Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
File:                     314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft (raw, json)
Hash identifier:          LGFx+OjMF/SMN6+4oFCrp5xtmqFzAIS89XxRtyRhwHE=
Subject key identifier:   C2:1B:C4:AE:E2:BE:F4:98:49:08:D5:4E:60:38:04:64:66:B5:8C:01
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       5D41023F8203B27EB091307672FDF46B75F097D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
Manifest number:          04BC
Signing time:             Sun 11 Oct 2026 08:07:57 +0000
Manifest this update:     Sun 11 Oct 2026 08:02:57 +0000
Manifest next update:     Mon 12 Oct 2026 11:53:57 +0000
Files and hashes:         1: 3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (hash: HoUvLIl8HePEcrX2UoRuuKDWB/IjHNUJTu4b4dsaoGY=)
                          2: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl (hash: GQoU49z5/wiBcj3ozEkVx8zszdqgHOq3AgfO53KFtbA=)
                          3: 323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (hash: AKP3mmNxQyjhPK33iWfjsbRvSG6or5dFMmjwhwRG0rg=)
                          4: 3137372e35352e3230382e302f32302d3234203d3e20323632353331.roa (hash: QrPEgq8qf94IetiMlwxL37bJ0aAndHB4MPgf10k40/A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:41:02:3f:82:03:b2:7e:b0:91:30:76:72:fd:f4:6b:75:f0:97:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Oct 11 08:02:57 2026 GMT
            Not After : Oct 12 11:53:57 2026 GMT
        Subject: CN=C21BC4AEE2BEF4984908D54E6038046466B58C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:89:f5:87:66:08:57:ce:1f:71:9a:c8:3a:
                    30:27:e2:79:5e:c1:55:a1:da:f2:e4:b4:15:57:5a:
                    77:66:8b:ee:81:b9:1a:3e:e3:66:7f:02:eb:0b:42:
                    42:28:25:ab:3a:1c:5b:fe:51:5c:23:2c:14:38:1f:
                    ef:91:89:68:1a:ef:4a:ab:20:57:f0:6b:c5:db:d0:
                    ee:38:91:a3:92:ff:9d:de:49:cb:f0:fc:06:a2:75:
                    d1:16:43:fd:b9:af:89:13:db:e0:6c:f8:05:33:6e:
                    b6:8a:a6:20:ee:9a:03:d2:67:44:bb:01:4f:71:4c:
                    95:2b:a8:d0:eb:53:c4:8c:f0:9a:f2:f6:55:a3:a2:
                    51:c7:de:11:ae:b5:21:ff:a5:f3:30:1c:ea:40:41:
                    b0:54:33:7e:34:8c:5d:b8:ee:69:bc:3a:a9:3a:fb:
                    63:1f:36:f4:2c:e1:33:60:f6:ae:39:13:fa:99:a9:
                    a2:b5:3c:1c:d0:5e:78:cf:8f:1e:6e:24:4b:a5:66:
                    3c:c0:e6:f0:51:63:ae:bc:0d:2b:44:94:fe:ad:e7:
                    f1:92:14:4a:56:d8:95:d9:44:42:30:fb:0f:31:8b:
                    6a:15:0d:fe:33:3a:5e:c3:1a:ba:20:e4:36:1c:61:
                    2f:42:b5:8f:d6:ee:8e:9b:ab:02:6a:5c:15:3d:a5:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:C4:AE:E2:BE:F4:98:49:08:D5:4E:60:38:04:64:66:B5:8C:01
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:4f:c6:81:de:55:b9:1c:15:24:25:e1:d9:9f:c9:9b:e7:
         61:a0:aa:95:ca:5c:8a:49:47:5b:c1:4c:2d:4f:b8:23:01:3b:
         e8:c6:47:48:a4:b8:d2:06:49:bf:53:a2:ca:ac:c4:5f:fc:ac:
         3d:d8:b6:01:e8:de:35:d3:98:b6:95:e2:d5:20:1f:4a:05:e4:
         6c:90:c2:42:98:64:d7:1d:75:b4:49:10:83:a3:6e:9f:cc:2e:
         ef:9d:ae:c7:d9:98:3d:a4:19:9d:48:f1:aa:a1:84:ad:88:53:
         b0:e1:f5:c2:dc:7b:c5:57:3d:61:5a:90:ac:0e:eb:c8:c4:c7:
         8a:75:1b:36:c1:01:b5:19:0d:4a:0f:7e:c6:39:43:b1:de:10:
         f6:2a:1e:86:8a:03:ce:7f:37:11:83:e7:e2:72:4b:ef:06:37:
         73:4f:ed:a1:60:08:08:0c:17:ef:29:d7:c0:b1:46:cc:e9:d2:
         67:93:d1:b9:8a:d3:e6:ce:5f:12:53:dd:62:8f:d4:92:15:f4:
         83:3c:be:71:ed:9b:88:d5:6e:22:3a:71:e9:1d:3c:a1:03:97:
         22:cf:f7:08:f1:04:b8:ca:3f:c6:86:a3:97:40:a1:71:7b:93:
         ec:a9:9d:90:2c:f2:1c:ef:d7:8a:3f:c8:46:72:a7:d2:e9:dd:
         7f:0f:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----