Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.mft
File:                     36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.mft (raw, json)
Hash identifier:          v2DjMKGwTgt3roCMzQlgx5OLTNzFwe5ZIf3qKoojkB0=
Subject key identifier:   24:07:DF:8C:08:59:7D:2E:84:58:30:21:0A:60:C3:DE:DC:EE:4F:07
Authority key identifier: 36:D4:CF:F1:6C:9D:53:E9:2A:1B:BA:6B:7A:78:F0:90:34:AD:9A:01
Certificate issuer:       /CN=36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01
Certificate serial:       445BD09BA153ADBAB1784467F90A8D4AB900664E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.mft
Manifest number:          42
Signing time:             Mon 12 Oct 2026 19:48:12 +0000
Manifest this update:     Mon 12 Oct 2026 19:43:12 +0000
Manifest next update:     Tue 13 Oct 2026 21:58:12 +0000
Files and hashes:         1: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: fh0ex3+S6LTrJrGCJDkjOM1qBcHjjg4kwYF1mccD8gw=)
                          2: 36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.crl (hash: EU2ZI+3VAFYLgK5b7LWs3hhxhHisfzrHhZENaXVYhxg=)
                          3: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: jR2nZ0gTLRjbZU+FB5pGMZiSWdHgcQMu237wbgWhzxM=)
                          4: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 6IGbLmCSurDdDGzpAApA0bSea6cljC9J1je6AUSl32A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 21:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5b:d0:9b:a1:53:ad:ba:b1:78:44:67:f9:0a:8d:4a:b9:00:66:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01
        Validity
            Not Before: Oct 12 19:43:12 2026 GMT
            Not After : Oct 13 21:58:12 2026 GMT
        Subject: CN=2407DF8C08597D2E845830210A60C3DEDCEE4F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:e5:fc:1e:ca:35:74:7e:d5:16:a1:5c:c1:
                    ce:26:89:6a:c9:ed:c5:16:3b:ed:94:0a:8d:5e:b0:
                    0f:1a:d4:b0:8e:40:19:87:03:cb:fc:c9:fa:d7:ce:
                    86:3c:ff:52:80:02:04:79:1c:7a:b4:32:3e:f5:4e:
                    33:4e:7f:62:a6:9b:79:b1:ce:fe:26:ca:eb:16:a0:
                    ad:52:c3:46:d7:ad:cc:f2:d4:8c:9a:c7:52:ed:0a:
                    9c:54:43:69:c1:41:dd:63:6b:18:64:67:a8:dd:b4:
                    ef:3b:a5:e6:a6:86:4d:b1:71:5c:95:41:4c:6d:21:
                    96:62:cc:87:a3:f6:ff:7d:ec:fd:49:6f:70:81:bc:
                    a8:da:fd:14:bc:2e:9e:fe:3c:a1:98:a5:28:ed:77:
                    c6:c3:b3:0e:cf:2f:d7:96:62:3d:8d:1c:b7:19:14:
                    d0:e0:c4:44:a5:04:f8:27:b3:e7:7a:d6:26:91:1e:
                    0f:94:39:5d:77:9f:40:c4:7e:83:34:22:8a:6b:d2:
                    e5:84:06:e6:7f:aa:ac:5f:89:aa:24:c3:65:7e:f1:
                    29:7d:b7:1e:70:8a:9a:e7:21:ab:60:d8:6d:5b:ab:
                    ca:cf:68:be:97:7e:17:c4:98:04:61:bb:06:c4:55:
