Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
File:                     7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft (raw, json)
Hash identifier:          izpiiLqsKHvs9WqQrvgUs+ApFtn5qsJ30POuxQngZ08=
Subject key identifier:   0C:9D:64:63:04:DE:23:F1:41:C9:D1:8C:D6:3F:9C:90:87:9E:05:9F
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       5F9674DBCDEBA0FEA0F441F71D80632D52A44A2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
Manifest number:          0213
Signing time:             Sat 10 Oct 2026 04:19:58 +0000
Manifest this update:     Sat 10 Oct 2026 04:14:58 +0000
Manifest next update:     Sun 11 Oct 2026 07:28:58 +0000
Files and hashes:         1: 34352e3233342e35302e302f32332d3233203d3e20323637333533.roa (hash: FsCzJxybPfdQPWArYrNHT0P5tqrFwp1cCxL1Hkcagjk=)
                          2: 323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (hash: GExuvXgHyJQtXdc/15RKsUMHaKqL4nW2H9Mj95B9fgI=)
                          3: 34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (hash: BDOU+8lQQPLovGDyFVF6D6LiaXe/TZZmDjUlP2QAbQY=)
                          4: 34352e3233342e34382e302f32342d3234203d3e20323637333533.roa (hash: HemdPtzlyzL85QTW69vxj2vTfWvK38oMVpAbl8beesE=)
                          5: 7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl (hash: Qgi9AgH7EBfiTlKUba+onMCI7l+0T10y2zPoOCbnImw=)
                          6: 34352e3233342e34392e302f32342d3234203d3e20323637333533.roa (hash: DaPXTYa/DgNVtmXWHp3ByJIPCisdYwrbRpsPHu2GE/c=)
                          7: 34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (hash: vlhtsos++asrkbcB4wZF5cq8u6HnVkdgCTs+kjE9eLE=)
                          8: 34352e3233342e34382e302f32322d3232203d3e20323637333533.roa (hash: LXySM1bLZsaFYBCWEjCq+9MVHLSypMXc5yudxj2ZSWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 07:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:96:74:db:cd:eb:a0:fe:a0:f4:41:f7:1d:80:63:2d:52:a4:4a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Oct 10 04:14:58 2026 GMT
            Not After : Oct 11 07:28:58 2026 GMT
        Subject: CN=0C9D646304DE23F141C9D18CD63F9C90879E059F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:68:d4:ac:06:cd:b5:dc:58:ac:ca:15:83:
                    6e:38:ae:42:e6:48:fb:e6:24:e2:89:92:59:3e:b8:
                    f1:a3:aa:c7:a5:fd:db:de:46:87:b5:d7:2d:fa:d7:
                    ec:87:ab:4f:3c:8e:1a:6b:2b:38:1c:bd:23:b5:81:
                    da:18:13:19:a9:65:f3:f2:e4:71:5a:d4:a4:ac:e0:
                    4c:71:c7:9a:43:78:f5:73:cc:e8:29:2d:22:72:e2:
                    ad:f4:6f:cf:3f:81:6c:90:e1:af:8b:bd:53:c9:81:
                    f9:4f:bc:13:01:81:13:49:20:1c:f2:63:1e:8e:e2:
                    50:93:de:f8:f2:54:a1:2e:28:33:a7:d6:4b:08:bd:
                    3e:64:0f:ce:a1:6a:57:89:55:13:c1:a5:cf:a7:32:
                    54:20:0d:36:12:c1:a9:d3:bc:c4:f2:5a:1a:c3:bc:
                    cb:d0:d5:57:9a:84:83:36:80:7f:5b:0b:c1:32:8a:
                    54:20:37:e7:3a:c0:eb:3e:37:cc:51:27:6e:9c:5c:
                    3f:f1:2b:da:22:09:8a:37:08:e6:59:47:a1:0f:0a:
                    bc:ed:2b:e0:74:7b:b9:5a:1b:95:6e:0e:25:d7:98:
                    99:de:ce:82:8d:77:13:97:56:55:1b:00:40:8b:f7:
                    f2:d7:1d:4e:43:0a:0c:dc:12:0b:d2:04:53:fc:2b:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9D:64:63:04:DE:23:F1:41:C9:D1:8C:D6:3F:9C:90:87:9E:05:9F
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:75:47:f6:e5:06:ac:52:ff:5e:c1:c9:e1:03:ae:65:13:
         c6:02:c4:0e:3c:15:c2:ac:89:1b:15:55:f9:18:63:61:82:e0:
         61:86:fa:4a:d3:6d:d0:79:2e:42:e2:bb:7d:0b:5e:4a:08:c1:
         7b:3d:89:3c:cd:b7:ab:86:e6:9c:86:30:2a:b0:e8:3b:68:08:
         e7:88:79:f1:2a:a1:dc:3e:82:b1:4a:a7:0f:08:96:bd:1e:52:
         c8:2e:55:53:25:62:e9:c4:83:ab:d3:bf:9f:29:8a:53:55:69:
         52:1b:8e:97:2c:89:83:24:d2:2d:f9:c3:f9:29:0d:c4:9e:03:
         64:3e:a3:ba:15:cb:90:f4:c3:4f:e9:c0:73:7e:92:d3:a3:4e:
         6d:07:88:a5:b7:0d:4e:d5:19:c7:5d:09:0f:9d:45:9c:58:50:
         20:24:f1:76:74:5f:18:cb:fc:49:15:59:c2:2a:7d:59:e4:b3:
         cd:e8:86:0f:cd:1f:a9:ad:bf:cb:79:8f:06:8a:35:9a:46:08:
         d2:5d:46:e3:ce:06:24:84:d0:2a:c4:4f:84:8d:13:48:a7:b1:
         6f:4d:c1:0d:c4:7f:7e:39:31:c5:9b:e5:dc:a6:6c:ac:b9:db:
         64:ef:0b:c0:c1:23:23:80:43:03:9f:ad:dd:49:83:1c:4d:55:
         8a:86:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:58:15 2026 by rpki-client