Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft
File:                     BCF333E032A5E62EC142237F97628D0F131FE30A.mft (raw, json)
Hash identifier:          d24s9W72JwuY0v4X+LhFvCp0Kwb2Jly9Onobd1yRrts=
Subject key identifier:   2C:E9:2F:2C:CE:40:30:F0:B8:58:79:27:26:DC:D0:4F:8C:B8:37:66
Authority key identifier: BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A
Certificate issuer:       /CN=BCF333E032A5E62EC142237F97628D0F131FE30A
Certificate serial:       05F1149A1E0907CE6843A5A84BA08A961189EAED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft
Manifest number:          01AF
Signing time:             Sun 11 Oct 2026 22:45:24 +0000
Manifest this update:     Sun 11 Oct 2026 22:40:24 +0000
Manifest next update:     Tue 13 Oct 2026 01:21:24 +0000
Files and hashes:         1: BCF333E032A5E62EC142237F97628D0F131FE30A.crl (hash: 0nIkAUAcAwWXM88OP2KUdwyr+XbwkkE34EnxXtO9HN0=)
                          2: 3136372e3234392e3132342e302f32322d3332203d3e20323635323437.roa (hash: WIXPnTIXgEMAHH70fr1qTetwp+pf0M5ioCsEhlCpHXQ=)
                          3: 3137302e3233332e38382e302f32322d3332203d3e20323635323437.roa (hash: MEYQelrwiBi9r7FFUs6H9TsTyF26XtjBiA5ZxSnAnkc=)
                          4: 323830343a326364383a3a2f33322d313238203d3e20323635323437.roa (hash: YAUEEJK96sEoPo9aBW1/IO0334Vgg32ItcyGyr/e36s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl
                          rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 01:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f1:14:9a:1e:09:07:ce:68:43:a5:a8:4b:a0:8a:96:11:89:ea:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF333E032A5E62EC142237F97628D0F131FE30A
        Validity
            Not Before: Oct 11 22:40:24 2026 GMT
            Not After : Oct 13 01:21:24 2026 GMT
        Subject: CN=2CE92F2CCE4030F0B858792726DCD04F8CB83766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:28:53:d4:b2:8e:f6:4e:4b:73:15:ad:0c:
                    ca:28:78:6d:3a:fd:36:03:7d:1d:33:02:6f:3a:ad:
                    26:d4:6d:55:5d:42:fa:3b:9e:56:2c:00:6b:2a:5a:
                    55:4b:49:95:21:26:b5:d4:e0:c0:ec:0c:b5:13:2b:
                    a1:d6:8f:a6:31:0f:fd:61:16:d8:db:30:91:fe:50:
                    4b:64:76:e4:3c:10:49:2d:69:b3:db:9b:33:a2:7d:
                    cf:40:a4:4f:78:3c:20:9c:8f:80:98:ed:06:4c:2e:
                    1a:5f:0b:e2:c8:30:f8:3a:3f:f6:aa:e6:90:36:ea:
                    14:28:32:59:ab:4b:e1:95:bc:f3:1c:16:7c:07:42:
                    87:1f:bd:61:75:a7:eb:82:e9:b7:46:bc:ec:89:b7:
                    86:85:e1:22:6d:00:e1:51:1d:03:8b:10:cb:c2:bb:
                    8d:a2:e7:67:73:d6:22:91:c0:09:8b:e0:dc:10:10:
                    2d:49:c9:3e:c8:98:cd:f4:52:38:75:e5:52:ba:08:
                    38:0c:0e:f7:62:dd:92:0d:db:d2:10:ee:f9:45:72:
                    1e:aa:92:e1:bf:84:3d:dd:8c:dd:b1:32:d4:cf:5d:
                    af:88:0a:d7:c9:75:63:01:c5:c3:5c:61:e2:36:c7:
                    7e:0f:56:1f:f0:d2:63:84:f4:55:fe:43:fe:6a:55:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:2F:2C:CE:40:30:F0:B8:58:79:27:26:DC:D0:4F:8C:B8:37:66
            X509v3 Authority Key Identifier:
                keyid:BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:f3:b8:a9:d0:ce:72:2a:2c:b3:be:6b:9e:fd:fa:cb:38:
         36:44:9d:d7:cb:82:e6:b5:20:ad:ce:5e:9d:89:3f:51:91:5c:
         1f:74:10:f0:31:7b:ad:78:fd:37:ac:ad:fb:8b:58:e2:e3:68:
         6a:00:e3:db:11:ca:78:7d:15:74:3f:5b:4d:15:cc:e7:13:89:
         fc:87:c9:57:99:7b:8a:64:fd:cb:a8:92:a7:bc:93:59:28:b7:
         c1:e3:bf:95:18:fd:77:a0:f0:64:0b:ca:2c:5e:eb:f9:59:a2:
         88:87:4f:ec:4a:6a:d9:be:45:3e:d8:02:3d:d8:b0:18:73:42:
         35:25:3f:98:25:d2:b4:9e:9a:32:1b:1b:15:b5:cc:df:36:e7:
         b5:33:e9:00:7e:e4:60:14:28:fd:3b:a7:e0:26:ff:d3:06:7f:
         1d:fd:3e:17:54:6f:a9:80:76:b7:f3:72:3b:87:ea:80:ba:0e:
         d2:77:55:4f:5a:77:ca:fe:fb:7a:32:96:2a:d5:04:c6:e2:fb:
         85:55:ee:5c:9f:7e:9b:7c:56:67:d4:81:1d:75:9d:35:0e:e5:
         32:e7:ad:45:ba:04:8f:28:f7:55:dd:d7:8e:0a:9c:94:63:7a:
         f4:91:07:78:0d:48:c5:4d:6e:f6:25:fb:b5:ae:7f:06:3d:80:
         b7:b6:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:05:41 2026 by rpki-client