Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
File:                     13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft (raw, json)
Hash identifier:          QvRq1ed1Ac8/zwm4r0hKBgCOMD5xj+xZ/IFMFG1/Ed8=
Subject key identifier:   90:3E:84:C3:DA:D8:49:AA:CA:F5:84:5E:E5:48:3D:AA:00:50:47:A5
Authority key identifier: 13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92
Certificate issuer:       /CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
Certificate serial:       5FCD5AC41099A95E1B23128A46020B84CC02A8FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
Manifest number:          02F0
Signing time:             Thu 15 Oct 2026 03:32:07 +0000
Manifest this update:     Thu 15 Oct 2026 03:27:07 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:07 +0000
Files and hashes:         1: 323830343a323137633a3a2f33322d313238203d3e20323634353537.roa (hash: OOTZpKI8FQtbfmgU7oV9DJryt1kSiKrkgtA/SU0iGHk=)
                          2: 3133382e302e3136342e302f32322d3332203d3e20323634353537.roa (hash: Zu4CbibibHuiR6HArJ04hoy05s8Y2LXooWHOzkB9aGg=)
                          3: 13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl (hash: fYqZLxGeQkv60EJP20AkW1k3pz6KnE9eeQdwjKekAV4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl
                          rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cd:5a:c4:10:99:a9:5e:1b:23:12:8a:46:02:0b:84:cc:02:a8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13CD05239CCE57F514CF78D14C0E06AAAC9E9292
        Validity
            Not Before: Oct 15 03:27:07 2026 GMT
            Not After : Oct 16 06:01:07 2026 GMT
        Subject: CN=903E84C3DAD849AACAF5845EE5483DAA005047A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:25:21:df:1f:11:bc:04:81:34:4d:f0:50:
                    14:88:8d:fe:5a:80:e9:f3:a2:d2:91:1a:7b:95:66:
                    2e:71:6e:62:85:fa:ff:a8:81:98:bd:fc:a9:80:bc:
                    a4:bc:dc:5b:fb:7b:50:a4:2d:65:95:ef:52:23:4a:
                    62:fc:a5:cd:51:47:6d:37:d8:28:be:df:1e:13:08:
                    fb:c1:4f:b1:4c:5c:42:e3:85:f8:eb:2d:31:02:60:
                    a9:f8:25:4b:37:ba:02:17:67:b0:cc:19:4d:f2:db:
                    4c:57:9a:32:6a:a7:c9:97:72:96:5d:77:27:dd:46:
                    53:be:97:a4:ad:7d:6a:4a:fe:8a:7c:a5:af:e2:46:
                    8c:5e:76:74:62:a6:b9:15:85:4a:b1:e4:cc:0e:1f:
                    6f:20:13:15:6b:ab:38:d5:46:19:c3:1d:d0:54:47:
                    df:53:91:a7:32:d8:ea:b7:0e:07:e8:21:09:cf:a0:
                    21:b6:f0:05:c7:2f:0c:c2:c1:ad:41:34:20:1d:d2:
                    43:b3:f0:d8:11:48:47:23:7c:5e:83:53:fd:95:ed:
                    f3:2c:ac:b1:41:ce:0d:26:06:55:6d:d5:55:45:80:
                    48:e1:a4:61:c0:59:7e:9c:fa:b6:8b:50:35:b0:2d:
                    d3:94:d1:9f:aa:4d:db:2f:71:eb:ef:00:53:23:2a:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:84:C3:DA:D8:49:AA:CA:F5:84:5E:E5:48:3D:AA:00:50:47:A5
            X509v3 Authority Key Identifier:
                keyid:13:CD:05:23:9C:CE:57:F5:14:CF:78:D1:4C:0E:06:AA:AC:9E:92:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Hvc3XtLTETGYkfNUXzTPFhPzLAJ8uF7bJq4ocLbJCu/0/13CD05239CCE57F514CF78D14C0E06AAAC9E9292.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:f7:84:23:79:2b:b4:c4:f8:cd:2a:89:6e:ab:8d:9a:91:
         00:8f:9d:62:5b:a3:9b:83:8f:ea:a8:f8:c1:36:1a:77:82:5f:
         9e:d6:fa:c5:bb:20:94:a6:20:fe:94:9e:22:3d:86:85:e3:6d:
         17:98:ef:55:8f:1f:86:df:85:7d:3f:a8:ae:fc:88:09:ca:5d:
         33:21:28:b6:de:66:8b:b1:4a:58:d0:a9:41:4f:23:f0:24:b9:
         ff:33:9b:56:f9:56:54:9c:a9:d5:35:18:db:eb:a2:80:58:fe:
         eb:59:4f:bd:04:76:06:07:4a:3a:7f:d4:c5:5b:7d:1b:9d:39:
         69:7d:0b:9f:f7:6b:67:82:90:75:fb:3e:f7:3d:b0:b4:63:37:
         8a:f3:a8:b7:e6:69:ba:9c:c3:79:c3:d4:e2:79:77:ee:45:85:
         60:57:3e:fe:64:99:71:3c:ad:d8:a6:7c:4b:4e:15:16:81:0c:
         77:2b:3f:e7:0a:27:b0:6a:d4:1f:67:86:b4:bc:9a:e7:cf:17:
         12:71:c8:0c:a9:4a:88:79:16:9f:4e:0d:bb:7d:17:8f:f6:53:
         5b:0f:1b:4f:25:ca:b3:69:d9:7a:23:6d:78:3c:a2:0e:af:4c:
         7f:9d:af:f2:48:bf:c1:b7:54:c2:95:88:f3:a2:79:e2:2e:24:
         6e:9d:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----