Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
File:                     A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft (raw, json)
Hash identifier:          RkTN75EpN2BUEkZLuUj600cUNUeVBcG9HCyz77Z/ZPw=
Subject key identifier:   29:A8:A1:C4:C0:5E:73:F1:BB:D5:B3:64:CC:5E:B3:94:1B:70:DF:94
Authority key identifier: A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9
Certificate issuer:       /CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
Certificate serial:       7F3679C74A96F4E4F04D1EB2F889093776E82930
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
Manifest number:          01D8
Signing time:             Sun 01 Nov 2026 01:01:49 +0000
Manifest this update:     Sun 01 Nov 2026 00:56:49 +0000
Manifest next update:     Mon 02 Nov 2026 03:15:49 +0000
Files and hashes:         1: A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl (hash: SdpBm/XM7tcEwD9/ku63vnIc5lXfJuEvASfzbK/6Jsg=)
                          2: 323830343a373566303a3a2f33322d313238203d3e20323731303739.roa (hash: M/4NDrxLueMISz/26XIgQs1IRXCS8n74CwhaDkD1y50=)
                          3: 3138312e3139312e3133362e302f32322d3332203d3e20323731303739.roa (hash: iFD93CJep/pz+yqRjNqXtSByqRpVMvVjCtCsd3IcWlE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl
                          rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 03:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:79:c7:4a:96:f4:e4:f0:4d:1e:b2:f8:89:09:37:76:e8:29:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9
        Validity
            Not Before: Nov  1 00:56:49 2026 GMT
            Not After : Nov  2 03:15:49 2026 GMT
        Subject: CN=29A8A1C4C05E73F1BBD5B364CC5EB3941B70DF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:55:a2:bc:67:bc:6c:bc:fe:36:c2:f0:ad:
                    e9:42:80:2b:05:0e:a3:dc:d3:71:1b:c9:4d:da:e1:
                    d9:e4:19:7e:bf:df:8a:6c:48:39:e3:a6:90:a5:b7:
                    75:50:4d:8e:4e:8a:7e:3f:50:92:dc:43:48:5c:53:
                    94:ff:a1:1e:36:a5:2a:00:81:12:5e:ab:10:02:a9:
                    86:20:2a:e6:3e:de:6b:ac:f5:09:d5:ae:fc:cf:cc:
                    de:a4:b5:2d:a8:8d:15:c3:2d:99:bf:32:95:f5:63:
                    9a:f1:fe:36:25:46:9f:9a:14:1f:e1:ae:c7:0a:ee:
                    8f:4c:57:f4:d4:fe:60:5c:42:90:da:5d:a5:dc:2c:
                    57:93:b3:19:1c:16:1b:5d:bc:be:17:33:a6:ab:29:
                    5d:ed:b3:2f:4e:bd:54:96:60:af:d8:8e:9b:50:32:
                    4b:5b:1d:e6:be:43:53:56:3f:98:ba:bc:fb:e3:1c:
                    d1:96:d7:33:e0:d8:a1:df:04:1b:ab:54:a6:3d:2b:
                    f6:98:54:6c:39:ba:f9:2c:14:cc:94:2d:51:3d:47:
                    7c:a0:b4:70:a3:da:aa:7f:21:92:b0:c5:9c:c9:43:
                    16:5e:4f:47:47:c3:34:be:08:ee:93:e7:88:40:bf:
                    b7:4a:19:1f:c8:2a:d7:ac:6a:cf:d9:32:6e:37:2b:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A8:A1:C4:C0:5E:73:F1:BB:D5:B3:64:CC:5E:B3:94:1B:70:DF:94
            X509v3 Authority Key Identifier:
                keyid:A3:12:4B:CE:5C:32:36:ED:EC:70:B3:89:72:51:EE:E2:3B:3F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KqbJVofBg1P7UhmnKhdY5qGZQGzgngZgQatjCcWJ2xL/0/A3124BCE5C3236EDEC70B3897251EEE23B3F1BE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:9e:33:0c:8b:78:c7:3b:69:82:8c:60:3e:bf:0a:2f:93:59:
         3b:e8:8e:5c:71:17:a1:5f:21:00:30:ac:a8:90:1a:2b:9a:8c:
         9c:dd:fd:ea:40:e3:b4:97:22:90:2c:6d:a2:e4:e4:35:24:9a:
         4c:76:62:0e:2e:17:07:f4:48:0b:4a:48:f2:ef:27:3e:e6:ee:
         d5:a4:10:28:f5:16:8d:0f:ce:6c:ec:81:c8:09:21:6a:bf:ca:
         2c:2b:b2:da:30:37:e3:55:66:30:09:8d:12:9e:10:62:98:59:
         2b:a8:31:de:2c:e6:3a:bc:ed:87:5a:dd:00:0a:d6:be:31:c4:
         78:f3:27:bb:e5:07:7d:6e:b1:8c:33:11:1e:3f:c4:38:66:f6:
         45:28:73:74:b5:7a:18:6d:94:21:35:4c:4e:f5:71:1b:29:8e:
         0d:4b:11:80:ec:2a:42:ca:2f:34:59:cc:09:2d:24:50:46:d6:
         99:b6:b6:a8:e6:a7:df:6b:a8:7c:0a:34:80:c4:1c:70:c9:49:
         35:6a:1c:40:c0:50:ec:5f:55:47:fd:33:62:1b:98:db:d6:21:
         ee:d6:27:c5:1e:1d:06:30:cc:16:e8:6d:c2:0b:7a:6f:98:2b:
         55:84:01:84:7a:27:f0:cd:6b:28:b1:1e:d0:b8:02:25:4b:53:
         c7:88:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:53:04 2026 by rpki-client