Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
File:                     8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft (raw, json)
Hash identifier:          lxIehVxdm9FPandAB4QFd2fwCVm9GLX1wgw0EL5YWYU=
Subject key identifier:   E4:25:E6:9D:94:37:B5:8B:CD:BC:8E:A4:74:DE:60:1E:25:09:A8:B0
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       7A3E5CD8747C5D5E1F69E8E7F62F91D475B723B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
Manifest number:          04E9
Signing time:             Sun 01 Nov 2026 18:59:45 +0000
Manifest this update:     Sun 01 Nov 2026 18:54:45 +0000
Manifest next update:     Mon 02 Nov 2026 20:48:45 +0000
Files and hashes:         1: 323830313a38303a323030303a3a2f34302d3438203d3e203238363436.roa (hash: jOfZotG/k5qEYu5GNgpjlFDa4SUWkibH7dB0Wa2q6gI=)
                          2: 8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl (hash: 2NFJa2yF86cg1r86NU10oNSamWS9ecUxHn16WVG41eE=)
                          3: 323830313a38303a3a2f34382d3438203d3e203238363436.roa (hash: k8vtCgADQvDKhFe7egr0fKslK7IO1jE8GZveKt9PhQc=)
                          4: 3230312e37372e38302e302f32302d3230203d3e203238363436.roa (hash: hgirhowV1+HfFAjvyRtldPMD0LQCMP02GG24lT19IXo=)
                          5: 3230312e37372e38302e302f32322d3234203d3e203238363436.roa (hash: /ZKXVlxf8a02Tib3Gf3AEWW14X1sqVMtc3VayLoDaEw=)
                          6: 3230312e37372e38382e302f32322d3234203d3e203238363436.roa (hash: YRqaNDfwh1XkMyKX4bW3VcA5mNkJh0Qi1R305fgy7Ls=)
                          7: 3230312e37372e38342e302f32322d3234203d3e203238363436.roa (hash: RGBxdps0Ql+B1/Bb6mwypEYCaPqClBJMZ12W4XHellc=)
                          8: 3230312e37372e39322e302f32322d3234203d3e203238363436.roa (hash: X4VOfxvNnEDkgfBnmX9E+zfYqqc5X8WI9KyrjqMxiYA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 20:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3e:5c:d8:74:7c:5d:5e:1f:69:e8:e7:f6:2f:91:d4:75:b7:23:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Nov  1 18:54:45 2026 GMT
            Not After : Nov  2 20:48:45 2026 GMT
        Subject: CN=E425E69D9437B58BCDBC8EA474DE601E2509A8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:70:4d:85:65:bf:6c:4f:48:20:05:34:c7:
                    d1:bc:a5:22:43:4d:45:7e:37:30:8e:29:b0:d5:5b:
                    e8:9e:8d:68:ee:65:f8:1e:5b:e5:ef:b3:89:ba:0a:
                    80:c3:bf:c0:c2:31:07:99:1e:b3:4f:2a:d2:06:66:
                    dc:20:79:54:73:e0:00:03:79:6d:3c:a4:fd:9d:46:
                    4d:6c:63:dc:f2:e7:fa:56:df:05:a3:20:a4:43:5c:
                    4b:ba:a3:e2:2a:0c:01:62:7c:fa:1e:76:8c:c6:3f:
                    f9:71:34:12:27:d2:79:64:4a:73:e4:16:b6:ad:19:
                    15:7d:26:f3:08:b6:1d:a8:65:f9:c3:b2:b7:97:c8:
                    e2:ca:4a:bb:a6:3d:25:fb:7e:f6:bf:16:8f:c8:58:
                    47:b1:d7:40:4f:89:4c:29:19:95:20:3b:b0:66:dd:
                    c6:09:65:8b:6e:ea:f0:49:38:3d:cf:9b:d3:e5:c4:
                    cb:f6:82:07:4f:c8:27:87:d8:12:df:ce:cf:1f:a2:
                    64:7e:58:52:1d:3c:7c:5c:38:71:2b:1a:42:42:4f:
                    81:63:50:40:b9:0d:20:3d:da:9a:5c:b1:fd:49:73:
                    de:30:29:5b:e9:9a:46:8f:ec:8b:d9:d8:92:c0:82:
                    f8:68:2a:16:79:ec:79:b0:c9:2b:98:97:a3:32:fc:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:25:E6:9D:94:37:B5:8B:CD:BC:8E:A4:74:DE:60:1E:25:09:A8:B0
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d8:0d:56:dd:3f:f2:b6:1c:30:18:d5:23:e7:3a:ad:97:d0:
         df:d8:7b:38:92:7a:04:10:a2:37:a3:2a:77:d1:b9:f8:86:78:
         37:75:38:bf:94:cf:f6:eb:7d:cd:a1:d3:ad:2f:9f:6b:43:f9:
         94:19:ef:37:0f:50:63:a9:82:f8:bc:0f:07:23:3c:50:d2:4d:
         d2:d9:2a:e2:6f:e5:40:7a:0f:ef:b2:60:8c:39:a3:0c:f1:84:
         50:08:92:48:70:46:34:59:44:85:c1:40:f1:e9:e3:81:4e:27:
         34:57:c9:11:13:64:59:19:6d:f9:27:ca:1a:22:19:fd:42:c6:
         93:c1:47:4d:ef:44:89:b4:93:43:a2:9e:76:b6:a9:aa:33:37:
         01:91:7b:c3:1b:d6:21:53:55:7a:b8:ea:35:24:0e:8d:e0:65:
         c9:54:e7:cf:59:ab:6c:88:01:bc:f7:79:17:3e:c2:ac:96:a1:
         74:b6:86:7e:9a:96:88:ac:e9:96:6a:ac:3e:2d:ae:b0:13:3b:
         d2:e2:0a:46:f2:70:5a:c7:97:df:f3:0e:da:a1:1f:d9:56:95:
         e1:8d:1d:b1:8d:49:7f:60:7c:bc:39:29:2b:5a:f6:9c:85:b1:
         0c:3a:4f:19:4a:74:f3:02:04:39:85:73:23:12:7e:4e:d4:7e:
         74:89:ff:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 01:58:02 2026 by rpki-client