Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
File:                     D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json)
Hash identifier:          KelSa+UCPQYT5UB1yHxCry9KxAMuBrtrjLuTSn5ud80=
Subject key identifier:   9F:C2:5E:84:19:F7:C5:62:35:71:41:6A:F1:D8:F5:47:FF:D4:5E:D7
Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Certificate issuer:       /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
Certificate serial:       5681B080DE8AD96BACDE4E64CA1E716643F0A78D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
Manifest number:          025D
Signing time:             Mon 12 Oct 2026 13:18:06 +0000
Manifest this update:     Mon 12 Oct 2026 13:13:06 +0000
Manifest next update:     Tue 13 Oct 2026 16:41:06 +0000
Files and hashes:         1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: AfySAybLivxT6t5hoaR66okp0mYRpmxQ5VDWu6tRqlg=)
                          2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: TG+73epUv0UgXXrtyjl089OE9oW4ckeDLIxg3O1GA3Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl
                          rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 16:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:81:b0:80:de:8a:d9:6b:ac:de:4e:64:ca:1e:71:66:43:f0:a7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Validity
            Not Before: Oct 12 13:13:06 2026 GMT
            Not After : Oct 13 16:41:06 2026 GMT
        Subject: CN=9FC25E8419F7C5623571416AF1D8F547FFD45ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:06:f9:b3:1a:60:b3:55:94:45:20:e1:58:
                    7c:9b:9b:ac:33:60:39:6e:d9:a5:75:7a:77:f3:63:
                    3a:67:73:4e:79:7e:a0:d4:d3:fa:96:f9:bb:4a:11:
                    67:3c:b1:5e:46:79:e9:6b:dc:6b:25:1c:5c:a3:92:
                    64:70:82:2c:7f:40:93:32:c8:fb:da:a7:a5:62:c1:
                    4b:c7:ea:08:42:09:32:16:95:11:85:67:5c:9a:18:
                    eb:64:28:72:bb:07:f9:e6:de:39:6d:56:5e:b7:d0:
                    b2:aa:fe:00:21:b7:78:1f:ac:33:5e:9e:9f:28:34:
                    f5:5d:35:a6:01:7d:cb:2c:ea:48:0e:2b:85:01:aa:
                    4e:6e:0e:fd:5d:34:b2:42:7e:7f:ff:25:c1:0c:60:
                    56:0a:c9:43:53:3f:57:85:b4:3f:c5:d7:94:1a:df:
                    ae:fe:9d:ab:4c:2e:77:0d:05:01:2b:78:ae:73:8c:
                    41:d4:bc:2f:5b:d1:d5:00:a7:a3:be:28:45:9c:f6:
                    86:cd:58:bd:ad:3b:4d:6e:a4:7d:64:66:fc:10:32:
                    81:7a:60:bb:d3:83:81:29:66:1c:da:9b:10:61:3d:
                    71:2d:95:e5:17:4c:d4:f3:c3:7d:7e:3c:e8:cd:fe:
                    d0:1d:0a:9d:3c:05:57:38:aa:8d:20:62:54:e9:aa:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C2:5E:84:19:F7:C5:62:35:71:41:6A:F1:D8:F5:47:FF:D4:5E:D7
            X509v3 Authority Key Identifier:
                keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:e1:e0:0e:c4:0a:12:b9:ba:9d:25:7f:60:c6:fc:ec:cf:
         6d:2b:d0:d5:f2:a0:f1:55:06:2c:bb:69:cb:43:ec:69:ea:35:
         e0:cf:98:6a:01:8f:36:d9:4c:c1:ea:36:5e:3d:fe:4e:ec:06:
         99:01:ce:87:cf:17:d3:ed:8a:dc:14:12:b3:7a:e3:e9:1e:21:
         c2:87:44:42:92:33:2e:98:2c:ac:c7:d7:44:bd:f7:59:70:f7:
         48:56:a3:d1:f7:aa:8e:61:f2:ca:ed:90:30:e0:cb:b8:7c:88:
         0b:ea:2f:69:f0:2a:8d:9f:05:c7:6d:ca:4c:bf:0f:1b:30:3b:
         78:12:af:df:e7:28:39:15:75:39:1e:99:a6:c6:e0:66:7f:d5:
         76:b1:12:a8:34:30:69:3f:70:aa:80:a9:5d:49:b7:c7:79:d5:
         ae:38:fb:fd:2f:3a:03:e0:2a:c8:5a:fb:41:53:cb:74:93:6f:
         c9:f3:22:e2:1b:be:ed:4b:31:4f:aa:0e:50:ba:60:9d:40:53:
         c8:af:44:de:2f:99:b5:65:ba:4c:ac:4a:38:63:72:47:d7:ed:
         de:90:ae:ab:c4:01:22:48:a3:84:de:fb:a2:a5:01:bc:d2:eb:
         cf:8f:9c:73:14:7a:6b:30:f8:e3:09:f2:30:4b:06:e8:0c:bd:
         4e:18:ef:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:35:58 2026 by rpki-client