Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
File:                     8A590D260B5BE3ED54768E297080736709CACE0D.mft (raw, json)
Hash identifier:          xA00JPgpG8idIbR26YAlYeNKf0ciHQcrULagWLyHyXg=
Subject key identifier:   40:FC:C0:D9:50:96:94:53:45:84:AE:9B:8B:7F:A0:20:24:03:D9:CA
Authority key identifier: 8A:59:0D:26:0B:5B:E3:ED:54:76:8E:29:70:80:73:67:09:CA:CE:0D
Certificate issuer:       /CN=8A590D260B5BE3ED54768E297080736709CACE0D
Certificate serial:       2536BB967087C81DB7570D81BB0136CEB4CB583E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
Manifest number:          0F
Signing time:             Sat 17 Oct 2026 11:50:24 +0000
Manifest this update:     Sat 17 Oct 2026 11:45:24 +0000
Manifest next update:     Sun 18 Oct 2026 15:44:24 +0000
Files and hashes:         1: 8A590D260B5BE3ED54768E297080736709CACE0D.crl (hash: qVYBFeXDzR0x6E4Diipn/FhqRd8aYAEsY0y0Y3EXLNY=)
                          2: 323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (hash: jojjTOjsmuCOIqca+26c8DwgYFHeCe3yCU5zN1zjC/k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.crl
                          rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 15:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:36:bb:96:70:87:c8:1d:b7:57:0d:81:bb:01:36:ce:b4:cb:58:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A590D260B5BE3ED54768E297080736709CACE0D
        Validity
            Not Before: Oct 17 11:45:24 2026 GMT
            Not After : Oct 18 15:44:24 2026 GMT
        Subject: CN=40FCC0D9509694534584AE9B8B7FA0202403D9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:40:46:1d:2e:c0:13:f9:af:02:70:72:5e:
                    0a:ea:51:91:ca:68:37:78:cd:0f:53:7d:f0:31:05:
                    18:39:fa:f2:36:4b:2a:ec:9a:ef:0c:ba:67:3e:9a:
                    a5:08:a4:fd:9e:8c:a6:4f:32:39:7b:c5:78:2a:e5:
                    7e:3c:6b:e8:a2:06:ae:8a:28:03:17:5c:57:0f:33:
                    94:15:ad:c2:92:f7:07:68:77:b1:25:e4:e0:95:1c:
                    54:04:cc:b6:fc:f9:bb:d0:79:29:65:68:df:64:93:
                    8b:7f:15:0f:9d:e6:63:e2:53:0d:d5:76:ec:51:de:
                    fd:51:36:ec:96:a2:31:b0:6b:22:be:77:31:c8:bb:
                    76:15:6a:86:4e:28:42:94:3c:97:41:f1:cf:fb:a0:
                    47:d9:a7:16:62:cb:2a:8c:29:96:a5:3a:b5:7c:02:
                    d4:42:d2:46:25:f1:65:d2:81:33:cf:bc:3a:d7:5b:
                    57:9f:94:52:b1:41:9b:ae:ad:63:35:21:e4:9a:e7:
                    0a:fc:e4:4f:4e:30:90:d3:25:91:71:cf:00:af:dd:
                    dd:ef:f3:93:8f:2e:85:23:71:e6:fd:cc:53:36:aa:
                    aa:85:ab:27:ab:61:eb:bf:72:11:49:88:55:cc:14:
                    45:43:95:00:3b:3c:9a:fc:7c:ab:1f:24:b5:dd:e9:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FC:C0:D9:50:96:94:53:45:84:AE:9B:8B:7F:A0:20:24:03:D9:CA
            X509v3 Authority Key Identifier:
                keyid:8A:59:0D:26:0B:5B:E3:ED:54:76:8E:29:70:80:73:67:09:CA:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:dc:cd:b9:7f:e1:6e:94:78:a0:72:26:a4:ec:45:63:67:
         e4:30:55:7b:32:00:ce:24:10:f4:bc:d6:b4:fb:cc:b1:13:ed:
         80:d5:1a:da:26:8d:a6:39:21:2c:fe:e0:31:a3:8b:bc:84:e2:
         a0:55:0f:bf:30:4f:39:75:a8:9e:c7:a0:52:7f:91:45:73:5f:
         0e:55:8f:7c:10:40:02:6c:2f:09:0e:a9:cb:07:45:e5:e8:06:
         cc:dc:48:4b:21:81:b1:69:a9:78:d2:59:4f:18:45:da:ca:15:
         31:ae:45:98:c7:1e:9b:45:4c:83:96:c4:80:d7:d6:4a:d6:1f:
         81:b9:1d:11:4e:dc:88:7f:59:3d:16:56:a3:86:07:5a:11:77:
         3e:78:2f:72:aa:29:61:b9:6c:13:09:ee:56:48:ef:3c:b1:4d:
         41:95:a6:37:c2:61:29:bf:37:c5:e9:47:d8:57:5b:7b:3b:96:
         5a:03:3d:99:cc:59:4d:7d:1e:36:e1:5f:3b:3e:7c:92:6a:7c:
         1e:82:40:48:e3:18:f7:90:9d:50:31:4a:ab:e5:aa:f0:89:29:
         20:67:51:82:42:ac:8e:dd:73:ba:3b:c0:b3:b8:5a:5a:ed:47:
         f9:ad:5a:8c:6b:bd:51:0b:43:70:dd:71:d4:e2:52:24:94:3d:
         9c:51:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----