Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
File:                     68048497B89FF318156BA3D021C73EDE420ED5C8.mft (raw, json)
Hash identifier:          iFGuZF31a99+qC2UzkPNc0B2NVzTQReMBz4qrq8w1OU=
Subject key identifier:   38:DB:5F:F4:41:49:44:7A:7D:43:08:89:28:AC:6D:57:30:92:78:91
Authority key identifier: 68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8
Certificate issuer:       /CN=68048497B89FF318156BA3D021C73EDE420ED5C8
Certificate serial:       2DD2C9E8503ACEB9A2648C17518A51E1DD98CDB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
Manifest number:          04CB
Signing time:             Sun 11 Oct 2026 10:22:54 +0000
Manifest this update:     Sun 11 Oct 2026 10:17:54 +0000
Manifest next update:     Mon 12 Oct 2026 13:39:54 +0000
Files and hashes:         1: 34352e3136302e3136362e302f32342d3234203d3e20323638343132.roa (hash: /WQAiQw9WX90TnbU02CuVqRrzCxS8Mrfzi4DRmfyTqI=)
                          2: 323830343a353064303a3a2f33322d313238203d3e20323638343132.roa (hash: qwoTGO1n+2SF7mAWQOD8wBGW9idZI5GNjVtlXY67QVk=)
                          3: 34352e3136302e3136372e302f32342d3234203d3e20323638343132.roa (hash: zaUE+dBbqEytXlX/u1CRrW05GLYt5Jnsij/wqHI/1XU=)
                          4: 34352e3136302e3136342e302f32322d3232203d3e20323638343132.roa (hash: macc/bQdxqIFgzDSh/Q9eu2I8lmX4K0sFlyBw4h9f/E=)
                          5: 34352e3136302e3136352e302f32342d3234203d3e20323638343132.roa (hash: ksnTh12B/em1ls8I475st8G9xevAgKV8u567pG+26/M=)
                          6: 34352e3136302e3136342e302f32342d3234203d3e20323638343132.roa (hash: k4q98Cmei/gss2jmuW25s8F0B+kYllJSjoZOSwCD17E=)
                          7: 68048497B89FF318156BA3D021C73EDE420ED5C8.crl (hash: RO73qEX7gqXYmYG+ukRwZMYWAGTGZtLDQeU1hyd/jhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl
                          rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 13:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d2:c9:e8:50:3a:ce:b9:a2:64:8c:17:51:8a:51:e1:dd:98:cd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68048497B89FF318156BA3D021C73EDE420ED5C8
        Validity
            Not Before: Oct 11 10:17:54 2026 GMT
            Not After : Oct 12 13:39:54 2026 GMT
        Subject: CN=38DB5FF44149447A7D43088928AC6D5730927891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:9e:fe:79:25:76:f9:91:72:f8:bc:68:8e:
                    54:9b:26:81:3a:05:75:9c:58:7e:5e:55:35:30:e5:
                    ca:8b:b5:2f:2a:89:c3:2f:71:9c:b1:70:b9:23:b3:
                    42:ec:45:ac:1c:b5:63:27:73:d6:16:61:8d:1d:f5:
                    dd:4d:83:0b:64:73:8b:12:42:d6:d6:58:15:c1:8a:
                    08:55:38:55:05:7a:aa:e7:7c:52:9a:e9:bd:e8:f7:
                    5d:d9:26:fb:38:ad:91:83:60:b2:c7:15:31:21:95:
                    6f:06:dc:41:b5:5b:ff:32:ea:07:b7:dd:91:30:97:
                    23:6f:49:03:2c:2e:ad:1b:4d:c3:9b:59:36:36:af:
                    94:dd:16:3b:89:20:ac:d8:eb:0b:98:87:63:3b:f5:
                    71:fb:a4:57:c4:62:1f:23:c2:b9:1b:c9:59:f1:65:
                    be:e0:29:a4:fb:7a:40:a7:21:95:75:0f:f2:25:6e:
                    02:1a:8d:e6:7a:4d:3e:0b:53:4f:3c:c4:c7:63:2d:
                    ca:66:e3:75:10:16:30:6f:c8:c8:fc:f2:54:e1:80:
                    14:64:fa:77:74:54:8f:be:13:33:d1:3e:11:d1:ef:
                    e3:17:b9:cf:eb:fa:8a:72:d9:16:99:f6:2a:82:b7:
                    bc:ce:c8:02:e5:d7:6a:b3:dd:6b:a5:06:fd:e5:9c:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:5F:F4:41:49:44:7A:7D:43:08:89:28:AC:6D:57:30:92:78:91
            X509v3 Authority Key Identifier:
                keyid:68:04:84:97:B8:9F:F3:18:15:6B:A3:D0:21:C7:3E:DE:42:0E:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68048497B89FF318156BA3D021C73EDE420ED5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/1/68048497B89FF318156BA3D021C73EDE420ED5C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:41:00:1b:7c:94:78:0a:96:52:55:0b:1c:cf:d5:cb:20:
         9b:bb:72:40:91:15:8f:51:9d:45:23:f5:ed:d6:85:4d:40:f3:
         ac:90:3e:d2:39:47:86:76:64:72:0a:ea:33:81:39:da:71:ac:
         68:e2:26:3b:db:4d:0d:ed:b1:1b:66:8b:91:04:56:0d:df:df:
         cd:4a:55:bd:b9:7a:5a:93:ef:4a:5d:d9:92:87:a9:43:0d:ee:
         a3:80:5a:e4:20:d3:64:a0:e7:2b:c2:e0:23:9b:d2:53:01:b0:
         7e:2f:d9:1c:96:4c:1d:df:50:02:83:ea:cc:43:6a:9b:4b:bc:
         8f:0f:1d:92:42:8a:bd:13:f0:cc:13:df:2f:01:f9:e5:75:c8:
         60:b6:16:32:8d:92:9e:e1:ae:a6:02:3f:85:61:35:8a:91:61:
         fa:72:75:fb:78:22:ee:9d:3a:bb:74:96:90:a3:ed:37:c6:f9:
         79:57:c8:32:bc:92:86:65:9c:17:87:64:2c:b2:ce:1a:a3:b4:
         2c:43:76:ff:00:c8:36:50:03:40:37:54:d1:99:87:51:59:cb:
         c5:ad:fe:47:8d:59:0b:b5:38:de:98:3c:cc:36:5b:12:22:9b:
         37:18:8d:73:ec:84:d0:48:24:f4:99:c9:db:b8:cf:a2:11:5e:
         5d:5d:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:24:46 2026 by rpki-client