Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
File:                     C3976BFC098E04D93A5507BBB046C3608B889670.mft (raw, json)
Hash identifier:          Q4XnPxqHL0UM18W5Q6dWtz9qAYWAeMfnd3MQ8j6a0Cw=
Subject key identifier:   BF:D0:94:36:C9:32:42:E9:88:7F:CA:DD:84:94:7B:3A:24:42:37:4B
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       3F4418A209830D201A6AAEDD60805AF6DA688B76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
Manifest number:          0586
Signing time:             Thu 29 Oct 2026 01:00:00 +0000
Manifest this update:     Thu 29 Oct 2026 00:55:00 +0000
Manifest next update:     Fri 30 Oct 2026 01:00:00 +0000
Files and hashes:         1: 323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa (hash: 3pDxFqA/yFfHk+CAtGXogl/uiNeu0UZ54S2QUNUdoNA=)
                          2: 323830343a363631343a383030303a3a2f33332d3333203d3e20323639353332.roa (hash: znG6mVdtuJf7OTpvcebCRJ6rRcTUzVPFmAEWycFohbI=)
                          3: 323830343a363631343a3a2f33322d3332203d3e20323639353332.roa (hash: ZbjsSwMRWm9SrcYoBYdOEKdQGPU9q8shbg/hbHCpkQk=)
                          4: 323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (hash: tMQrDW5AQq55OX25vS7sR8u3kgrjVThIuO5ojnSvHXA=)
                          5: 34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (hash: LaVXT9Gat57OXh1VksRLfzPee1kgO9ByuhkPIGFEVpA=)
                          6: 323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa (hash: a+0x97JcmUKYtxw1wlbVLfBbMv5HN34KM6tNZbfzoCk=)
                          7: 34352e3138382e3134322e302f32332d3234203d3e20323639353332.roa (hash: 0m8+zDBDxvXL3n0SvabbxLxFpASSiSoHHAJ2i6fBMTU=)
                          8: C3976BFC098E04D93A5507BBB046C3608B889670.crl (hash: N2qh+eXRM4a0sPniHl0jKDbHi71LD2s7yBh3LmFoCXQ=)
                          9: 323830343a363631343a3a2f33342d3334203d3e20323639353332.roa (hash: FRp9INqXDhAYwybC+EuExcMHfp69A1qO1NeFzfuwAqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:18:a2:09:83:0d:20:1a:6a:ae:dd:60:80:5a:f6:da:68:8b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Oct 29 00:55:00 2026 GMT
            Not After : Oct 30 01:00:00 2026 GMT
        Subject: CN=3082010A0282010100CEF89D21D9285D47B1492EDC76089DA44422EC5C85F705410515436639150201DC7B55FC3B81D7C5D892584F4505A2F5B8201B68AB9D634DD5EAD26F4B59AF250C7CA8C57355C921BFA0BB567DC91D65DB722C91A0A5FD90A9474C526AE8C7D836FE4F68EFC71E4EAF0B064C911512DB12832238C54C48492ED7B1DC4F918689D65F14166B642FADBCD01ECA3C4CE04AC1DA5191D88AC34A9240827248EE36F41A3B5908B285D8262E1889629141DF27A9D4F3640669039E36F3398C9A1E582D0A1EF2943FDAD112F7C28999212C1D912FDBCA042D52F7F5E3EFA0C01827B526908EFC27004774AB90D38480FB6A17B571CB185BA55E6DAB77F5B823406DAF210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:9d:21:d9:28:5d:47:b1:49:2e:dc:76:08:
                    9d:a4:44:22:ec:5c:85:f7:05:41:05:15:43:66:39:
                    15:02:01:dc:7b:55:fc:3b:81:d7:c5:d8:92:58:4f:
                    45:05:a2:f5:b8:20:1b:68:ab:9d:63:4d:d5:ea:d2:
                    6f:4b:59:af:25:0c:7c:a8:c5:73:55:c9:21:bf:a0:
                    bb:56:7d:c9:1d:65:db:72:2c:91:a0:a5:fd:90:a9:
                    47:4c:52:6a:e8:c7:d8:36:fe:4f:68:ef:c7:1e:4e:
                    af:0b:06:4c:91:15:12:db:12:83:22:38:c5:4c:48:
                    49:2e:d7:b1:dc:4f:91:86:89:d6:5f:14:16:6b:64:
                    2f:ad:bc:d0:1e:ca:3c:4c:e0:4a:c1:da:51:91:d8:
                    8a:c3:4a:92:40:82:72:48:ee:36:f4:1a:3b:59:08:
                    b2:85:d8:26:2e:18:89:62:91:41:df:27:a9:d4:f3:
                    64:06:69:03:9e:36:f3:39:8c:9a:1e:58:2d:0a:1e:
                    f2:94:3f:da:d1:12:f7:c2:89:99:21:2c:1d:91:2f:
                    db:ca:04:2d:52:f7:f5:e3:ef:a0:c0:18:27:b5:26:
                    90:8e:fc:27:00:47:74:ab:90:d3:84:80:fb:6a:17:
                    b5:71:cb:18:5b:a5:5e:6d:ab:77:f5:b8:23:40:6d:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D0:94:36:C9:32:42:E9:88:7F:CA:DD:84:94:7B:3A:24:42:37:4B
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ec:30:8e:6c:e0:52:9f:10:f0:18:19:a9:db:1e:5e:5c:06:
         79:84:33:b1:3d:e1:89:14:10:2a:f6:8d:87:27:ac:4c:a0:4a:
         c9:ef:ba:76:9b:8c:ba:62:17:98:1e:d0:1f:d5:9c:d7:c2:65:
         78:c9:9f:67:e1:d2:6d:eb:18:e5:33:e4:38:c0:d0:a5:ea:05:
         ef:bb:e3:1c:64:fd:b4:26:02:81:bb:97:47:b6:1b:79:94:b7:
         4c:94:24:72:65:76:f5:6c:51:6e:66:a2:88:2e:bb:45:27:01:
         52:d6:36:ac:26:a6:94:01:1f:f6:07:cc:aa:e4:f5:1c:41:23:
         40:6d:33:f1:b3:8c:45:99:0a:90:3b:37:6d:77:01:86:a0:17:
         c7:a4:37:95:9e:ee:cd:e2:f7:6b:32:68:e4:62:8d:7a:21:4d:
         19:67:a8:d7:ef:c9:7b:4d:be:c5:9b:48:0f:d7:5f:37:b6:13:
         87:64:b4:20:33:1d:80:33:be:6b:05:0c:ef:d0:c6:05:f4:13:
         84:13:38:3e:45:c2:09:da:9f:56:49:1c:4b:93:0f:49:5b:62:
         66:ae:3e:ab:c4:80:1c:05:b0:2a:13:14:9f:a8:12:f6:1e:dc:
         e1:3d:c8:2b:d5:13:77:59:3c:a8:09:df:9c:fd:e0:fc:80:ea:
         04:c0:79:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----