Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
File:                     4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft (raw, json)
Hash identifier:          s8d0iZJ0pzSduzB9Ejd68fhbF2yN2salrXbcxQ5FGGU=
Subject key identifier:   95:BA:0E:B5:0D:C4:7E:2B:97:24:E3:8D:4C:9F:5C:D4:DC:25:DA:73
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       131EBA37315D6E9238AF9B37C9E676301C21CA65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
Manifest number:          0297
Signing time:             Sat 31 Oct 2026 15:56:51 +0000
Manifest this update:     Sat 31 Oct 2026 15:51:51 +0000
Manifest next update:     Sun 01 Nov 2026 17:29:51 +0000
Files and hashes:         1: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl (hash: 2jpNn/BJDIXYDWVpGqk0dhK972QXeY9wrL860ZkOpGs=)
                          2: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: 49HXvbcey1ft5bTAbb2mm1Ivl/ApvZVY5rl5p+M4brE=)
                          3: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: ZK94GCJeDueUtLX2HGlkBARJezl5um7V/VRRTMCjtxs=)
                          4: 323830343a386165303a3a2f33322d3335203d3e203631363130.roa (hash: Lq/M7HyDrQmzxkTrgCJloswHG80yJe4W8wxfKyuxsX0=)
                          5: 3230302e3232352e34382e302f32312d3231203d3e203631363130.roa (hash: BDByrLzTnWdKH66ft4GYs1p0O6zDU2ZSnyP1zi+H6o0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 17:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:ba:37:31:5d:6e:92:38:af:9b:37:c9:e6:76:30:1c:21:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: Oct 31 15:51:51 2026 GMT
            Not After : Nov  1 17:29:51 2026 GMT
        Subject: CN=95BA0EB50DC47E2B9724E38D4C9F5CD4DC25DA73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:ae:a6:ab:87:d0:6c:11:ed:3c:63:07:76:
                    db:52:04:13:a9:8d:1a:3b:c9:38:51:85:8e:e8:be:
                    b4:14:f6:c5:ab:b1:fc:9d:48:28:d4:db:b8:da:12:
                    3f:41:bf:f8:45:b5:cc:3b:c4:bd:38:a6:9e:f6:f0:
                    60:53:4b:8c:f3:9c:2f:2f:0a:80:83:0f:e3:f6:70:
                    f9:82:b6:cc:b1:01:b7:c1:2d:8c:46:b4:b7:3f:ec:
                    6b:8b:1e:65:9a:ee:63:7f:33:d7:30:20:31:e0:5e:
                    ad:8e:c8:67:be:90:82:42:07:21:2e:e0:e1:c7:a5:
                    8b:2f:aa:93:53:a0:fc:28:67:a6:3c:d0:05:19:28:
                    71:56:5e:b8:4f:b9:bd:03:32:5a:03:bc:95:95:0e:
                    44:6f:b5:6f:b2:07:68:38:73:cf:3f:7f:e9:d6:2b:
                    6b:48:bd:a2:75:7c:cc:e9:9d:da:58:f9:0f:a2:93:
                    8c:1c:ff:71:d6:92:33:a3:bb:be:76:df:08:04:75:
                    de:9d:ac:67:86:a3:ca:66:7b:b3:ec:78:17:e0:0b:
                    f5:87:50:55:3d:08:ac:e5:c0:95:4f:1e:8a:8d:57:
                    a5:2c:0e:9a:99:3f:34:3d:65:70:d0:ed:41:3e:6d:
                    5d:7b:fa:52:31:e2:2f:4f:d7:16:76:8d:a0:a3:c6:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BA:0E:B5:0D:C4:7E:2B:97:24:E3:8D:4C:9F:5C:D4:DC:25:DA:73
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e7:82:89:69:01:63:ce:cf:4c:91:a2:19:0e:57:70:db:4f:
         12:b7:0c:4f:16:c6:6b:0f:f4:a9:86:cf:09:fd:6a:f4:2d:57:
         cf:31:ae:ec:9f:09:c4:f0:d3:b2:50:00:23:84:47:30:3b:cb:
         01:cb:c6:f9:95:45:a6:a2:25:d4:4c:79:af:af:21:20:17:10:
         0a:cf:70:f6:12:ae:1b:0f:59:51:e3:6d:45:98:16:1c:d0:6a:
         3f:ad:ca:8c:ef:ae:08:32:54:6a:d2:ae:d0:ce:eb:88:db:fb:
         46:47:9e:5d:75:91:d1:e4:d2:e7:3a:df:70:a6:e5:57:04:bf:
         4d:2f:15:ce:ba:46:d0:c1:62:35:3c:57:1f:f8:86:5e:ae:a9:
         7b:54:24:27:8f:8e:c7:1c:c9:4d:b8:79:cf:cb:45:0b:74:e5:
         29:36:34:18:9c:05:09:ee:1f:e6:23:46:e2:7c:63:8d:d0:de:
         c6:11:f6:4a:81:df:86:f5:47:40:77:53:9d:84:ad:da:d9:d6:
         01:46:5f:70:2b:54:32:33:55:f5:7c:c4:74:98:4a:0b:42:e2:
         94:20:66:58:91:29:cf:7d:5f:aa:10:85:37:01:f0:05:71:12:
         13:17:cd:d6:59:68:59:a2:32:df:12:37:83:b1:9d:b4:e3:0a:
         ca:54:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----