Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft
File:                     4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft (raw, json)
Hash identifier:          iCN+6SACxcSabsYkJ+pg0FFjYkZ1ZShL3gDreNbWVdU=
Subject key identifier:   9E:DF:49:FF:84:F9:56:94:6C:93:1C:C6:C6:D4:D9:77:1F:D2:15:AC
Authority key identifier: 4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB
Certificate issuer:       /CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB
Certificate serial:       5C8DCC7438BA20AB0ABEC01B86E08AAC828B08C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft
Manifest number:          0258
Signing time:             Sun 11 Oct 2026 13:05:29 +0000
Manifest this update:     Sun 11 Oct 2026 13:00:29 +0000
Manifest next update:     Mon 12 Oct 2026 16:13:29 +0000
Files and hashes:         1: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl (hash: nrTg4h6OXNdf54aByFY8r1Gd6BNnq19WNNrAGLJ/k94=)
                          2: 323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (hash: H6Y8Jg9rAeQipmP48Tbl8zgAxAzVxftqGUzfJ+pTv34=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl
                          rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8d:cc:74:38:ba:20:ab:0a:be:c0:1b:86:e0:8a:ac:82:8b:08:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB
        Validity
            Not Before: Oct 11 13:00:29 2026 GMT
            Not After : Oct 12 16:13:29 2026 GMT
        Subject: CN=9EDF49FF84F956946C931CC6C6D4D9771FD215AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:5d:d2:fb:d9:60:e2:11:86:95:33:9c:3b:
                    ea:37:62:7f:8e:fd:d6:79:c3:a7:4e:bb:e0:b7:86:
                    3a:2e:8d:0c:13:1d:e7:dc:bb:52:d7:bc:65:6a:e1:
                    8f:72:bf:48:ea:27:68:db:7a:bb:47:0e:5d:60:bf:
                    29:bd:86:ce:77:ed:63:18:e7:0b:f3:fe:41:b8:89:
                    d8:f4:7d:f1:ab:4f:ee:ce:e1:77:70:c0:c2:9e:ed:
                    36:10:2a:93:c2:4c:ed:b0:e9:28:a5:df:3c:6a:40:
                    47:37:33:63:9d:1a:49:ba:b5:e7:4b:3c:0b:9d:4a:
                    c9:d8:fc:9b:de:ca:3e:81:ef:8a:99:69:08:05:42:
                    7a:7d:34:34:16:cf:e3:16:77:47:8d:56:1a:26:14:
                    0c:3f:89:f9:aa:0c:57:ca:58:e8:e7:c5:f4:32:64:
                    d8:16:5b:3c:a0:1d:d1:dc:bb:7f:cf:69:a2:a5:84:
                    10:48:b9:00:c9:e2:fc:b2:ed:d5:ce:19:33:d6:dc:
                    ad:60:ba:11:8d:d6:f6:2e:44:0a:53:b3:25:03:0d:
                    78:df:df:da:4b:ea:63:3b:89:f7:b3:f3:9f:fa:fe:
                    f3:fa:3d:01:be:db:60:cc:e5:e1:cc:f9:f0:a9:02:
                    23:87:d5:47:6d:28:d2:f1:a1:8e:32:bd:74:9e:c6:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DF:49:FF:84:F9:56:94:6C:93:1C:C6:C6:D4:D9:77:1F:D2:15:AC
            X509v3 Authority Key Identifier:
                keyid:4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:45:02:df:1f:7a:8c:f1:af:a0:b2:11:4e:d8:00:5a:84:ed:
         c4:ba:53:9c:30:a7:f2:0d:d7:81:71:67:0b:14:ee:b8:55:9f:
         c8:e7:7c:26:d5:9b:c6:4a:2a:57:73:a6:1d:f4:ca:e0:7b:75:
         ec:f8:18:76:66:5b:01:f7:8b:5c:69:fc:13:71:7c:59:f6:c2:
         a4:17:96:24:7d:38:4c:b9:f9:a3:fe:ae:9a:77:5d:b5:46:38:
         75:53:30:dc:4d:0d:0b:05:76:4b:82:40:0b:20:7f:13:92:e2:
         05:7b:9a:a5:9a:0a:d4:10:2e:1a:1b:73:cf:a4:19:2d:0b:b1:
         8c:65:ba:a3:0a:9d:7e:1e:48:2c:cd:7a:3b:2e:3f:5c:d5:6f:
         5e:08:03:0e:08:25:e1:b9:5b:91:57:bb:d7:ac:05:d4:38:e2:
         c8:78:41:11:f1:44:22:e6:ef:84:2a:b9:35:20:c2:2a:f3:f6:
         7e:e2:40:f0:35:40:57:34:6c:76:5c:51:96:29:92:7d:f5:59:
         ea:7b:0a:08:84:90:26:19:29:1a:fd:59:c5:b1:e9:7f:8c:00:
         3f:e3:e0:10:2b:cc:92:ac:b5:23:bd:07:a8:7d:2f:36:ef:2a:
         b5:26:b7:15:23:0d:ba:84:13:41:1b:eb:cc:38:bb:42:ff:6a:
         07:0c:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:03:24 2026 by rpki-client