Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft
File:                     2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft (raw, json)
Hash identifier:          6+9Z355Fkvla4F0z1QQe3AOe5c5gQBQQWKC177h5I2I=
Subject key identifier:   C0:01:C4:58:EA:99:91:46:22:1B:A7:4F:85:CB:16:B0:A1:B0:9A:A7
Authority key identifier: 2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E
Certificate issuer:       /CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E
Certificate serial:       631C657097F0682ADA56C657D352D9658DCE91F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft
Manifest number:          24
Signing time:             Sat 10 Oct 2026 01:16:23 +0000
Manifest this update:     Sat 10 Oct 2026 01:11:23 +0000
Manifest next update:     Sun 11 Oct 2026 01:39:23 +0000
Files and hashes:         1: 323830343a336330633a3a2f33322d3332203d3e20323636313837.roa (hash: uxgpx/cTEzjaxvYdPn/p3a4ISiXNx75wRFyo4YCac4s=)
                          2: 3136302e32302e39312e302f32342d3234203d3e20323636313837.roa (hash: 9wdPYP7ciCNpiOBQAWXdUiXtk243EGPORGWL4duqp+o=)
                          3: 3136302e32302e38382e302f32342d3234203d3e20323636313837.roa (hash: JR2Td+PL4lTGBVbyvARmTMXzkfoQuCOM+0PSYvZScSo=)
                          4: 3136302e32302e38392e302f32342d3234203d3e20323636313837.roa (hash: dNlm2b7zELdMfkJUpnTSSYJaeUllxlXxulhHQRjRSUI=)
                          5: 2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl (hash: /DiWLii3F9dRPm/d7DnmzxyWujJ0AKhtOfGDrV3yAEM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 01:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1c:65:70:97:f0:68:2a:da:56:c6:57:d3:52:d9:65:8d:ce:91:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E
        Validity
            Not Before: Oct 10 01:11:23 2026 GMT
            Not After : Oct 11 01:39:23 2026 GMT
        Subject: CN=C001C458EA999146221BA74F85CB16B0A1B09AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:bb:08:9a:c1:5f:c9:85:9f:61:93:a2:83:
                    2a:84:94:e8:6f:e7:ce:e9:2b:5c:9e:ff:6d:66:57:
                    b3:3c:75:bd:d5:be:d5:30:a1:4a:af:03:14:74:ee:
                    b3:c1:d7:63:8c:ff:8a:67:10:66:e1:b1:df:a4:45:
                    16:69:36:31:5f:67:76:0c:bc:af:da:aa:0c:d4:dc:
                    5d:16:0c:88:63:c4:02:69:ff:a5:36:b8:d3:97:0e:
                    05:ad:ea:7b:c0:9b:59:58:84:71:44:42:00:4e:c1:
                    e6:52:48:ef:72:1e:62:24:bf:35:84:15:56:19:ea:
                    8d:08:49:7b:a4:ab:2a:90:95:91:9b:a2:cd:95:43:
                    42:5e:d2:a2:27:cb:60:eb:a5:8c:a7:3b:03:16:a2:
                    ab:cf:7d:e0:be:a3:56:b5:ea:d9:39:83:70:47:ad:
                    54:7f:99:9e:13:71:34:20:36:fb:7d:ca:43:59:38:
                    09:0c:a5:97:aa:2d:4a:3b:32:7c:b4:83:03:8a:03:
                    78:0c:88:96:dd:6d:52:09:e7:14:ef:80:8e:13:9d:
                    8e:85:6e:35:21:ec:74:6b:14:74:59:37:04:4e:6a:
