:af:23:92:f5:f8:b9:3f:df:03:87:75:f8:f9:8a:06:c7:
         29:06:76:ea:82:f3:0a:2a:3c:22:ce:6d:e0:b1:57:89:4a:1a:
         06:ef:8c:d8:a0:58:b3:4f:f2:60:1e:6c:b5:ab:39:b1:09:d9:
         f0:e3:ca:94:73:d4:43:ce:2b:fe:1f:bd:9b:26:d3:56:32:c6:
         e4:c0:66:6c:dd:91:e4:4f:fc:63:ed:20:21:48:6b:4c:56:16:
         40:94:44:d0:a9:a7:cd:9c:bd:cf:72:2d:57:61:d7:d0:13:56:
         f2:64:52:27:1d:3d:ba:6a:bf:96:c1:ac:c7:59:59:bc:ae:b1:
         ed:c3:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:33:58 2026 by rpki-client