Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
File:                     AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json)
Hash identifier:          upgRJ6kbSGiwFZWgQ3DdIgR0orbBVkMbfU+dC7Be83o=
Subject key identifier:   3F:17:8E:30:97:94:A6:D6:C3:82:B6:DA:19:A1:F9:3E:F5:11:83:06
Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
Certificate issuer:       /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Certificate serial:       01B611D6A623DF60E794644D105CA3D90E1CC09A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
Manifest number:          0207
Signing time:             Mon 12 Oct 2026 01:57:40 +0000
Manifest this update:     Mon 12 Oct 2026 01:52:40 +0000
Manifest next update:     Tue 13 Oct 2026 05:12:40 +0000
Files and hashes:         1: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: fb1Gaw4ZL9FuE+63nkJkH2u4KMqmW2DIrgu6bSCzMH8=)
                          2: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: yCU7P0R0p6e4TxnGTCfzhnOlU1bsEu1Tw2UuW+yiLQw=)
                          3: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: SN3+LGDTn0UjmdRP+602ep7g/syivex0YJz548ZrrGk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
                          rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 05:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b6:11:d6:a6:23:df:60:e7:94:64:4d:10:5c:a3:d9:0e:1c:c0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
        Validity
            Not Before: Oct 12 01:52:40 2026 GMT
            Not After : Oct 13 05:12:40 2026 GMT
        Subject: CN=3F178E309794A6D6C382B6DA19A1F93EF5118306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:54:3f:69:ea:0e:f4:f9:15:d0:57:c3:a5:
                    57:68:15:43:ed:90:dc:b1:85:8f:74:9e:6a:9e:98:
                    77:d7:2d:f4:44:8e:e8:84:90:64:cd:51:e7:df:7a:
                    51:38:64:b4:80:38:1a:a7:5c:fd:7b:46:8b:7e:7e:
                    43:3c:df:a1:a9:0a:c9:05:78:c9:3f:95:bd:ff:f2:
                    34:f4:15:3b:6a:b7:e7:82:94:7d:2c:b9:3c:45:5c:
                    13:f1:87:e7:72:b0:73:92:c9:22:d9:b2:4e:04:08:
                    76:f2:9d:33:e5:7d:e4:0a:e2:8b:b2:de:51:34:a5:
                    1a:94:e5:33:15:9e:b9:75:4c:a2:9d:9a:54:f5:55:
                    80:b9:8b:cc:79:26:0e:f3:db:53:c6:65:09:d4:c1:
                    71:fa:e8:57:8e:0b:76:42:7f:ce:a6:22:31:34:5f:
                    66:ff:b6:18:98:c1:82:cc:c8:32:bc:b4:f9:75:4b:
                    b6:08:b0:e8:48:a2:ad:5b:58:42:89:6d:5d:eb:73:
                    be:b9:76:78:33:ff:12:18:4b:08:82:9f:3c:84:0b:
                    5b:f9:bb:86:f9:c8:53:82:8e:b3:5e:f0:de:5f:73:
                    50:a1:ee:a3:72:2f:7c:fd:dc:d0:c9:a9:90:08:13:
                    81:33:70:d5:25:db:32:06:e1:a2:b7:6b:20:1e:40:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:8E:30:97:94:A6:D6:C3:82:B6:DA:19:A1:F9:3E:F5:11:83:06
            X509v3 Authority Key Identifier:
                keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a8:58:a5:e4:0a:e1:50:ad:19:d5:ae:d9:42:cf:a7:2a:75:
         68:01:20:cd:25:39:99:25:dd:25:b0:b7:25:28:8f:b4:2c:a4:
         96:57:f2:44:1c:93:f8:63:16:d2:24:e5:dd:0b:59:be:d3:74:
         ef:59:35:09:04:3e:14:e6:be:9f:2b:3c:41:bd:1c:6c:2b:7a:
         79:c6:fa:1b:f6:2f:f5:aa:58:6e:18:22:4f:29:d7:f3:92:1c:
         fa:a7:f6:ca:51:05:8f:b2:17:3e:7c:fe:d0:70:48:ce:07:53:
         04:9a:ba:84:f9:50:66:ae:4f:dc:2f:f1:c5:91:8c:77:f6:64:
         d8:99:b6:e5:34:7c:14:e7:fb:31:61:3c:de:3b:98:8f:28:45:
         20:3b:8b:47:78:b9:0c:00:0c:8d:a4:9c:3e:a4:b6:3a:6c:64:
         57:f9:ad:3c:89:b1:88:6d:a3:09:7e:63:d8:7f:73:22:58:19:
         75:6f:cf:3c:5e:78:b2:80:4f:47:80:4e:e9:ba:34:4b:f8:2b:
         26:20:82:2e:bc:16:80:af:a8:e3:63:1e:51:ce:61:ed:6c:9f:
         05:ac:94:fc:52:52:1b:a2:b2:9c:60:47:59:a2:fb:f0:79:11:
         77:f5:41:24:92:33:3a:6d:5c:00:05:41:aa:49:0a:9f:dd:96:
         cd:3c:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:36:30 2026 by rpki-client