Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
File:                     A910E04F27510FFF1E8362052070412C903FFD8B.mft (raw, json)
Hash identifier:          7pLOcdFK3JvQ/RLkx5D1GJaSf0PgEY5GI0A5Zp4SOAE=
Subject key identifier:   78:15:A9:87:15:43:D4:A5:21:10:1C:E9:9E:78:E4:86:56:FA:9C:85
Authority key identifier: A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B
Certificate issuer:       /CN=A910E04F27510FFF1E8362052070412C903FFD8B
Certificate serial:       206C51F38DB99AE1DDD02D657AEDEC873B338BF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
Manifest number:          0359
Signing time:             Wed 04 Nov 2026 03:48:57 +0000
Manifest this update:     Wed 04 Nov 2026 03:43:57 +0000
Manifest next update:     Thu 05 Nov 2026 05:35:57 +0000
Files and hashes:         1: 3138372e37332e39362e302f32302d3234203d3e203533303438.roa (hash: mUieqeJdxR4tWDtSXb9czyw88olGSwxh8CnFwdCV008=)
                          2: 3230302e39342e3235322e302f32322d3234203d3e203533303438.roa (hash: il53B7Q73jNFlH7g51wKgGiNgid+xMbJfds7WZ0O2Bg=)
                          3: 3137302e3234352e3232382e302f32322d3234203d3e203533303438.roa (hash: dFZ0LGf9VUQmelCd2T2ZnwoXRmTaX8jDdO8dHAjtnkk=)
                          4: 3137372e3133372e34382e302f32312d3234203d3e203533303438.roa (hash: p+UFfhkBAnWncsui85kUuhM0+jqknevxzdqYB/fmK3s=)
                          5: 323830343a316230343a3a2f33322d3438203d3e203533303438.roa (hash: 6V34vYOx2MLgtwHD9a/e8nKBoFUO7kEonmSNUlw0zWM=)
                          6: 3133322e3235352e3137362e302f32322d3234203d3e203533303438.roa (hash: kNcxoziUs2V/DZt4kc9ONX8Yibj7lteIZFVSevEydOw=)
                          7: A910E04F27510FFF1E8362052070412C903FFD8B.crl (hash: p+4bL7QSo3z2jQepyptRB09cBA90N3AOZmixToIF+GE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 05:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6c:51:f3:8d:b9:9a:e1:dd:d0:2d:65:7a:ed:ec:87:3b:33:8b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A910E04F27510FFF1E8362052070412C903FFD8B
        Validity
            Not Before: Nov  4 03:43:57 2026 GMT
            Not After : Nov  5 05:35:57 2026 GMT
        Subject: CN=7815A9871543D4A521101CE99E78E48656FA9C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:e7:1c:7f:6c:4b:04:d0:3a:f9:96:19:cb:
                    68:ca:86:1d:b8:bf:69:2d:3a:7a:38:73:67:6d:c0:
                    a9:19:47:65:be:52:5d:31:9e:d8:bb:34:cc:58:a6:
                    dd:98:30:ce:88:d4:d7:52:6b:81:dc:85:2d:02:93:
                    47:cc:95:61:54:5d:e3:4b:89:4b:1b:cc:73:0d:a3:
                    90:fb:bd:f3:5f:30:ab:10:91:40:4b:2d:f4:27:62:
                    65:3a:57:79:54:b3:df:ce:08:e4:e0:91:8a:44:81:
                    7a:28:99:a9:6e:03:fe:88:87:61:01:7e:5f:bb:f0:
                    4e:26:dc:62:84:f0:03:59:c0:b6:2e:c7:e6:2c:f9:
                    54:37:67:0e:64:cd:ff:70:79:90:c2:cd:22:a2:e0:
                    90:fa:c5:4b:81:94:33:79:4e:b1:fc:17:c0:2c:b0:
                    a1:cb:44:57:9d:e6:52:ec:42:50:f1:1e:a9:b4:52:
                    a3:3e:cd:d8:9c:0c:3a:11:9e:cd:8d:83:54:a7:44:
                    ad:ae:35:71:2e:38:c2:c3:b6:f3:d8:ed:e9:0c:4e:
                    df:9f:92:93:3f:05:aa:8a:7b:f7:70:d0:b3:37:4f:
                    b0:ad:76:84:38:b9:de:a2:be:1e:47:85:9e:cc:7e:
                    a6:db:c0:9b:c2:a5:ad:30:6a:23:83:2d:7e:ac:c6:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:15:A9:87:15:43:D4:A5:21:10:1C:E9:9E:78:E4:86:56:FA:9C:85
            X509v3 Authority Key Identifier:
                keyid:A9:10:E0:4F:27:51:0F:FF:1E:83:62:05:20:70:41:2C:90:3F:FD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A910E04F27510FFF1E8362052070412C903FFD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/A910E04F27510FFF1E8362052070412C903FFD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4a:ee:e3:12:ab:de:90:46:0d:30:1d:db:50:e3:1d:7f:75:
         23:d5:89:1f:9b:1b:67:86:73:24:fc:b7:0a:d2:71:c8:99:8b:
         e2:84:cd:b4:02:8a:5f:5a:f1:f6:27:ca:64:30:2e:76:f6:3b:
         f2:2c:75:0c:de:a9:6f:06:f0:61:cd:1b:52:d2:5b:ff:e1:e4:
         52:a1:04:ab:72:48:34:3f:5b:38:a7:d8:70:4c:13:72:33:65:
         16:ae:c3:29:b1:dd:1f:9f:40:64:0b:04:f1:0b:d0:4c:53:ac:
         e3:18:60:65:e7:aa:48:68:e5:23:76:f9:61:cc:b9:46:8f:79:
         bd:90:c9:21:9d:65:21:99:4b:cd:9d:4a:c7:cb:b1:e6:2e:c6:
         ed:da:91:6c:b3:9b:8c:f1:0f:2f:37:59:a8:2f:59:74:35:5a:
         4f:f2:12:2f:42:89:2f:e3:fc:14:76:56:8d:5c:71:6e:c9:9a:
         be:f8:3f:74:d2:ff:00:fe:8b:83:c5:4b:19:bb:8c:73:49:fa:
         b0:b0:8b:21:38:17:d4:45:a7:c9:2f:b4:f8:ab:d6:33:b7:f6:
         ff:9d:a3:31:1b:66:10:08:14:58:e3:cc:20:37:65:86:1f:a7:
         5a:28:a2:d1:c3:0f:7d:89:b7:db:4b:16:e8:9b:59:12:38:bc:
         31:03:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:13:40 2026 by rpki-client