Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft
File:                     4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft (raw, json)
Hash identifier:          GKjZdyM0i+/D3XT8ow/U/2P932HXW0VYrru9Lwl8AEo=
Subject key identifier:   63:EA:B7:96:1B:07:D2:61:E7:00:BD:01:5A:80:EB:E8:7B:AD:35:00
Authority key identifier: 45:23:D4:0F:44:EE:C4:23:8D:D8:74:39:30:3B:34:10:CF:5F:1F:1F
Certificate issuer:       /CN=4523D40F44EEC4238DD87439303B3410CF5F1F1F
Certificate serial:       737D95717DD5ADDBC5A9E56C0BE86B5C6C85E45A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft
Manifest number:          4A
Signing time:             Sat 10 Oct 2026 13:14:11 +0000
Manifest this update:     Sat 10 Oct 2026 13:09:11 +0000
Manifest next update:     Sun 11 Oct 2026 16:06:11 +0000
Files and hashes:         1: 34352e3232342e3138302e302f32322d3332203d3e20323637363630.roa (hash: vgiXsQKdTW6s7dXUZX5i2v00YH0hXQ33xkSJWbP5/5E=)
                          2: 323830343a343465383a3a2f33322d313238203d3e20323637363630.roa (hash: bOVF+c1Mpt3NgrlyQAhu4Cc1L5UIrQNz1eympXKzZL8=)
                          3: 34352e3232342e3138312e302f32342d3234203d3e20323637363630.roa (hash: bJfugJF3oMM5cTuBYW9lES2eMnSZ37VSKlrxfe2RbI4=)
                          4: 323830343a343465383a666330303a3a2f33382d3338203d3e20323637363630.roa (hash: iT6zpuufSdCQb7MzoUGktLZWbDCRxMUQJ9gbQCo3WP8=)
                          5: 34352e3232342e3138302e302f32342d3234203d3e20323637363630.roa (hash: HeduSDT3xTNR0WH97zgVP8p7T9YBfAoVaF7Ji6gT5zE=)
                          6: 34352e3232342e3138332e302f32342d3234203d3e20323637363630.roa (hash: 1Dxsm/xOGHsRTJx48W/fOWyap05UkdEqNzPX3w8n1mc=)
                          7: 4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl (hash: 7538218j1N4OyMmFd6f0fiuXxk5L/zec+poS+1fLmTA=)
                          8: 34352e3232342e3138322e302f32342d3234203d3e20323637363630.roa (hash: ucvvEDmPE7V9aUG5TJqKUw6C9A8/y2woNBDAkQnL2I0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl
                          rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 16:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:95:71:7d:d5:ad:db:c5:a9:e5:6c:0b:e8:6b:5c:6c:85:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4523D40F44EEC4238DD87439303B3410CF5F1F1F
        Validity
            Not Before: Oct 10 13:09:11 2026 GMT
            Not After : Oct 11 16:06:11 2026 GMT
        Subject: CN=63EAB7961B07D261E700BD015A80EBE87BAD3500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:d3:7c:5b:37:9e:79:f6:5d:40:7f:fd:92:
                    e1:18:91:42:f1:2a:74:e2:d7:dd:d7:c8:51:3d:bc:
                    3e:5c:bf:d6:48:7b:82:78:dd:39:ba:d5:26:2c:d0:
                    3a:72:1b:d3:1f:22:ab:7c:62:28:22:d4:b3:26:1b:
                    fb:91:04:f4:b8:dc:81:83:96:1e:eb:f9:18:14:42:
                    65:ec:33:5a:33:5f:78:f4:da:90:63:0f:11:f1:7e:
                    db:f8:d3:10:6a:fb:c8:04:eb:ee:62:ee:45:c5:cf:
                    fc:90:d2:37:18:c5:bd:fa:68:83:f6:e2:af:a7:92:
                    e5:65:0f:d1:95:1d:18:83:ca:72:6e:39:20:a6:6d:
                    fe:69:a6:95:95:d5:cb:2c:4c:dc:1c:76:09:92:8b:
                    d7:14:89:9a:3d:72:da:5f:3f:da:c2:be:40:39:10:
                    e5:51:22:ca:b6:15:d9:7e:19:ab:ee:8c:92:bd:c4:
                    ec:ba:73:f8:2b:92:b6:f0:66:ba:74:59:b3:29:57:
                    7a:7d:e5:6f:aa:e8:aa:aa:5a:2f:2e:85:2b:f9:a2:
                    59:0f:ef:50:c0:00:c5:ba:0c:22:8f:db:03:5c:b4:
                    e6:4c:a7:29:fb:84:45:00:79:1c:34:ab:07:41:1d:
                    64:6a:e2:21:73:f6:40:17:ae:44:42:6d:b1:6d:06:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EA:B7:96:1B:07:D2:61:E7:00:BD:01:5A:80:EB:E8:7B:AD:35:00
            X509v3 Authority Key Identifier:
                keyid:45:23:D4:0F:44:EE:C4:23:8D:D8:74:39:30:3B:34:10:CF:5F:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:36:d5:37:f3:03:d2:90:0e:7c:a4:1d:70:b8:f3:ac:b4:f4:
         80:61:73:27:10:2d:d7:00:a7:c2:f9:e7:71:8a:bb:d8:ae:ad:
         08:a2:0d:2c:48:df:ce:be:5c:0f:c0:e2:23:e1:93:fd:05:7e:
         04:8c:60:34:a9:28:81:09:17:88:d9:8f:39:9e:f1:3b:18:23:
         0b:6d:0f:4c:5a:e0:9d:00:ce:98:15:d2:73:da:de:ba:f4:fb:
         a9:f7:1b:5b:33:74:54:59:ec:56:d3:3c:bf:24:83:1e:41:04:
         77:01:2d:82:c0:14:f9:f7:e5:c3:8e:07:0b:d4:7a:e3:1a:0b:
         92:f9:11:0e:3a:93:ba:5b:90:9c:7c:cd:a8:aa:f3:1f:ba:9a:
         0b:95:5d:85:77:94:3c:69:a0:ea:aa:60:f2:80:26:43:4d:c2:
         7a:68:d1:ec:36:64:16:c4:7c:15:c1:70:6f:6e:2c:12:11:8e:
         49:25:55:82:0b:b0:3d:d9:4b:9f:ed:a6:86:c5:10:f8:53:23:
         37:da:45:34:d9:d8:be:c4:ee:fd:d4:70:9b:52:3e:3e:ee:f2:
         c0:8e:54:d1:9c:39:8e:b7:bd:95:b4:67:de:8f:c2:b5:60:81:
         f6:f7:d5:00:06:d2:af:1a:97:72:3e:2b:10:08:33:43:f2:60:
         9b:41:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:31:39 2026 by rpki-client