Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
File:                     3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json)
Hash identifier:          Ea60n+C4BoQktNV/qxvHVEA928FswVJSmu/TZNlmlBQ=
Subject key identifier:   86:B2:77:B4:75:79:F6:78:B0:0C:21:62:D8:26:B8:38:6F:1D:82:17
Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21
Certificate issuer:       /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
Certificate serial:       13342E5A7F4694E0FEF8F7ADFF5DBB91CA89464F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
Manifest number:          04CD
Signing time:             Wed 14 Oct 2026 06:09:43 +0000
Manifest this update:     Wed 14 Oct 2026 06:04:43 +0000
Manifest next update:     Thu 15 Oct 2026 06:44:43 +0000
Files and hashes:         1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: 3K66Ajvlapah/OjBdFhRjmdUgypcjDSewUsxmx38OJ8=)
                          2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl
                          rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:2e:5a:7f:46:94:e0:fe:f8:f7:ad:ff:5d:bb:91:ca:89:46:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21
        Validity
            Not Before: Oct 14 06:04:43 2026 GMT
            Not After : Oct 15 06:44:43 2026 GMT
        Subject: CN=86B277B47579F678B00C2162D826B8386F1D8217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:e3:97:b7:4d:ee:e6:04:6d:de:fd:96:d0:
                    02:12:7d:d4:78:1d:92:ba:5f:1f:42:33:fc:98:d4:
                    a4:83:32:30:33:5e:76:2a:a3:c6:a4:a4:db:1a:75:
                    80:25:99:52:62:1f:5d:d0:de:7a:6f:9a:df:ad:82:
                    96:d2:87:80:e6:66:ce:31:a1:42:91:2a:f0:c3:e5:
                    b6:fb:cd:5c:89:3e:f7:3b:4f:e5:50:e0:60:75:11:
                    1b:a5:52:e2:7b:f0:b3:c6:2a:70:ba:77:db:ce:35:
                    1b:81:63:ba:cb:41:a7:51:02:92:15:e4:e7:9b:7d:
                    b1:ca:12:43:76:60:21:de:7e:e4:c9:b9:c0:b1:cd:
                    eb:ee:cf:07:fb:7a:4d:d4:1d:6b:ea:d9:fb:39:2b:
                    5e:64:cb:ba:97:17:2d:d2:28:76:93:d1:52:e9:46:
                    a4:cd:3e:a3:cc:06:67:61:7d:62:f6:78:77:cf:ec:
                    e1:90:a4:e6:a8:5f:69:ce:93:ad:37:7b:29:fa:5a:
                    68:57:c8:e4:13:b5:83:0d:3d:1e:71:02:46:d7:81:
                    5e:cd:cc:2b:99:21:1f:14:e2:f6:2c:b1:92:87:9a:
                    b5:bc:ed:35:78:98:c2:e0:ef:0e:e3:9f:d4:30:fb:
                    c2:8a:2b:54:d1:09:df:9e:1d:b0:0e:fc:7f:36:0d:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B2:77:B4:75:79:F6:78:B0:0C:21:62:D8:26:B8:38:6F:1D:82:17
            X509v3 Authority Key Identifier:
                keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:ba:b1:6a:e7:58:93:b7:42:a5:bb:62:bc:b9:00:5b:5f:
         10:80:3a:30:ab:1d:1d:53:ec:eb:cb:ef:05:5d:0c:1b:94:13:
         dc:73:f3:e2:0a:de:76:a4:78:13:14:ef:03:ae:cb:bb:03:0f:
         67:ff:bd:77:b0:ec:55:18:4b:f3:60:8c:ce:41:8e:71:b4:65:
         5a:79:d0:47:87:96:eb:9b:38:10:2e:b3:91:6a:56:99:f8:b9:
         74:c0:64:6e:f7:18:cc:80:09:6d:4c:a7:31:84:e0:db:40:9f:
         35:9a:67:d9:86:18:de:7b:48:a4:f2:b4:4a:77:aa:54:6b:97:
         a2:c2:db:73:51:92:7c:3e:66:0c:d0:f3:d0:e1:79:b4:4f:5a:
         7d:a1:00:27:2f:41:e9:4a:5a:0b:55:52:6a:e6:51:34:0d:da:
         f8:6a:8b:90:ff:a4:91:f6:7d:74:d0:a9:5f:c3:ef:d9:46:13:
         4f:c4:87:b2:b5:fa:a1:57:bd:2f:0d:f1:bf:1e:14:84:a6:f7:
         1a:f2:a3:24:38:5e:c4:df:a8:b5:09:7d:a4:f8:7c:e6:c2:4c:
         e3:3e:98:39:3a:a6:2b:09:47:33:54:1f:25:af:ad:b9:0c:de:
         2e:a9:3e:79:ff:a5:1c:4a:b7:be:55:1f:e7:b8:67:72:7e:da:
         45:be:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:14:17 2026 by rpki-client