Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
File:                     DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json)
Hash identifier:          u5PC4MImzPYB52xJ66CFzx+p4J3tuZquQ+gEhnbquF0=
Subject key identifier:   6E:71:A5:74:55:B7:C5:12:87:6B:C9:83:04:65:D2:A9:90:E7:61:83
Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA
Certificate issuer:       /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
Certificate serial:       144AC7C98277E939DD895C69A8C37AFE4EE1467B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
Manifest number:          04CC
Signing time:             Wed 14 Oct 2026 06:00:00 +0000
Manifest this update:     Wed 14 Oct 2026 05:55:00 +0000
Manifest next update:     Thu 15 Oct 2026 07:11:00 +0000
Files and hashes:         1: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: kCGFK7YtNrfd2Qdx9oln7/DxL5CprsaWV3v3x5Dimdk=)
                          2: 323830343a363532343a343030303a3a2f33342d3334203d3e20323639343731.roa (hash: 7/GkhFPFga6eSNEGWPf48bnfOxtD+TjVD74tqu8gyfg=)
                          3: 323830343a363532343a343030303a3a2f34302d3430203d3e20323639343731.roa (hash: IHCcdJHmK0uDqDY5atgymN1EVyt5Mw/EcbYmOHTF49g=)
                          4: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: IsmcMqVAoEMr+B0pxTfwcZUj3CrDXCrhF8H1RgC2wYQ=)
                          5: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: eNGRoIC1MIZHrkwbT+gRbTqM7MTnVMuBG9EvAdA4qSs=)
                          6: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: twhCXNYsxKUt2FAKh+PFseqgFgC5yGLvHauq/G9V2bw=)
                          7: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 3Vpf26/INv+eWHcXQ7mfZOqQtwrLqsaYRx7Y1pWfnUE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl
                          rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4a:c7:c9:82:77:e9:39:dd:89:5c:69:a8:c3:7a:fe:4e:e1:46:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA
        Validity
            Not Before: Oct 14 05:55:00 2026 GMT
            Not After : Oct 15 07:11:00 2026 GMT
        Subject: CN=6E71A57455B7C512876BC9830465D2A990E76183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:d8:e1:36:33:12:16:43:39:cf:a5:8a:88:
                    f8:53:ed:36:9c:d9:78:1c:7e:6e:a1:83:6b:b5:05:
                    31:fd:ec:83:a2:e7:52:0b:be:ac:47:bd:04:8a:35:
                    d9:67:b5:d3:46:e6:40:1d:ee:1c:2b:01:e1:51:c5:
                    f7:99:5e:20:d4:dd:64:04:24:ab:5d:ef:a1:a8:1b:
                    74:76:92:14:c9:49:a5:12:06:1a:8b:58:27:23:db:
                    9e:85:8d:75:f3:84:97:94:83:87:3b:43:1a:8e:59:
                    8c:f4:06:d5:57:a9:f8:eb:2a:a6:df:2a:39:68:39:
                    0c:8a:84:63:3f:64:09:75:9c:ff:1a:2e:cb:ad:9d:
                    52:89:89:2f:29:96:87:aa:a7:81:56:39:53:20:10:
                    9c:88:a7:3a:51:fa:db:4b:04:70:25:e8:77:9a:ed:
                    16:e5:6b:bb:34:9e:a4:f8:96:b7:e9:3d:dc:69:f8:
                    f7:cf:80:a4:71:4d:37:91:db:10:cd:60:42:69:34:
                    ff:e4:48:b5:f0:1c:44:3a:98:bb:b0:8a:28:be:45:
                    9a:2c:2b:5e:41:97:42:0a:c9:c8:32:3e:b5:40:25:
                    43:cb:60:b7:b3:12:35:68:8e:7f:d4:5e:ff:eb:5b:
                    60:38:16:d2:b8:77:df:59:98:1c:0a:af:01:d0:88:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:71:A5:74:55:B7:C5:12:87:6B:C9:83:04:65:D2:A9:90:E7:61:83
            X509v3 Authority Key Identifier:
                keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:19:7f:97:9b:a1:19:30:92:89:16:70:44:27:c3:e4:fd:
         45:62:90:05:88:b8:ca:f3:77:0d:2f:2f:73:61:84:26:23:ae:
         e0:d5:28:d5:c8:df:49:b5:f8:22:6a:aa:69:d6:22:31:f3:58:
         f0:d2:bc:9f:00:36:57:a1:f4:c5:aa:54:4e:21:1a:9e:84:65:
         83:00:8a:f4:e4:db:c9:01:ca:3d:32:75:b1:38:49:88:6e:3e:
         03:88:43:49:91:84:b4:d6:be:df:27:23:80:2b:7a:76:d1:42:
         fd:26:e6:85:5f:fa:a5:4c:88:74:84:72:1f:fb:c4:9b:c7:61:
         18:30:7f:09:30:ce:36:39:af:17:bc:31:84:ac:b6:1a:82:fb:
         b2:41:cf:ee:8d:e6:dd:61:c9:f8:c4:58:3c:7c:78:40:2f:8c:
         dc:fe:ec:4e:b7:9b:c9:46:02:d7:03:03:2d:8e:e3:bf:25:83:
         cc:51:7d:b0:d2:1d:c1:d7:e2:9a:e5:f8:46:c5:6c:75:a6:cb:
         86:03:a6:93:41:45:f2:d7:c0:2f:0f:c1:28:ee:fa:67:57:f3:
         b0:86:21:7e:bb:91:87:aa:11:08:0a:66:8d:d4:08:eb:39:ad:
         c8:09:51:a1:a4:f8:d7:e7:11:0b:65:f1:25:f2:39:00:6a:d4:
         c6:72:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----