Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
File:                     CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft (raw, json)
Hash identifier:          4QmtHH+M0nZV8YfAZ8N3UjSta4lp4OoaZd1qgyyO+yI=
Subject key identifier:   16:78:2E:A2:6A:5C:1A:20:40:E5:B7:72:A7:7F:4A:67:71:F2:B4:1D
Authority key identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91
Certificate issuer:       /CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
Certificate serial:       40332AF5E4B1291D1E2735D7D764D4FFE971C9CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
Manifest number:          B8
Signing time:             Sat 31 Oct 2026 01:17:50 +0000
Manifest this update:     Sat 31 Oct 2026 01:12:50 +0000
Manifest next update:     Sun 01 Nov 2026 03:53:50 +0000
Files and hashes:         1: 323830343a326336343a3a2f33322d3438203d3e20323635323135.roa (hash: WANm1F6sSBsFTOfUmiHGg4ICR4rvlqK0ssG6KDIYLoc=)
                          2: 3136372e3235302e3138342e302f32322d3234203d3e20323635323135.roa (hash: CHOOKZQIOYxzpT/kc2KUiR2j+iPpUCZEl7IDfqZHwD8=)
                          3: 34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa (hash: fo+GMng67/O0QE9/lvD790XYBLwfdCA2eo3lBqgJmTg=)
                          4: CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl (hash: PdV7qyorJ7YJX56K3Kv0w8kc7sM8uoA7Lr+e+Yy2Prc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl
                          rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 03:53:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:2a:f5:e4:b1:29:1d:1e:27:35:d7:d7:64:d4:ff:e9:71:c9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
        Validity
            Not Before: Oct 31 01:12:50 2026 GMT
            Not After : Nov  1 03:53:50 2026 GMT
        Subject: CN=16782EA26A5C1A2040E5B772A77F4A6771F2B41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:9d:21:4c:1a:aa:7d:8a:2e:60:d3:68:4e:
                    65:70:bd:8f:2d:f2:03:fb:30:ca:a4:d9:3c:37:25:
                    2e:7e:d6:e0:4f:41:5f:d7:84:96:ee:ca:5b:d1:c4:
                    45:5b:03:fc:f5:f9:af:86:70:04:ea:d6:6b:bb:00:
                    ae:25:aa:42:f6:a0:c3:7e:ff:79:a6:9a:a9:38:e0:
                    23:6d:1f:2e:5a:c1:33:f6:7b:0b:d2:dc:67:4a:26:
                    92:3b:f3:cf:05:bf:6c:7d:be:2e:bf:1d:90:d0:cf:
                    bf:67:48:2a:16:04:9a:ed:20:46:4f:48:92:d5:73:
                    74:f5:3a:b3:41:95:e7:a9:42:b8:d2:2a:bf:35:bb:
                    9f:79:1d:87:55:18:ae:35:fd:65:f4:24:36:6b:34:
                    52:58:0b:1f:c1:10:d2:8c:02:5d:15:3d:f5:f1:ff:
                    df:96:5f:66:9d:49:72:a0:23:dd:34:8e:58:9f:bb:
                    21:85:4e:19:59:6e:25:46:1e:fa:9b:8e:b8:e8:e0:
                    b0:5d:3c:b3:d2:ad:88:c2:6d:b7:70:24:bf:b8:b2:
                    a3:fd:ae:46:fb:05:5d:0c:27:9e:8f:60:a2:25:68:
                    df:82:2c:6c:2a:5f:a6:6a:1c:b8:63:67:d2:1e:c5:
                    70:70:7b:f6:8d:5c:52:36:96:26:87:67:e3:ed:74:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:78:2E:A2:6A:5C:1A:20:40:E5:B7:72:A7:7F:4A:67:71:F2:B4:1D
            X509v3 Authority Key Identifier:
                keyid:CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3c:a0:ed:18:67:99:75:c6:ca:21:2f:e9:32:22:c6:97:be:
         3f:aa:43:81:44:31:3f:f9:41:c5:7d:93:20:88:06:40:21:c4:
         03:80:31:d2:b7:b1:7c:36:49:45:0b:64:c9:e6:6e:b6:95:74:
         55:ab:92:7d:94:1b:1c:20:0e:4f:12:53:ef:54:a5:1d:ed:60:
         c5:25:1b:ec:c9:2c:91:77:4f:36:c4:ba:a3:71:d0:17:d9:6e:
         2b:d6:d9:7e:a1:14:e7:c3:44:c9:b6:79:5a:29:2a:d5:9f:89:
         4d:e5:d4:ea:99:74:96:c2:ca:7f:2e:98:fe:81:3e:74:54:01:
         5d:0a:74:eb:ca:27:72:73:11:ff:ed:89:51:df:8c:e9:55:8f:
         7e:f8:c8:90:2e:e2:15:6b:7d:40:de:a4:66:0d:0e:50:b2:4c:
         1b:4e:22:65:9b:8e:b9:e4:88:e7:32:f0:1d:89:7d:ad:45:44:
         fb:f1:b7:47:95:1f:7b:98:cf:e3:42:66:eb:9b:25:79:07:29:
         fa:d9:60:1b:fd:32:df:c6:69:41:b0:93:33:20:cf:51:14:87:
         25:09:d2:90:be:a7:4a:06:a3:a2:70:4c:1d:ec:d2:63:07:a8:
         db:ba:bb:70:52:58:a4:cf:ea:5f:9e:18:a2:92:4e:6e:e1:7d:
         f7:66:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----