Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
File:                     3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft (raw, json)
Hash identifier:          rHWJXjTtpu2ViSIm9OW7nWiqmz/2+QOb49y8MOgRTaM=
Subject key identifier:   55:C9:6C:19:F1:AE:83:31:8D:77:CC:98:39:F0:92:5E:D3:5F:2D:CF
Authority key identifier: 3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97
Certificate issuer:       /CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
Certificate serial:       7299B8DE5050B0BAA46D43D227967BB348C5A122
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
Manifest number:          52
Signing time:             Sun 11 Oct 2026 03:43:54 +0000
Manifest this update:     Sun 11 Oct 2026 03:38:54 +0000
Manifest next update:     Mon 12 Oct 2026 04:32:54 +0000
Files and hashes:         1: 3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl (hash: UojMSE5cZR4G36U7CZVpThrds8AfrQ8zGWNd7WWhTkI=)
                          2: 3230302e37312e38332e302f32342d3234203d3e20323731323030.roa (hash: DhLZVHHQ98Na0VxpgnaeNPVQScSruL7QG9OTmUNP1K0=)
                          3: 3230302e37312e38322e302f32332d3233203d3e20323731323030.roa (hash: f56Q/Fieb9tfMWmyzIbiTvqj9p1hIf3Q6auf3VDNchE=)
                          4: 323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa (hash: icngFpLv/E1t640YX1D1jWo39mIj8Rlff3UglL/ipSo=)
                          5: 3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (hash: B9u0ZAWjZeZDqxqfaH4pKUi7mdybudolNPJXOXZtQAo=)
                          6: 323830343a373763633a3a2f34382d3438203d3e20323731323030.roa (hash: ujceckYtiM+rfwMcT0RLMM7ErqJtLBrQDfn5kQb+xE4=)
                          7: 323830343a373763633a3a2f33322d3332203d3e20323731323030.roa (hash: jy6+ZMDEkumdht3Uwyc+QVU4MDrPMMtfJwYGF4t1blU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 04:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:b8:de:50:50:b0:ba:a4:6d:43:d2:27:96:7b:b3:48:c5:a1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
        Validity
            Not Before: Oct 11 03:38:54 2026 GMT
            Not After : Oct 12 04:32:54 2026 GMT
        Subject: CN=55C96C19F1AE83318D77CC9839F0925ED35F2DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:34:6b:7e:74:04:56:5d:5d:69:23:01:33:
                    02:4e:23:9e:d3:4c:df:ae:95:b5:1d:6e:06:b7:74:
                    b9:38:7e:88:99:c9:f9:2f:37:14:c8:dd:e9:84:60:
                    ab:ad:21:2b:69:11:fd:6f:25:b3:8e:04:c6:34:78:
                    91:81:1b:e7:a7:95:8f:25:b5:32:35:a8:07:14:28:
                    6a:11:6d:ca:03:0c:ce:4d:ed:04:a4:cd:bf:79:11:
                    1c:d1:4c:c6:4d:c5:28:8f:74:8f:bb:32:bd:c1:92:
                    17:0b:89:62:a7:6f:fc:2e:99:63:09:df:ac:52:41:
                    63:71:4b:c5:48:02:97:3a:4f:10:4f:ce:63:22:9a:
                    72:69:3a:47:7d:1d:f6:25:20:38:30:c4:b4:00:e7:
                    ee:5a:97:5f:a6:d4:f6:11:c6:15:09:83:94:d4:78:
                    99:40:76:88:ef:75:53:7d:24:e2:b8:bf:8b:44:02:
                    d6:1a:07:27:df:c3:e5:8f:bc:18:24:04:74:01:c3:
                    54:67:95:3b:66:62:bd:8b:b0:ad:83:85:af:1d:18:
                    12:b1:ba:2c:9c:e7:a6:51:41:65:df:f5:6a:64:d5:
                    24:18:a6:14:ea:c8:56:fb:cd:50:0b:1b:e6:0e:be:
                    3a:5c:08:4f:45:e8:2f:54:e4:4e:21:e1:88:3a:51:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C9:6C:19:F1:AE:83:31:8D:77:CC:98:39:F0:92:5E:D3:5F:2D:CF
            X509v3 Authority Key Identifier:
                keyid:3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:2a:69:d0:7c:88:cf:7f:a8:8d:be:1f:f4:c3:03:56:2a:
         1e:90:fa:33:e6:4a:59:77:47:d5:62:ea:13:e1:3c:0a:5e:5b:
         6a:85:50:19:cb:52:42:fa:b7:83:93:f4:58:0a:ee:62:a9:84:
         43:84:a7:95:84:b8:25:2b:e5:1d:b9:0a:6f:a2:3f:06:d8:f6:
         fc:cc:07:85:0f:d6:c8:c1:38:df:66:7a:d2:56:16:3e:b1:c1:
         b5:ca:9d:77:ee:e0:6e:78:72:cc:b2:59:bd:eb:33:71:81:3b:
         ce:41:f1:50:48:55:f0:97:68:f5:89:78:f9:a6:e4:54:63:fd:
         03:c8:d0:59:a8:09:1c:2e:69:a1:10:08:b7:c3:35:3a:b6:db:
         e2:96:5b:0f:ef:af:72:fd:ff:98:b2:40:fb:f5:b8:3e:32:d6:
         c0:23:4c:34:c6:d4:7d:14:fe:65:fd:b3:ff:6d:7f:48:a9:4f:
         bb:2b:25:c1:19:c5:f5:7a:24:be:38:01:68:79:b7:87:36:53:
         33:8c:c6:00:38:dc:1a:a6:28:d3:ae:bd:40:82:12:43:79:a5:
         c8:32:ab:39:97:07:db:5b:c5:42:a0:81:48:e0:dc:06:c3:84:
         c0:a8:b0:32:53:48:c2:40:a4:75:25:51:b5:64:ce:71:73:d1:
         dd:ee:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:24 2026 by rpki-client