Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
File:                     37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft (raw, json)
Hash identifier:          RBQcSrXeyOKRnIGVJZFbMG2jCETLnky/XxPlk1O8zjo=
Subject key identifier:   0D:8C:6D:88:A8:C0:63:90:F9:A8:E0:B7:1B:F5:22:AD:B3:4E:40:0F
Authority key identifier: 37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0
Certificate issuer:       /CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
Certificate serial:       5A282CA84354E0488F5EB83F363042149F77FF64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
Manifest number:          CE
Signing time:             Sun 11 Oct 2026 00:38:37 +0000
Manifest this update:     Sun 11 Oct 2026 00:33:37 +0000
Manifest next update:     Mon 12 Oct 2026 03:40:37 +0000
Files and hashes:         1: 3138372e34392e3135342e302f32342d3234203d3e20323730353135.roa (hash: 7rN+PBdS3zkOHgLQGBU/uGFOo/4tMoHLMYoMyYaZIuI=)
                          2: 323830343a366432343a3a2f33322d3332203d3e20323730353135.roa (hash: TIt1LALV2Gx/gMx1WYOiw+IvqSN4xzLx3JB0N3MxvWU=)
                          3: 3138372e34392e3135332e302f32342d3234203d3e20323730353135.roa (hash: lm8qPR45gV+FOfMNPLmXm7qwRbe/5PvpDFV67x2pjrs=)
                          4: 37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl (hash: kDFrJLCuRQkh7Bzzmx4u5Z7NSo8A4xyWL0+1x9GOEvs=)
                          5: 3138372e34392e3135352e302f32342d3234203d3e20323730353135.roa (hash: PAR0+lSbrxYP7P8f+N+itmPbl7u498p8UvBrmJK1SVw=)
                          6: 3138372e34392e3135322e302f32342d3234203d3e20323730353135.roa (hash: ZSDlk8turGXdiTXGGCleQEnIwMKGP93GWj7Qf16QzMI=)
                          7: 3138372e34392e3135322e302f32322d3232203d3e20323730353135.roa (hash: KVBGmlujY9OXd6uXu7urXgr8EDsBWByWahVUkR8DeWI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl
                          rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 03:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:28:2c:a8:43:54:e0:48:8f:5e:b8:3f:36:30:42:14:9f:77:ff:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0
        Validity
            Not Before: Oct 11 00:33:37 2026 GMT
            Not After : Oct 12 03:40:37 2026 GMT
        Subject: CN=0D8C6D88A8C06390F9A8E0B71BF522ADB34E400F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:27:5d:ab:a7:1e:df:83:87:a1:f9:85:56:
                    ba:3b:3e:1c:bf:5a:f7:09:6d:44:d8:94:4c:76:56:
                    f2:de:a3:57:5c:57:22:96:82:b0:ed:7b:16:c7:f7:
                    f0:b0:f6:bb:61:f4:86:96:ad:61:90:f7:7b:05:16:
                    2f:99:ff:61:64:2f:2a:d2:75:3e:cc:cb:7d:48:d6:
                    9a:0a:a4:8a:1e:f2:46:d2:63:8a:a5:52:e7:d5:25:
                    64:7e:53:0c:40:39:a5:3a:ee:10:74:aa:ea:34:13:
                    ef:57:d8:6c:63:75:7b:13:81:b6:cf:9c:51:96:95:
                    18:08:f6:46:d9:dc:3a:f3:b5:9a:4e:3d:1c:18:a9:
                    99:7d:0a:89:23:b5:a8:5a:fa:ec:db:e9:d1:42:4b:
                    b0:27:61:00:14:34:99:29:b5:7e:10:46:d0:82:da:
                    8d:98:50:82:f7:6d:e3:fc:06:83:37:f8:f1:df:8f:
                    70:27:2d:2d:ad:a9:92:d3:d3:42:ae:bb:e5:d1:8e:
                    a0:0f:c5:f9:58:6f:a3:42:10:77:ec:ee:bf:2f:04:
                    88:c1:f7:ce:e6:1d:36:39:a0:90:2c:38:9f:05:f2:
                    da:f2:c8:dd:33:bb:04:0e:c9:77:38:f0:36:b1:68:
                    74:95:a5:7c:37:df:03:af:4c:0a:38:58:80:d8:04:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:6D:88:A8:C0:63:90:F9:A8:E0:B7:1B:F5:22:AD:B3:4E:40:0F
            X509v3 Authority Key Identifier:
                keyid:37:DF:45:44:36:B6:FD:02:2E:A5:DB:8D:3C:4E:6C:EC:13:3F:02:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/37DF454436B6FD022EA5DB8D3C4E6CEC133F02C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:c9:5f:f7:8b:78:c1:3a:06:cc:00:32:8b:cb:1d:47:7b:
         3f:ed:96:d2:c4:58:fb:7d:ed:47:dd:cb:5e:dc:aa:d6:63:eb:
         c4:1f:94:22:57:6b:42:6c:04:b3:cf:5e:49:c2:69:0b:fc:23:
         c4:91:1e:af:ec:6e:f2:99:96:5e:f4:cc:a7:f1:dd:27:d3:38:
         16:f8:d4:db:be:9d:45:57:b7:52:03:27:12:f1:70:d4:53:2d:
         13:60:9e:bc:eb:87:fe:9e:64:3e:4f:dd:27:00:19:62:85:6d:
         20:86:30:1a:73:fd:b3:67:1b:45:10:91:37:98:5c:3f:bd:bc:
         1e:a2:43:64:71:4a:29:19:42:13:e2:1f:61:3b:67:ab:c7:a5:
         3b:21:d6:63:f0:35:16:a5:79:6a:15:c9:d0:f3:a5:47:a8:49:
         d3:7f:47:94:4e:63:4a:cb:c2:a8:ca:91:87:52:33:eb:65:52:
         9f:3d:62:1d:56:17:6f:28:6c:53:45:93:95:4c:22:29:2e:c3:
         e6:47:0e:40:cf:c6:c9:43:f1:97:16:1b:14:5e:8c:c4:be:7b:
         01:83:15:5a:85:a9:5a:8b:45:17:7d:8b:5f:92:4c:a4:09:fe:
         aa:bc:ca:67:89:b4:66:bf:e3:28:a6:cc:a2:c9:f5:df:79:5c:
         48:24:66:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----