                    ea:f0:ae:82:3f:38:04:ce:27:08:e1:8d:b5:af:10:
                    5b:fc:68:6e:ec:ac:d1:80:60:6e:a8:e2:c8:8d:24:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:01:C4:58:EA:99:91:46:22:1B:A7:4F:85:CB:16:B0:A1:B0:9A:A7
            X509v3 Authority Key Identifier:
                keyid:2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:a2:74:bd:84:f0:25:b6:c4:a5:6b:fa:17:99:14:80:39:
         74:4e:15:4a:18:84:32:22:1b:04:f2:26:58:b2:6c:eb:d0:59:
         dd:3b:99:0c:6b:fc:1e:eb:37:48:08:05:83:cc:ee:03:0b:58:
         36:34:ea:9e:f8:7e:76:be:88:cf:4c:e6:c5:37:35:e6:bd:a0:
         1f:ba:93:20:e1:de:7b:31:66:d3:ff:c5:af:7c:de:d4:3d:17:
         22:ae:29:c7:59:1b:8d:66:9f:f9:fd:0b:f3:06:a2:ec:24:73:
         0b:e9:aa:6e:56:97:c9:af:a1:e8:97:5c:4d:3c:a1:36:4e:b4:
         65:3d:ad:23:4a:89:fd:81:3f:e2:0d:00:e9:de:49:85:18:c4:
         29:40:78:7b:53:6e:2e:57:14:93:1e:05:db:ba:3c:3c:80:5b:
         c4:fd:1e:6b:92:75:ae:e0:eb:da:1f:49:70:8e:b1:51:67:ee:
         d0:8c:78:68:4a:8e:c2:40:07:47:1b:f9:8c:ec:65:c6:93:5e:
         bc:6e:95:dc:eb:6f:a4:51:47:a7:2c:2d:09:bf:5f:c1:a4:6b:
         ee:dc:2c:8f:6b:45:e7:66:03:6f:82:60:e7:43:50:e8:eb:97:
         6a:84:f2:2d:b6:6e:fc:0b:be:5a:83:f2:c6:4d:6f:01:90:e9:
         42:cd:4a:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYxxlcJfwaCraVsZX01LZZY3OkfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQUMwMUM0QjdCQ0VFRDUwNTRFRjIxRjhGQUNDMzBD
ODBGRTk4RTAeFw0yNjEwMTAwMTExMjNaFw0yNjEwMTEwMTM5MjNaMDMxMTAvBgNV
BAMTKEMwMDFDNDU4RUE5OTkxNDYyMjFCQTc0Rjg1Q0IxNkIwQTFCMDlBQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3LsImsFfyYWfYZOigyqElOhv
587pK1ye/21mV7M8db3VvtUwoUqvAxR07rPB12OM/4pnEGbhsd+kRRZpNjFfZ3YM
vK/aqgzU3F0WDIhjxAJp/6U2uNOXDgWt6nvAm1lYhHFEQgBOweZSSO9yHmIkvzWE
FVYZ6o0ISXukqyqQlZGbos2VQ0Je0qIny2DrpYynOwMWoqvPfeC+o1a16tk5g3BH
rVR/mZ4TcTQgNvt9ykNZOAkMpZeqLUo7Mny0gwOKA3gMiJbdbVIJ5xTvgI4TnY6F
bjUh7HRrFHRZNwROaurwroI/OATOJwjhjbWvEFv8aG7srNGAYG6o4siNJK+rAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwAHEWOqZkUYiG6dPhcsWsKGwmqcwHwYDVR0j
BBgwFoAULRrAHEt7zu1QVO8h+PrMMMgP6Y4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05M
YkwvMC8yRDFBQzAxQzRCN0JDRUVENTA1NEVGMjFGOEZBQ0MzMEM4MEZFOThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUFDMDFDNEI3QkNFRUQ1
MDU0RUYyMUY4RkFDQzMwQzgwRkU5OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05MYkwvMC8y
RDFBQzAxQzRCN0JDRUVENTA1NEVGMjFGOEZBQ0MzMEM4MEZFOThFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmF6idL2E8CW2xKVr+heZFIA5dE4VShiEMiIbBPImWLJs69BZ3TuZDGv8Hus3
SAgFg8zuAwtYNjTqnvh+dr6Iz0zmxTc15r2gH7qTIOHeezFm0//Fr3ze1D0XIq4p
x1kbjWaf+f0L8wai7CRzC+mqblaXya+h6JdcTTyhNk60ZT2tI0qJ/YE/4g0A6d5J
hRjEKUB4e1NuLlcUkx4F27o8PIBbxP0ea5J1ruDr2h9JcI6xUWfu0Ix4aEqOwkAH
Rxv5jOxlxpNevG6V3OtvpFFHpywtCb9fwaRr7twsj2tF52YDb4Jg50NQ6OuXaoTy
LbZu/Au+WoPyxk1vAZDpQs1KDA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:32 2026 by rpki-client