Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
File:                     090356FA0F721D9A2449A75F672A23DBF91DA79D.mft (raw, json)
Hash identifier:          +U9J/sR4/l7qMntjgTOyV/002sCiN4rO0/k5kBff4UU=
Subject key identifier:   5A:BC:62:03:EE:BF:63:1F:53:52:92:04:87:BF:06:33:0D:FE:50:1B
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Certificate issuer:       /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial:       70BD2082066466D5005B84C3AB3788A691431ACE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
Manifest number:          0173
Signing time:             Sat 10 Oct 2026 03:15:23 +0000
Manifest this update:     Sat 10 Oct 2026 03:10:23 +0000
Manifest next update:     Sun 11 Oct 2026 04:36:23 +0000
Files and hashes:         1: 3230312e3232322e32372e302f32342d3234203d3e203631383233.roa (hash: 8yd6vMry85HJiPM7/L+kf1JkW05+VgR6cDI6fBW4j5Y=)
                          2: 3230312e3232322e32352e302f32342d3234203d3e203631383233.roa (hash: UH+oFoq2yann0hghXVWtajLFKBb7Ef5WZDDqQ2Pw1dY=)
                          3: 323830343a313964633a3a2f33322d3332203d3e203631383233.roa (hash: cyI9TnrAXG4EH1ifG0QJQ9pHFHDG0QDBoC7kzrFfLWo=)
                          4: 3230312e3232322e32362e302f32342d3234203d3e203631383233.roa (hash: IuE9qEXXl1d2+xJJVVo1437qrmnar46Ql035+T2MD9w=)
                          5: 3230312e3232322e32342e302f32322d3232203d3e203631383233.roa (hash: 98gQk7tfGUs9pRvDwbcZtGSi6xreh7ZTsgIuv3pcGUk=)
                          6: 090356FA0F721D9A2449A75F672A23DBF91DA79D.crl (hash: 547TMXLg8nUVyAd9UMITiTMaGfD1yA0uYU3R3ORrzsg=)
                          7: 3230312e3232322e32342e302f32342d3234203d3e203631383233.roa (hash: MFj2Y8vN35UbFz/c4cSx/WpIcJn650ZPq1l2J6Fv7LU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 04:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bd:20:82:06:64:66:d5:00:5b:84:c3:ab:37:88:a6:91:43:1a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
        Validity
            Not Before: Oct 10 03:10:23 2026 GMT
            Not After : Oct 11 04:36:23 2026 GMT
        Subject: CN=5ABC6203EEBF631F5352920487BF06330DFE501B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:80:5c:14:02:c7:90:d8:70:fd:2d:c5:af:
                    14:e9:d1:f9:bd:3c:30:87:c9:4d:e7:cf:b9:94:40:
                    5a:20:fa:54:2b:41:60:1d:c6:14:13:d2:22:d5:e1:
                    09:e7:1e:c8:02:08:b7:53:d8:b4:63:84:dc:82:ed:
                    56:8c:78:55:3f:fb:17:05:8a:8f:e8:17:d1:97:89:
                    b7:d4:0e:07:12:cd:cd:dd:1c:cb:2e:7b:6b:f7:30:
                    7d:cd:f4:ab:e9:67:e6:8f:73:d7:55:01:4c:2d:2c:
                    6c:cc:94:db:56:27:29:7c:09:82:d3:14:c5:42:1f:
                    0d:8e:e4:34:e6:8c:6b:c3:98:c5:0c:48:2f:a4:86:
                    8f:e8:65:c1:31:c4:41:e0:65:0b:ab:bf:a3:5b:85:
                    71:c2:38:ae:31:cb:39:23:75:21:2c:53:ab:62:9d:
                    b6:2b:34:c9:6c:d7:56:5c:86:a7:3d:fb:f9:21:cc:
                    5f:c8:e3:ae:07:d9:25:1e:3b:69:03:17:aa:fa:7d:
                    44:ce:90:cd:21:47:65:76:cc:ba:dd:b5:ac:67:aa:
                    9f:c7:8e:e4:58:ef:6c:26:17:99:f7:3e:25:15:2c:
                    f6:d2:c8:71:56:49:e1:8d:d2:97:4d:16:c2:b4:48:
                    d0:5e:ca:4d:df:12:91:24:04:7d:a4:44:24:c2:5d:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:62:03:EE:BF:63:1F:53:52:92:04:87:BF:06:33:0D:FE:50:1B
            X509v3 Authority Key Identifier:
                keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d8:95:41:0a:98:bf:16:98:1b:07:97:35:28:a7:24:59:f6:
         f9:3b:e3:ee:c3:2c:6e:7a:81:a5:f3:94:05:40:f0:4e:30:b6:
         99:52:d3:d4:b0:ee:98:2e:e3:6e:fe:c8:a3:39:52:b1:43:4f:
         51:fc:c6:90:11:c3:6e:18:03:0c:db:81:2d:e2:ec:56:65:8b:
         71:aa:d8:e5:4a:51:e8:94:27:b7:3f:85:b8:35:1c:ff:d5:ac:
         5d:98:8a:ff:50:22:3a:2b:34:80:7b:01:12:ee:53:8c:c1:bc:
         a0:3b:ca:6f:cb:70:84:05:0b:01:1b:ab:60:35:71:68:b9:23:
         a7:34:8a:9e:80:dd:80:00:7d:8b:24:02:fe:19:55:ab:3a:09:
         0d:3b:33:82:e5:30:a3:e9:be:b5:91:bb:52:f5:ca:64:34:47:
         49:f7:32:1c:56:30:87:ce:0a:87:e0:c4:f8:93:11:53:59:ba:
         af:66:9b:3a:ce:4a:3f:84:53:c4:b6:65:86:65:fd:5f:a8:04:
         9d:cb:51:b6:de:70:fb:3c:2a:c5:6e:c3:0f:a9:77:67:21:c1:
         e6:b6:a6:d5:33:81:18:09:49:94:86:bf:d7:d3:36:90:71:6e:
         a3:13:03:35:f1:94:15:f5:9d:12:31:9f:51:11:82:87:af:87:
         b1:49:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:05:12 2026 by rpki-client