Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
File:                     1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft (raw, json)
Hash identifier:          ojyiua8BZ+bgIUZ+47NeTYUWy85KpCz2T/LG5x45lho=
Subject key identifier:   B9:9E:86:39:EC:FE:D4:00:7E:62:EE:B0:76:CA:3F:5A:6D:11:42:7F
Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B
Certificate issuer:       /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
Certificate serial:       625C7677027FF7933D13E4AFB74F751DB4CE644D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
Manifest number:          0228
Signing time:             Mon 19 Oct 2026 11:29:12 +0000
Manifest this update:     Mon 19 Oct 2026 11:24:12 +0000
Manifest next update:     Tue 20 Oct 2026 15:10:12 +0000
Files and hashes:         1: 1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl (hash: WWIJ1AjNYYHwrbIMB3SOIuMP0NDApfDTMupiYZopITI=)
                          2: 3139302e382e3136302e302f32322d3332203d3e20323730363138.roa (hash: mTcyaJebbhPnF0pIyxEgH1UUbQQ9eZPgunYfD5uZZ74=)
                          3: 323830343a366563383a3a2f33322d313238203d3e20323730363138.roa (hash: bRMiegMgDdTd5uiqsOYWarSY5BWWFCPv8kuek1tLRNA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl
                          rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 15:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5c:76:77:02:7f:f7:93:3d:13:e4:af:b7:4f:75:1d:b4:ce:64:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
        Validity
            Not Before: Oct 19 11:24:12 2026 GMT
            Not After : Oct 20 15:10:12 2026 GMT
        Subject: CN=B99E8639ECFED4007E62EEB076CA3F5A6D11427F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:6f:65:07:b8:d4:ce:17:4f:20:b9:28:f1:
                    1a:11:df:1c:a1:d3:4d:bf:cb:d1:1d:90:c7:48:2d:
                    73:9c:64:2f:51:97:1b:ca:95:1a:64:8b:58:d1:4d:
                    55:27:5e:27:1e:02:51:c5:6b:eb:93:e7:fe:80:e2:
                    90:09:d3:35:66:fb:17:8a:63:47:38:6d:fd:c5:b6:
                    a4:92:0c:7a:8f:4b:7d:98:92:7c:c1:1b:fa:5b:80:
                    5c:43:00:a6:b0:38:41:c0:4b:8c:6d:f9:9b:64:d8:
                    91:85:0c:2c:90:e7:7d:d0:ce:b3:b7:28:4f:e5:d1:
                    53:1c:74:5a:85:ba:b1:b2:7a:41:a3:a6:e9:b7:c6:
                    bb:09:da:29:c5:52:80:f5:de:5a:2f:a6:2b:77:23:
                    01:20:70:95:36:3f:35:69:8f:0a:bc:6f:03:e4:0b:
                    ce:47:8b:64:d1:3d:61:05:10:a0:4b:be:2d:b8:df:
                    46:3c:29:1e:80:1e:ff:9e:7e:b0:a8:65:3f:0c:3b:
                    98:f1:d8:e0:ae:df:63:d6:cf:90:ad:54:a0:d1:d0:
                    22:f6:5e:c5:e8:7a:2a:62:5b:bb:ab:d6:92:51:c8:
                    bc:3d:2f:45:d3:dc:31:18:f3:f2:1b:af:31:56:a9:
                    77:36:1d:e4:f0:e9:e5:29:98:d0:89:f3:87:7b:b1:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9E:86:39:EC:FE:D4:00:7E:62:EE:B0:76:CA:3F:5A:6D:11:42:7F
            X509v3 Authority Key Identifier:
                keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:78:65:6d:d2:ad:18:6e:03:c9:35:52:fb:e6:f1:29:4f:eb:
         d5:2b:0c:4a:fb:04:a7:f7:df:77:f8:0d:a0:a7:1e:04:9b:83:
         88:12:1c:fa:80:f3:cd:8a:68:dd:0a:f7:7e:57:b7:68:55:f4:
         1d:1d:84:f2:56:0d:7e:52:97:46:5c:cb:94:10:0a:21:1e:b0:
         1d:27:fd:ad:17:4d:12:f6:74:c7:04:94:a0:56:df:c8:24:3e:
         09:b0:43:8c:dc:2e:c8:fa:3e:4a:4e:09:cb:84:f4:97:ec:5f:
         af:02:1e:da:73:8b:0c:c1:b8:b6:ea:c4:dc:42:07:31:74:33:
         fd:5b:3c:8b:28:31:86:10:fe:4f:9d:25:8f:b5:64:a0:1e:25:
         79:5c:6b:ff:a4:ef:01:f7:85:44:01:a6:25:19:c2:3e:5d:4c:
         f4:d9:8b:82:43:ea:ca:cd:65:86:1c:05:a8:c7:24:06:e0:10:
         7e:31:bc:46:50:23:f3:20:10:6c:61:0a:8f:1f:88:ff:2e:a1:
         2d:a2:1f:2d:a6:21:29:8a:12:0b:e5:4b:f7:57:41:d2:18:c3:
         a0:f2:4f:6e:30:bb:f1:69:d7:76:51:6d:00:2e:69:d3:7f:f4:
         90:6e:c8:59:fc:7c:95:ca:0a:e4:7a:a1:3a:13:d0:54:46:37:
         84:46:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:59:11 2026 by rpki-client