Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
File:                     395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft (raw, json)
Hash identifier:          0kTeZ0MLY5aPvU5zjjuLTHJ8dFs2uUL2tkAEtNqSndY=
Subject key identifier:   9D:E9:CD:27:65:EE:B9:2F:F8:57:FF:5E:E9:9B:53:A5:34:56:87:27
Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F
Certificate issuer:       /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
Certificate serial:       236E2418E9D05E38E23A4382C7C2ED4B1C68F141
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
Manifest number:          01FB
Signing time:             Sun 11 Oct 2026 16:46:31 +0000
Manifest this update:     Sun 11 Oct 2026 16:41:31 +0000
Manifest next update:     Mon 12 Oct 2026 18:20:31 +0000
Files and hashes:         1: 323830343a393465383a3a2f33322d3332203d3e20323734343836.roa (hash: 49duIBMY8bd9G5qde0uXsMuJHM5k0sOUhM+ID0aHzmU=)
                          2: 323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa (hash: Aw9fasgBnuZAepySGxsZx5IIQpagTX+5RvZdfpyFd8M=)
                          3: 3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa (hash: kUwBv4X36apbdYb+QEV2Mt3gwsGNvu5IRpHK4AOjelY=)
                          4: 323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa (hash: NeaG8JjQ+c3FWtG3/nWXjeqNLptNqst1n96HoNeMPjs=)
                          5: 395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl (hash: ePiffZ/GYXGt8lbBH6jKL12ie9RaF5ZhLX4By6ihAgQ=)
                          6: 323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa (hash: 5Uz50IZxRb1/uT4YuOKj4/i8aaf+ELJQ6vLCIs9EXdw=)
                          7: 323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa (hash: om8D32jygVOtQxKT0ljtzvahGU1e9ZIhO2fOqPYPYl0=)
                          8: 323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa (hash: rp1aF+JqWMblW8TnZANBke3q9B2/eUp/yb96rZuQfx8=)
                          9: 323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa (hash: +FrJFLsCO2s2d8o7Df7K1aZ72bCYkFJHjhNs8qyg5CI=)
                          10: 3138362e3139352e3137312e302f32342d3234203d3e20323734343836.roa (hash: TatRGrc3mJRWWPGpb1l2tYlJ+Lou6oM/PLsOwESHNuQ=)
                          11: 3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa (hash: bO5LOh5tf83j1iA04EYYIrlYZ/gKg1FrwYVSs1cRGmg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl
                          rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6e:24:18:e9:d0:5e:38:e2:3a:43:82:c7:c2:ed:4b:1c:68:f1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
        Validity
            Not Before: Oct 11 16:41:31 2026 GMT
            Not After : Oct 12 18:20:31 2026 GMT
        Subject: CN=9DE9CD2765EEB92FF857FF5EE99B53A534568727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:83:3f:46:11:28:2c:37:2b:6b:96:3b:a9:95:
                    7e:03:1d:6a:48:a4:e0:37:2c:43:e0:47:61:75:fd:
                    ac:40:62:da:81:39:6f:5a:24:f0:a8:a5:e5:b4:02:
                    d7:ee:f7:c8:f0:39:22:96:8b:40:97:75:26:f1:86:
                    de:cd:46:59:92:98:ed:49:96:a8:a9:f5:16:8a:b8:
                    6b:cf:92:74:b7:ff:85:c6:1c:2b:bc:1d:1c:39:af:
                    17:3d:d7:95:7f:aa:c5:50:37:7a:d7:9f:e0:c2:28:
                    47:77:65:9f:54:85:30:31:92:97:55:75:ef:a2:b6:
                    45:1d:4f:68:df:9c:07:27:7c:9a:35:89:52:5d:b2:
                    35:54:d9:e2:bf:98:c6:31:b3:08:7a:5a:68:8d:ee:
                    26:88:31:08:04:60:6f:00:fe:14:db:f1:19:c3:a9:
                    82:5f:92:e9:ce:65:5d:77:6a:75:c8:d3:bb:63:51:
                    2f:67:8d:9a:2d:00:44:76:c4:f4:21:93:7f:ad:f8:
                    a3:f8:22:18:dd:82:e8:12:d3:db:b9:68:f5:c3:e5:
                    ec:e1:18:43:2d:e8:e8:7b:7d:ff:5e:8a:ab:96:d1:
                    97:58:6b:ab:48:ed:82:c4:a4:5c:62:b7:f2:40:22:
                    13:99:3d:7a:dd:3f:11:a9:84:74:db:94:69:d6:f4:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E9:CD:27:65:EE:B9:2F:F8:57:FF:5E:E9:9B:53:A5:34:56:87:27
            X509v3 Authority Key Identifier:
                keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:df:2f:69:87:2e:52:5f:d3:c9:30:68:be:f7:2d:03:79:29:
         44:a1:5e:52:f9:22:65:a8:e4:c6:3e:a0:37:ec:59:19:1b:40:
         98:9d:9d:7b:1f:37:7c:27:3e:35:80:c5:78:c7:08:c5:c1:2a:
         a0:e9:53:a7:09:df:45:b5:c9:8f:f3:8b:06:f5:e7:01:b7:ec:
         2f:b7:89:74:e2:8a:6b:e3:51:45:c6:70:12:e5:98:4d:22:5c:
         85:78:9e:41:b7:4d:ab:c3:6a:95:26:9a:b4:f7:9f:cf:19:4e:
         23:77:ea:e0:1e:64:5d:88:1f:b5:b1:fb:73:e9:bc:9f:16:1a:
         1e:8b:ae:8e:26:c2:02:d5:7e:9d:95:38:e7:c4:46:21:8a:5f:
         19:78:0b:6a:bb:8a:dd:8d:19:1c:8b:58:50:9b:e0:5d:36:91:
         58:ef:23:14:41:0f:cb:c1:ad:98:37:4a:f4:22:dc:6e:a5:f8:
         68:a0:79:8a:8c:ba:65:45:c5:14:9e:ab:d5:b2:99:34:11:72:
         ac:bf:7c:d9:80:db:74:d6:3c:ad:08:c7:d3:53:7a:6d:b6:37:
         b8:89:18:52:1a:9f:ca:73:d8:10:c6:fb:83:5d:87:88:11:02:
         47:84:cd:d3:33:1f:47:0c:d1:92:17:01:ab:e2:bd:1c:1a:c8:
         3e:03:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:20:30 2026 by rpki-client