Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
File:                     3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft (raw, json)
Hash identifier:          tX2F6kzIKLynTsmQJSSWsjq0hshM3lGl2RX+U1CKkqQ=
Subject key identifier:   07:CC:EE:06:87:B9:B0:1E:5C:2E:4A:DC:B4:4D:EB:36:CA:CA:24:DB
Authority key identifier: 3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8
Certificate issuer:       /CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8
Certificate serial:       64444E127CAFCFD24E78769B9DBB140EBB4FB1B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
Manifest number:          014D
Signing time:             Thu 08 Oct 2026 07:51:11 +0000
Manifest this update:     Thu 08 Oct 2026 07:46:11 +0000
Manifest next update:     Fri 09 Oct 2026 10:09:11 +0000
Files and hashes:         1: 323830343a393739303a3a2f33322d313238203d3e20323735363331.roa (hash: Tru9K7iTZxan0rQQwtQXpAlbYmyzN539zYEj4ZP3VjY=)
                          2: 3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl (hash: q9kSdFysBddG/pQeJ4tLue8pkUHnV9wJWv+1BUJtYSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl
                          rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 10:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:44:4e:12:7c:af:cf:d2:4e:78:76:9b:9d:bb:14:0e:bb:4f:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8
        Validity
            Not Before: Oct  8 07:46:11 2026 GMT
            Not After : Oct  9 10:09:11 2026 GMT
        Subject: CN=07CCEE0687B9B01E5C2E4ADCB44DEB36CACA24DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:eb:77:cb:16:07:a6:c6:ac:54:c3:e7:2f:
                    dd:7c:39:20:9c:fa:bf:dc:87:18:09:59:ca:c6:c3:
                    71:d5:06:75:28:bb:c4:5d:09:e5:dc:fa:07:3a:24:
                    eb:f3:d0:66:48:6b:ad:0d:28:7e:1d:a7:a8:10:14:
                    4c:e4:3f:96:c6:f8:15:45:24:5a:92:15:5b:f0:26:
                    31:d6:71:50:2b:42:38:11:ee:0b:4b:31:71:11:22:
                    47:a1:22:98:d7:ec:93:cd:7e:b5:cc:35:7e:97:bf:
                    92:fe:06:f1:b2:18:e3:30:53:26:e8:f2:dd:75:54:
                    c0:6d:b4:17:53:3f:f0:d2:a4:2f:33:bd:c0:a7:7e:
                    73:ca:72:55:80:cb:48:00:b7:a3:78:a7:b6:10:91:
                    02:19:e8:29:f8:c1:ec:2f:70:f6:02:32:af:bd:75:
                    78:ff:eb:c4:b5:4f:9d:4e:be:a6:f8:a5:db:7a:b5:
                    4f:11:f0:ae:fc:58:e8:77:96:5c:c8:88:4a:72:97:
                    88:73:00:81:63:2b:02:08:41:74:25:78:3c:57:85:
                    01:f0:1f:e8:af:61:5f:05:5d:df:fa:79:02:dc:8c:
                    9f:c6:04:be:77:e5:d1:44:22:8b:22:11:9e:9d:79:
                    1f:e9:cc:0b:93:1d:67:78:c4:55:6f:c7:3d:ee:81:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:EE:06:87:B9:B0:1E:5C:2E:4A:DC:B4:4D:EB:36:CA:CA:24:DB
            X509v3 Authority Key Identifier:
                keyid:3D:09:87:4F:AB:AB:66:40:E1:AF:90:CD:33:F6:EE:C4:3C:E6:5A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5sFSPevz3n3gbdcyypNbi2RkS79EShpKZ15cNLkvPMA/0/3D09874FABAB6640E1AF90CD33F6EEC43CE65AF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a0:5d:90:8c:44:35:aa:c7:e8:68:1a:86:88:8c:ae:38:04:
         d2:b6:4c:a6:cc:a9:74:8a:bc:c0:d1:c2:c4:6c:b5:f4:10:77:
         45:76:83:dd:44:b8:05:45:4f:96:2e:5e:1d:8e:ac:0f:ae:5c:
         51:d7:f9:d2:2c:9f:2b:7c:29:36:9f:86:92:a9:1b:5f:be:ee:
         0c:09:1e:d5:ce:4f:68:50:0d:95:11:b0:d2:a4:cb:31:cd:79:
         ba:38:26:53:5b:fe:31:50:49:5e:03:24:06:73:58:c6:07:99:
         98:73:ee:c6:b4:1b:ce:14:d3:3a:26:11:f1:37:a3:ed:2a:e9:
         8d:a7:e5:d2:11:75:f5:71:d8:6e:9f:cb:1f:73:0c:d7:0a:3c:
         03:a7:57:95:c0:a5:d5:ca:ce:53:35:0f:85:2a:6f:94:f5:05:
         04:46:ad:3d:c5:f3:02:d3:af:74:19:88:9b:f0:2a:d4:9a:31:
         dd:2d:1b:35:03:e5:bb:2f:98:ad:07:f1:59:6f:c7:6c:51:25:
         ea:94:b5:cb:6e:af:18:52:6e:02:fb:07:d3:38:02:be:4a:29:
         a9:f5:97:75:bc:c8:5a:60:9c:fe:89:ac:93:74:3c:99:ba:a6:
         ac:c1:40:4b:68:9b:c2:31:31:f6:7b:e2:4e:5a:93:be:e8:04:
         cf:ab:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:30 2026 by rpki-client