Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.mft (raw, json)
Hash identifier:          lzw3cyloK2ZBIPu5+9KCclf6i60awkKyOeFn7MFJwg8=
Subject key identifier:   1E:CC:62:7F:3E:5B:95:60:E7:DA:A8:DD:37:10:31:A2:D8:58:D6:50
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       3916A5FF5065FC5BBECF9254486B8E6B2CD5CEDF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
Manifest number:          040A
Signing time:             Tue 03 Nov 2026 01:03:08 +0000
Manifest this update:     Tue 03 Nov 2026 00:58:08 +0000
Manifest next update:     Wed 04 Nov 2026 03:39:08 +0000
Files and hashes:         1: 870F31E28EB6835FE94CC62D908989A74790CB3E.crl (hash: 2kjTQBM69/W12Z60pQ84k28UJgLte2i5tmWwfUbdeuM=)
                          2: 34352e3138312e39322e302f32322d3234203d3e20323639313735.roa (hash: GiE743EhfSOXHGIBrKqBmOMaTBFSozjDYLmG5toJg4k=)
                          3: 323830343a316634633a3a2f33322d3333203d3e20323639313735.roa (hash: Wa7Azgvjc34o9tBKeUYE7ALtIlK7RWElexACUg1izXE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 03:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:16:a5:ff:50:65:fc:5b:be:cf:92:54:48:6b:8e:6b:2c:d5:ce:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Nov  3 00:58:08 2026 GMT
            Not After : Nov  4 03:39:08 2026 GMT
        Subject: CN=1ECC627F3E5B9560E7DAA8DD371031A2D858D650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:a1:ab:0b:c9:74:92:70:45:f6:11:07:80:
                    3b:93:e2:08:a2:d9:b5:d6:66:22:be:f2:e6:ed:5d:
                    d1:4b:32:64:99:71:cc:08:86:1d:43:00:41:26:46:
                    56:6f:83:12:08:70:72:14:fb:51:1a:16:f6:19:68:
                    f1:88:fa:3b:0e:1d:5c:77:dc:38:e9:c3:3b:76:48:
                    43:44:0b:c9:ce:ea:11:5a:31:aa:0d:63:28:6e:47:
                    ec:42:81:31:14:38:59:3d:d4:5c:30:49:2b:f1:e3:
                    ba:f5:1b:75:ae:eb:e8:56:f3:c9:d5:c3:ae:69:2a:
                    42:89:3d:db:fe:48:e4:2f:9c:16:90:b6:49:a5:29:
                    c8:7d:6c:04:c4:4a:7c:79:12:bd:e8:5b:e1:8a:ab:
                    42:31:a8:da:3f:e4:c6:b0:65:1b:67:c7:71:9f:48:
                    14:16:be:4d:e7:82:c5:c6:18:a1:e6:26:1b:63:7b:
                    6d:75:ac:a4:54:65:44:d7:29:a5:58:ee:6c:6e:37:
                    b0:8d:9b:d1:66:0e:49:f4:9b:76:dd:0e:53:8f:6d:
                    2b:51:49:09:9d:fe:11:b3:27:76:51:18:ff:24:87:
                    5f:30:28:47:89:9a:e1:c3:8e:04:ef:d6:c1:ef:4c:
                    69:7e:96:e4:27:ad:27:e5:91:a8:eb:cf:b4:31:9d:
                    cc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:62:7F:3E:5B:95:60:E7:DA:A8:DD:37:10:31:A2:D8:58:D6:50
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f1:28:8d:24:98:ea:ce:23:ac:04:81:8c:95:7d:89:5f:e6:
         b4:5b:e9:d5:02:3a:b2:2d:86:14:fd:8e:7b:36:7f:54:ee:23:
         54:f0:50:8b:93:87:e2:1b:c6:76:3d:00:36:51:a3:4c:e5:86:
         14:a8:61:24:61:59:a8:05:63:da:45:be:ef:7b:1d:69:6e:7f:
         0f:48:72:0b:8c:14:b0:63:b3:62:c2:b4:20:49:01:c6:78:af:
         31:b6:f8:85:45:e7:2c:05:d3:32:02:6b:60:86:d9:e6:f6:70:
         e9:3e:f2:1b:f1:69:2b:11:44:8c:38:a5:72:a2:2a:d2:07:0d:
         49:ec:c0:e3:1a:0e:6d:13:6f:c9:ef:2f:29:c3:1d:68:57:ae:
         49:47:5f:d0:d8:1d:b6:59:3e:c3:5a:93:e5:37:34:6e:61:00:
         e3:68:d0:5d:8f:bc:3a:63:8e:dd:6c:13:5a:14:98:79:1e:49:
         dd:20:74:08:5a:16:76:ec:ef:68:91:b1:32:61:e4:8b:fa:10:
         4a:c8:77:13:36:83:cf:4e:e7:a6:d0:fb:81:43:db:1c:1a:cb:
         41:52:0a:29:46:f9:fe:e0:a0:dc:f9:14:f6:cf:ea:78:bd:c9:
         35:f9:3f:09:33:32:bf:7d:c0:d7:65:89:b9:5b:99:85:da:cc:
         21:83:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 14:47:37 2026 by rpki-client