Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
File:                     CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft (raw, json)
Hash identifier:          jvKEDqCrSMvxkmO5EZw164a//rQzUY0VUHOBG2GKxaw=
Subject key identifier:   73:CD:9D:2B:81:A2:3D:A7:4C:01:05:3F:3E:C6:E4:58:CF:A3:7A:75
Authority key identifier: CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91
Certificate issuer:       /CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
Certificate serial:       5859BDDC3CA97A45F7861402A5B408666CBB72BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
Manifest number:          AF
Signing time:             Sat 24 Oct 2026 04:58:07 +0000
Manifest this update:     Sat 24 Oct 2026 04:53:07 +0000
Manifest next update:     Sun 25 Oct 2026 07:46:07 +0000
Files and hashes:         1: CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl (hash: b/Uj9nOB4t4xAS87zeE4sNiuFSgA2gGAoKDcF3RERpI=)
                          2: 3136372e3235302e3138342e302f32322d3234203d3e20323635323135.roa (hash: CHOOKZQIOYxzpT/kc2KUiR2j+iPpUCZEl7IDfqZHwD8=)
                          3: 34352e3137362e3139362e302f32322d3234203d3e20323635323135.roa (hash: fo+GMng67/O0QE9/lvD790XYBLwfdCA2eo3lBqgJmTg=)
                          4: 323830343a326336343a3a2f33322d3438203d3e20323635323135.roa (hash: WANm1F6sSBsFTOfUmiHGg4ICR4rvlqK0ssG6KDIYLoc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl
                          rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Oct 2026 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:59:bd:dc:3c:a9:7a:45:f7:86:14:02:a5:b4:08:66:6c:bb:72:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691
        Validity
            Not Before: Oct 24 04:53:07 2026 GMT
            Not After : Oct 25 07:46:07 2026 GMT
        Subject: CN=73CD9D2B81A23DA74C01053F3EC6E458CFA37A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:b5:20:4a:a3:94:2b:cd:35:2d:6c:09:e3:
                    26:da:0d:cc:c6:97:93:d6:3d:55:ac:e5:3b:b2:13:
                    9e:3a:6b:6a:94:be:99:d8:e4:3d:23:b8:fb:d7:71:
                    3b:22:11:94:f2:f1:f0:3e:2b:a2:81:e6:58:7d:ed:
                    5a:7c:fc:f8:4c:d4:af:94:d5:69:f2:70:8e:02:d0:
                    7a:25:ec:8b:8c:53:b9:83:53:64:97:4c:51:5f:9b:
                    fc:81:4a:c9:75:f0:04:b8:94:eb:30:23:3a:0e:52:
                    d2:52:16:2d:db:18:42:0a:80:62:16:2e:39:4d:b7:
                    33:c9:c3:6b:ca:2a:92:91:41:f6:9e:0a:cc:d5:4a:
                    07:06:e9:f7:07:da:42:07:0d:df:ee:cf:b2:60:3e:
                    86:30:8b:16:eb:93:aa:14:a4:2d:72:a2:b9:d0:81:
                    08:cc:a4:93:cc:f4:ad:2d:c1:e0:44:e8:88:0e:18:
                    b8:a4:de:51:5f:90:a2:cb:b7:7a:87:0a:c0:db:4c:
                    73:57:aa:ca:70:3d:87:19:e7:6a:46:81:83:40:56:
                    dd:76:a4:5f:e6:56:c9:6d:c2:84:d1:bc:78:c8:bb:
                    4c:3e:04:ad:b3:d9:0f:2e:1a:8a:dc:ef:87:06:74:
                    49:54:f5:47:e8:a2:ad:25:5e:d8:7b:31:67:a9:14:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:9D:2B:81:A2:3D:A7:4C:01:05:3F:3E:C6:E4:58:CF:A3:7A:75
            X509v3 Authority Key Identifier:
                keyid:CA:3B:4A:24:30:DC:6A:1E:6D:28:1B:34:BA:D2:FA:E5:FC:41:46:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXTFhB56s2xZy1kKEGBF8sV2uNvfYEXRiGYkwiWniKMs/0/CA3B4A2430DC6A1E6D281B34BAD2FAE5FC414691.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:a1:f0:0a:70:3a:65:92:fe:e0:5f:7e:8d:bf:e2:37:80:
         d3:04:6c:71:6c:a7:3d:36:6c:3f:6e:65:06:b8:6e:da:3c:d0:
         89:ec:04:46:c5:91:95:b9:f8:a9:a7:c9:34:03:ae:e2:43:d2:
         1d:a7:23:88:f4:1c:28:be:89:01:e9:6d:4a:8a:d3:13:93:1f:
         2a:61:b9:3e:e6:e4:91:bd:e7:2e:a8:d8:6c:6f:01:67:bf:be:
         0b:ea:69:1f:49:5b:4c:61:83:2c:20:b5:6d:0e:ad:a6:54:03:
         57:82:c1:77:0f:5c:d8:46:e8:ec:94:7e:68:9d:65:6e:4d:14:
         15:86:8c:76:d0:39:f9:cd:0f:0e:ef:77:d3:c2:27:2d:ac:18:
         5a:2a:ef:93:40:5f:38:52:b1:f3:1f:bf:49:6c:a9:b3:d1:01:
         5b:ab:9b:4a:8e:79:c4:85:a8:15:80:0f:11:bf:65:1e:30:3a:
         33:07:9f:7b:ae:01:08:69:c0:c0:71:0d:ce:cf:59:32:8c:f7:
         ef:3b:8c:3e:77:f2:94:4d:01:ae:cc:3e:b4:13:55:61:8c:c9:
         78:84:e6:c8:b3:c8:4f:14:41:f6:7e:5a:60:dd:c3:01:ed:84:
         bd:5c:74:43:38:5c:74:3a:c2:91:49:25:33:69:51:8e:dd:c1:
         f9:1e:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----