                    17:79:2f:d2:e8:75:b4:1a:7d:c4:10:5a:bd:98:c5:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:07:DF:8C:08:59:7D:2E:84:58:30:21:0A:60:C3:DE:DC:EE:4F:07
            X509v3 Authority Key Identifier:
                keyid:36:D4:CF:F1:6C:9D:53:E9:2A:1B:BA:6B:7A:78:F0:90:34:AD:9A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/36D4CFF16C9D53E92A1BBA6B7A78F09034AD9A01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:44:82:2e:2b:6f:41:5a:99:00:4c:19:8d:f8:dd:e6:fb:
         b0:5d:05:18:7d:4f:a7:4f:e1:83:44:c3:ee:ab:5a:cc:b6:5a:
         a9:48:7c:0f:32:99:09:61:94:eb:2e:2a:b1:82:f0:c0:77:a4:
         c1:5b:02:e6:c7:53:b6:fe:a8:8f:47:c5:91:68:07:20:ec:f5:
         fa:12:17:6c:33:84:ad:5d:23:c6:9c:6e:20:3a:b9:94:5e:0d:
         f5:a7:a5:9b:6f:23:60:40:ac:2a:35:e0:6f:a1:4b:59:c7:9b:
         9a:12:56:da:89:8f:96:56:01:43:33:8e:52:b2:f7:db:ea:8e:
         4e:91:bd:d9:fa:12:a2:48:32:bf:7b:44:5b:33:62:19:69:ed:
         c3:60:cb:22:2b:06:54:de:41:d6:42:f9:63:78:ee:da:b6:84:
         04:8e:4b:99:e8:c4:15:93:a9:f7:f5:eb:5a:4b:f1:ea:a4:87:
         1d:c0:7f:46:8f:95:2f:e7:56:af:cc:b7:e9:cb:38:89:e5:83:
         bb:55:d6:ed:be:d1:e4:46:e6:ff:a4:96:58:a6:4d:58:3c:0e:
         37:c8:0d:81:aa:13:94:93:a3:c6:4b:90:f8:cb:85:b7:dd:60:
         de:a6:da:33:c1:b9:06:72:71:62:16:58:33:15:28:f9:2b:45:
         e8:b0:f1:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURFvQm6FTrbqxeERn+QqNSrkAZk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZENENGRjE2QzlENTNFOTJBMUJCQTZCN0E3OEYwOTAz
NEFEOUEwMTAeFw0yNjEwMTIxOTQzMTJaFw0yNjEwMTMyMTU4MTJaMDMxMTAvBgNV
BAMTKDI0MDdERjhDMDg1OTdEMkU4NDU4MzAyMTBBNjBDM0RFRENFRTRGMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCuX8Hso1dH7VFqFcwc4miWrJ
7cUWO+2UCo1esA8a1LCOQBmHA8v8yfrXzoY8/1KAAgR5HHq0Mj71TjNOf2Kmm3mx
zv4myusWoK1Sw0bXrczy1Iyax1LtCpxUQ2nBQd1jaxhkZ6jdtO87peamhk2xcVyV
QUxtIZZizIej9v997P1Jb3CBvKja/RS8Lp7+PKGYpSjtd8bDsw7PL9eWYj2NHLcZ
FNDgxESlBPgns+d61iaRHg+UOV13n0DEfoM0Iopr0uWEBuZ/qqxfiaokw2V+8Sl9
tx5wiprnIatg2G1bq8rPaL6XfhfEmARhuwbEVRd5L9LodbQafcQQWr2YxcJ7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJAffjAhZfS6EWDAhCmDD3tzuTwcwHwYDVR0j
BBgwFoAUNtTP8WydU+kqG7prenjwkDStmgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2
UFkvMC8zNkQ0Q0ZGMTZDOUQ1M0U5MkExQkJBNkI3QTc4RjA5MDM0QUQ5QTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RDRDRkYxNkM5RDUzRTky
QTFCQkE2QjdBNzhGMDkwMzRBRDlBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC8z
NkQ0Q0ZGMTZDOUQ1M0U5MkExQkJBNkI3QTc4RjA5MDM0QUQ5QTAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAifFEgi4rb0FamQBMGY343eb7sF0FGH1Pp0/hg0TD7qtazLZaqUh8DzKZCWGU
6y4qsYLwwHekwVsC5sdTtv6oj0fFkWgHIOz1+hIXbDOErV0jxpxuIDq5lF4N9ael
m28jYECsKjXgb6FLWcebmhJW2omPllYBQzOOUrL32+qOTpG92foSokgyv3tEWzNi
GWntw2DLIisGVN5B1kL5Y3ju2raEBI5LmejEFZOp9/XrWkvx6qSHHcB/Ro+VL+dW
r8y36cs4ieWDu1XW7b7R5Ebm/6SWWKZNWDwON8gNgaoTlJOjxkuQ+MuFt91g3qba
M8G5BnJxYhZYMxUo+StF6LDxYA==
-----END CERTIFICATE-----