Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
File:                     F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft (raw, json)
Hash identifier:          xYChfAnsIRN7qsgqubD6DgAVkSfEh0B/7KmJy9rAZQ8=
Subject key identifier:   23:0A:BE:2E:3B:91:57:58:00:6C:BA:44:26:47:B2:BE:A7:79:2A:EE
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       4140B4704F7BA50BB23115A9116E3FA639ECEC2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
Manifest number:          04C8
Signing time:             Thu 08 Oct 2026 20:50:00 +0000
Manifest this update:     Thu 08 Oct 2026 20:45:00 +0000
Manifest next update:     Fri 09 Oct 2026 23:14:00 +0000
Files and hashes:         1: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (hash: IxMrlJRkC8v2eylM6QsE0ye8sdZaJsWBQVuLVfRChqI=)
                          2: 34352e3233382e34342e302f32342d3234203d3e20323638333132.roa (hash: p8H/GRkW5V1qWf2jewXlHEMjzNIQZUgqEqSh46nQha8=)
                          3: F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl (hash: ZqHOff3T4S3DmBxQrh3yCsKmPrNUyYRMvxBXrdhWYQo=)
                          4: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (hash: qlvvK7Eq5/lWUhPKseppGgxaush80fH+JFg/2kEwrkU=)
                          5: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (hash: A75zmI/ex04b104tCPbJGkdoEO9oc+eRvHmtvkt/s1s=)
                          6: 323830343a346633383a3a2f33322d3332203d3e20323638333132.roa (hash: T0Qf0he0SYVvTvjV370TqIwbc6SDf9zX4gvBac0AK9s=)
                          7: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (hash: PU0K7/XMSSbezDxadQezP8Hn/SQTmyf6LQrHDh8Y72A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 22:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:40:b4:70:4f:7b:a5:0b:b2:31:15:a9:11:6e:3f:a6:39:ec:ec:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Oct  8 20:45:00 2026 GMT
            Not After : Oct  9 23:14:00 2026 GMT
        Subject: CN=230ABE2E3B915758006CBA442647B2BEA7792AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:26:33:23:dd:b4:f0:ca:02:82:53:3f:56:
                    ca:98:34:ec:c5:4f:f9:c0:67:5a:99:30:8e:58:ce:
                    9c:5d:0a:d7:36:25:d3:91:30:d7:37:ba:d6:25:ff:
                    fa:5b:8b:94:e5:4a:60:49:3b:ce:9a:cb:52:76:25:
                    1a:97:32:a9:78:06:0e:44:50:e9:ae:54:ba:22:41:
                    1b:63:96:da:56:d3:5c:33:39:d1:18:63:ce:20:76:
                    f4:21:e4:ab:45:ac:aa:30:c4:63:bc:57:d6:53:e9:
                    6a:1a:8e:44:64:9f:e8:76:87:34:bf:27:68:4e:63:
                    86:8a:d7:c7:0e:e6:a6:06:b1:13:8c:eb:85:aa:6c:
                    3e:9c:b3:4c:bc:17:a7:88:97:28:cf:ff:16:2f:03:
                    ba:f9:d8:f6:f8:f9:ca:a1:eb:21:6c:2f:f1:34:ab:
                    d1:7b:cd:e8:00:15:29:d3:54:88:27:6e:da:d4:1d:
                    d9:fd:c3:ac:f7:6a:58:68:45:c7:c0:cb:2d:5e:0a:
                    83:56:a6:f5:98:da:01:91:ac:7b:f5:cd:01:c3:f4:
                    22:50:f1:c2:c4:c3:6c:fa:71:f5:48:75:19:98:9e:
                    4b:76:41:68:49:1b:77:16:05:ff:9c:13:66:82:be:
                    d2:ab:56:75:79:1e:3f:12:c5:70:45:3d:92:d0:85:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0A:BE:2E:3B:91:57:58:00:6C:BA:44:26:47:B2:BE:A7:79:2A:EE
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:fe:69:dc:75:6a:b6:b6:41:8f:42:75:dd:0c:5e:95:04:
         28:06:ec:fe:1d:a1:f5:2f:6c:72:8b:84:b8:1c:3a:e9:fd:b3:
         1d:2e:ca:4f:f5:a2:a0:fa:35:6d:c2:7c:78:71:84:29:52:06:
         ca:61:9c:31:23:95:66:7f:67:c9:d7:c1:fe:8a:eb:6e:b0:80:
         92:eb:5f:33:fb:ef:78:86:b0:3c:da:39:24:44:c7:6f:5f:01:
         81:a2:8e:99:02:c5:ee:a7:db:a1:8b:62:8a:d9:c8:1d:2a:f1:
         03:e5:c8:98:31:30:08:16:74:9d:59:13:36:45:8b:e1:fe:d6:
         88:d8:b6:87:fb:b9:1e:3c:4f:ff:13:76:e9:1a:32:74:f8:8f:
         2d:8e:71:64:0e:ee:48:45:d7:df:0d:42:d9:f9:2b:a1:99:60:
         b7:82:b0:c6:84:e5:63:a0:1b:ab:8e:27:d4:98:f2:e0:37:0b:
         00:97:cc:a0:83:fd:56:78:a2:c2:07:c7:50:2a:a5:dc:59:a2:
         83:ca:bf:bb:71:d9:28:92:c6:d1:80:d1:2b:cd:af:1b:aa:56:
         b3:dc:ab:ca:2d:81:56:4d:87:b0:47:9a:61:34:9e:2c:82:32:
         25:5f:9e:47:9d:44:24:5d:37:f0:a4:2b:f8:cf:65:f3:df:26:
         c0:d8:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----