Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.mft
File:                     874EE119DC53C9BBF8B67BD6B4955E8944F9854E.mft (raw, json)
Hash identifier:          KfARL1hGRvMsyFYAYcdDQwgghSSg4qvqpiXpSFLXht8=
Subject key identifier:   D4:73:AA:2A:EE:A6:10:80:B3:3E:BB:00:88:6E:9C:0B:F5:D5:C1:D1
Authority key identifier: 87:4E:E1:19:DC:53:C9:BB:F8:B6:7B:D6:B4:95:5E:89:44:F9:85:4E
Certificate issuer:       /CN=874EE119DC53C9BBF8B67BD6B4955E8944F9854E
Certificate serial:       2D334F4BB9006E5BFAD50C4DD90C8ECC5CBCEAEF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.mft
Manifest number:          69
Signing time:             Thu 15 Oct 2026 08:46:19 +0000
Manifest this update:     Thu 15 Oct 2026 08:41:19 +0000
Manifest next update:     Fri 16 Oct 2026 09:26:19 +0000
Files and hashes:         1: 323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (hash: 3JzSYny5OHkMcFrwCTLeiFJ/8KDy8kHGa//pnywOhQ8=)
                          2: 874EE119DC53C9BBF8B67BD6B4955E8944F9854E.crl (hash: Lti++DLoQNKbHCeuiGJBAP2ccjxWYl4ZN24NWrlu7FY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.crl
                          rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:33:4f:4b:b9:00:6e:5b:fa:d5:0c:4d:d9:0c:8e:cc:5c:bc:ea:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874EE119DC53C9BBF8B67BD6B4955E8944F9854E
        Validity
            Not Before: Oct 15 08:41:19 2026 GMT
            Not After : Oct 16 09:26:19 2026 GMT
        Subject: CN=D473AA2AEEA61080B33EBB00886E9C0BF5D5C1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:d4:c3:e1:d6:2f:bc:97:14:cb:7f:7b:6a:
                    98:20:89:97:7b:ff:8a:a2:e4:0c:f5:79:b7:51:18:
                    4c:75:a5:0b:f6:03:63:44:d7:00:0f:28:65:3e:33:
                    f5:53:4b:d2:87:b5:b7:b9:01:9e:36:50:59:20:9d:
                    8a:7f:96:93:bf:90:ea:10:e8:a7:3f:e2:61:a8:a4:
                    fd:a9:c7:28:42:ca:1b:a7:1d:25:11:7d:38:ae:8c:
                    c4:e2:76:93:7f:82:38:28:cf:f8:2a:ae:86:5e:eb:
                    de:98:e3:25:25:c7:5b:ff:d2:a9:c5:8d:2b:b2:c9:
                    49:c7:ab:88:33:af:7b:c2:b9:ab:ba:99:0d:e6:40:
                    dd:6d:ca:eb:31:5d:45:dc:43:eb:f2:37:69:2d:ad:
                    95:53:d2:7a:a3:e2:be:36:53:ee:d5:93:97:07:a6:
                    99:4f:e0:91:5a:8a:b8:44:48:ba:57:d9:0c:da:78:
                    66:bd:02:d6:dc:e3:ed:94:31:0f:f3:02:0d:cd:bf:
                    c4:27:1f:75:44:58:f2:cf:39:99:ed:db:02:c1:69:
                    44:4d:5e:47:3d:5c:79:49:1e:01:63:0b:d1:7f:59:
                    84:e8:f9:f5:d1:c7:4d:aa:cc:58:ec:05:ad:7e:1f:
                    ed:a6:42:b2:ee:01:9c:a5:10:5d:db:8a:64:ec:ab:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:AA:2A:EE:A6:10:80:B3:3E:BB:00:88:6E:9C:0B:F5:D5:C1:D1
            X509v3 Authority Key Identifier:
                keyid:87:4E:E1:19:DC:53:C9:BB:F8:B6:7B:D6:B4:95:5E:89:44:F9:85:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:89:51:b0:02:48:2e:b2:0d:3c:7e:0e:98:2c:2b:53:ca:
         10:67:13:bc:4a:17:9d:b9:75:0c:16:c3:ea:f5:80:91:2f:70:
         b1:df:02:b0:5b:b2:13:7e:e3:8f:ce:d1:25:3f:ad:53:4a:de:
         85:e5:12:e9:ab:3e:6d:1b:d4:48:8a:51:41:93:db:5d:5a:9f:
         c4:a9:0c:73:51:b5:9c:07:b8:82:cb:64:67:cc:7f:5d:30:9a:
         80:23:d6:d1:34:f4:ad:55:62:73:6e:0a:f7:c2:a2:07:7c:f9:
         1b:d4:1c:b3:53:06:63:4f:ed:31:a1:f5:96:a8:fc:a1:e2:ea:
         7c:d8:53:f5:fb:63:47:6d:59:a6:61:f8:7a:92:54:c7:8e:f3:
         59:4f:49:2c:34:01:83:19:f9:bd:18:a8:82:eb:94:36:0b:03:
         7b:fa:13:8b:ef:14:53:a9:b7:83:22:5d:b6:23:eb:b1:c8:49:
         af:e6:d2:b4:68:a0:aa:7e:af:0a:80:da:58:af:aa:05:71:5b:
         d0:a5:31:62:0e:d9:29:26:21:5f:0f:74:a3:97:14:6d:31:a3:
         1f:9f:dd:e8:a9:35:a3:d8:81:fe:5f:a8:36:4f:b1:06:d7:d6:
         4d:df:a9:a6:3c:07:a0:e3:9c:f8:f9:89:53:32:8b:f1:b9:d0:
         22:cb:7e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:34:54 2026 by rpki-client