Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
File:                     CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json)
Hash identifier:          j/WhQDwpTrwDQDHgbnrZbO04yjsX5/LH3Cof5qSQjmg=
Subject key identifier:   50:0E:5F:C0:32:EC:1B:18:CE:AF:B1:75:C1:9B:17:97:D6:36:B3:44
Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Certificate issuer:       /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
Certificate serial:       4DB65987D67B4CD9718C8CE6E94666723674A713
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
Manifest number:          04D4
Signing time:             Fri 16 Oct 2026 06:08:26 +0000
Manifest this update:     Fri 16 Oct 2026 06:03:26 +0000
Manifest next update:     Sat 17 Oct 2026 06:55:26 +0000
Files and hashes:         1: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: 0+L4aZDGVE+xOx58Nqs5OwAMrEmJylvDxU3iV/y2d0A=)
                          2: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=)
                          3: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: k86a0+uv5zD3SsmdEzqcE1ytVc+p89TZjScuSpRh/mg=)
                          4: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl
                          rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b6:59:87:d6:7b:4c:d9:71:8c:8c:e6:e9:46:66:72:36:74:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
        Validity
            Not Before: Oct 16 06:03:26 2026 GMT
            Not After : Oct 17 06:55:26 2026 GMT
        Subject: CN=500E5FC032EC1B18CEAFB175C19B1797D636B344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:01:47:f9:73:7b:9a:14:7d:8f:9e:63:d2:
                    46:dc:30:f9:fb:cb:aa:b4:3c:4e:de:f7:7d:ef:fc:
                    c0:94:a9:32:50:1e:34:d4:c2:62:c8:8f:9b:ea:dc:
                    0c:d3:7a:c5:26:13:3a:fc:ab:b9:87:f6:bc:ba:93:
                    a4:19:02:4c:87:2c:87:c4:70:f9:9c:60:3b:a9:85:
                    b0:62:90:03:73:08:39:ab:b9:50:fc:37:db:5d:e1:
                    d7:6f:74:40:ee:ae:36:85:f7:ee:2e:43:5d:c0:6a:
                    bb:60:24:4f:e4:4a:d1:34:e8:60:6f:15:f9:b4:f5:
                    92:8e:eb:82:0c:91:62:c4:46:e0:04:ad:47:75:51:
                    0c:f8:08:a4:7a:b1:03:51:f8:23:c0:19:fc:a0:dd:
                    f1:18:18:a8:49:2e:aa:c6:7f:63:88:1c:6f:48:7c:
                    89:14:e9:d0:35:0e:1a:69:9e:ef:53:d1:9e:c2:99:
                    8b:ab:a9:a3:6e:bc:1e:d3:37:b0:ae:32:59:8c:0a:
                    5c:14:3f:58:0e:1f:ca:4b:e7:ac:f4:5d:b9:9c:f7:
                    79:2b:98:67:f1:e7:ab:7a:22:96:72:7f:6a:84:b4:
                    22:86:e3:cc:6b:f5:e4:31:e4:2d:90:cc:a4:1e:ee:
                    0f:ef:23:d5:25:ec:11:39:c9:0a:92:25:d0:31:c7:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:5F:C0:32:EC:1B:18:CE:AF:B1:75:C1:9B:17:97:D6:36:B3:44
            X509v3 Authority Key Identifier:
                keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:81:9e:12:57:0b:16:96:f5:81:b5:d4:e7:d5:fa:53:5c:cf:
         f2:2f:b2:51:6b:47:5e:a3:70:16:03:52:4a:52:62:ea:94:e6:
         4a:f9:2f:b9:dd:4b:9a:c8:ec:73:68:bf:0c:74:3d:18:76:3b:
         07:4c:22:31:e9:f3:c3:9e:ad:f9:ae:a8:f6:87:87:e2:17:17:
         f1:06:3c:96:56:3d:ca:08:cb:3e:d1:1e:6e:39:f5:e0:62:e1:
         ca:2f:d2:f1:56:b8:b0:e1:1b:40:7a:4c:1a:ee:dc:53:49:00:
         1b:b7:64:3a:a5:46:30:73:c0:cc:58:d0:d2:ae:0c:af:13:1a:
         96:68:5e:2a:90:c2:7e:e9:00:bf:8b:33:c3:17:ca:64:b9:14:
         22:6a:68:36:55:07:b8:0d:9b:96:45:df:77:c8:1c:54:6a:5e:
         a9:0d:b5:09:2f:ba:b2:a1:19:0a:a1:7f:cb:0f:e2:36:d8:92:
         2d:3d:96:ed:16:d1:cb:84:86:60:b5:37:d4:2a:f2:9a:b5:b8:
         f6:b6:6a:5a:a2:3c:e4:a7:32:72:93:50:c7:da:d4:31:bb:6b:
         40:ab:76:85:18:eb:04:49:a9:db:7b:30:ed:8b:93:20:cd:68:
         d5:31:62:0b:a4:13:87:4d:b3:e9:e1:de:39:84:2e:a3:ee:22:
         21:78:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----