Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
File:                     DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft (raw, json)
Hash identifier:          w+UFqOMK62Tv/8jYKWhtF+tfeQ2gOxhpCG4GIhmyGH0=
Subject key identifier:   81:46:BE:C7:E9:41:FE:F9:E9:44:52:7F:80:2E:6C:02:64:3A:48:D1
Authority key identifier: DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27
Certificate issuer:       /CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
Certificate serial:       442E486E5A5EE9C57C890AF39A4FFB5E85C99C4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
Manifest number:          3D
Signing time:             Sun 11 Oct 2026 15:11:28 +0000
Manifest this update:     Sun 11 Oct 2026 15:06:28 +0000
Manifest next update:     Mon 12 Oct 2026 16:17:28 +0000
Files and hashes:         1: 323830343a376463383a3a2f33322d313238203d3e20323731353832.roa (hash: NG3Cc2awhZ74kUhI7ET0NgW9jgRu3ClW53Mlgk0l3Gg=)
                          2: DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl (hash: sjU2FD1dRlEDokqF7sIyVumeKc8xOHH1Dc75g2+b+fY=)
                          3: 34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa (hash: js1ATq81mKsi1JMjqMQYhk2UNrpjJyneFGoy+4NpdMI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:48:6e:5a:5e:e9:c5:7c:89:0a:f3:9a:4f:fb:5e:85:c9:9c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
        Validity
            Not Before: Oct 11 15:06:28 2026 GMT
            Not After : Oct 12 16:17:28 2026 GMT
        Subject: CN=8146BEC7E941FEF9E944527F802E6C02643A48D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:03:2b:98:dd:dd:bc:ae:86:75:9f:f8:3c:bb:
                    9c:82:5f:e2:1e:db:eb:5b:1f:f2:3d:72:6d:7a:2a:
                    4b:a5:1f:36:c2:12:1e:7e:03:f7:ca:69:c7:ea:1f:
                    aa:de:11:03:8c:80:91:f5:45:ae:41:ea:2c:6d:03:
                    e8:3b:9b:b1:19:fd:ce:77:41:52:1a:e2:af:7c:6c:
                    71:30:0b:fe:4b:01:72:7c:f5:02:84:6d:05:41:f9:
                    27:a3:95:a9:c9:7a:a3:8f:08:b2:8d:ea:51:0d:62:
                    c1:b4:60:e5:37:0c:fa:cc:1d:7f:07:b3:f0:cf:6e:
                    e2:14:b5:e7:a9:6d:7c:8b:a1:3f:d7:d0:09:d8:e8:
                    e9:3a:b0:44:47:b1:eb:33:f7:d5:c2:82:3b:c4:60:
                    8e:c4:14:4e:ad:94:22:33:c4:6b:e4:94:8b:4d:66:
                    2f:d5:7e:c4:14:a1:d7:47:94:2f:a1:a7:f0:25:f9:
                    9a:c8:50:d8:3a:74:26:eb:8f:14:db:89:dd:36:40:
                    a7:a0:e3:fb:9e:e9:0f:d3:fa:26:14:a3:0e:7a:93:
                    89:1d:74:c8:d2:d6:22:a7:0e:1a:ea:2f:70:1f:97:
                    51:bd:c2:eb:91:1d:80:c2:fb:44:dc:fe:bf:d6:42:
                    7a:88:c0:9a:de:41:43:0e:15:2c:1b:8b:bd:df:6a:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:BE:C7:E9:41:FE:F9:E9:44:52:7F:80:2E:6C:02:64:3A:48:D1
            X509v3 Authority Key Identifier:
                keyid:DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f9:74:99:88:c3:65:ef:e7:0e:98:dc:ec:73:29:7b:21:4d:
         d0:23:64:f2:74:c2:dc:21:9b:34:ff:8c:7c:ee:2d:0f:16:b3:
         b1:f9:f4:26:9a:1b:82:a0:9b:0d:ab:a5:9d:bb:80:46:95:71:
         39:96:c9:87:06:5c:be:73:4e:06:f2:35:db:48:0a:55:f6:08:
         b8:eb:6c:32:15:ca:c3:fc:97:33:ce:70:14:0c:42:90:16:2d:
         e9:57:50:5f:de:70:cc:1e:54:04:0a:bc:d3:f9:fe:be:b4:44:
         29:a1:e5:fe:03:63:8d:aa:26:39:66:1e:ef:30:a0:8c:b8:9d:
         2d:35:7d:0a:ec:ed:12:46:96:85:80:db:da:f8:92:a4:35:e4:
         06:38:46:54:e5:cf:9b:d7:60:96:d8:0b:fc:90:ec:11:f5:93:
         05:72:8b:de:3e:38:82:d9:0e:85:1c:fa:fd:36:9a:c9:2b:08:
         a4:cd:11:c7:f2:8c:73:6a:b5:3e:6d:f6:16:64:7f:20:5a:8e:
         e2:63:34:ae:5b:7e:f8:2e:ff:30:36:df:5a:33:4d:33:36:a8:
         7e:6b:2b:95:a0:0a:fb:60:cf:42:17:7f:63:f8:a9:24:5c:35:
         c3:6d:31:cd:cb:ac:55:50:9a:1b:38:85:19:03:48:46:90:ff:
         c6:69:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:47:44 2026 by rpki-client