Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft
File:                     8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft (raw, json)
Hash identifier:          3F9zg2azr/AQhsThTLmJs6M6Uc1sUo4AqmW89dFeo4U=
Subject key identifier:   1E:9B:FD:30:53:2F:82:75:DE:1A:97:7F:B8:A9:1D:BC:6B:F1:8E:45
Authority key identifier: 8E:49:2D:53:01:F4:8C:89:C5:71:A5:B4:B8:10:A0:CC:7D:E8:2C:AB
Certificate issuer:       /CN=8E492D5301F48C89C571A5B4B810A0CC7DE82CAB
Certificate serial:       40412D5D52364A680CC823254250B2106F65F918
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft
Manifest number:          1F
Signing time:             Sat 10 Oct 2026 10:48:46 +0000
Manifest this update:     Sat 10 Oct 2026 10:43:46 +0000
Manifest next update:     Sun 11 Oct 2026 11:04:46 +0000
Files and hashes:         1: 34352e3233352e32322e302f32332d3233203d3e20323637333938.roa (hash: EHXErc3JM9U7Q/+xY6MFuV2y7nfVDEnbIRDRJedksIs=)
                          2: 323830343a346365303a3a2f33332d3333203d3e20323637333938.roa (hash: NdkE/vYIUYVCpzpFnKxOQVjOG/r8eRNzdF3awq8aUFA=)
                          3: 323830343a346365303a383030303a3a2f33332d3333203d3e20323637333938.roa (hash: //MkmqsV5KfemgA1RPZ31Ni5LFq3OK3jmh4MMej/s5A=)
                          4: 34352e3233352e32302e302f32322d3232203d3e20323637333938.roa (hash: cww5V+Qlhf9ErvwKyExOvD1njyxWETcHGRQKRmVAKa8=)
                          5: 34352e3233352e32302e302f32332d3233203d3e20323637333938.roa (hash: YRD6D96wi7agRi1akJeamj1eRJLIXLWXDkbsi8wLl/E=)
                          6: 323830343a346365303a3a2f33322d3332203d3e20323637333938.roa (hash: ZOwjHk/W/7OOzLefz2ZPflRzaEYDWyNsKsSmxRcu9rg=)
                          7: 8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl (hash: sjG/Jh5tNoZLeRLqxKCiKWTWTuYPFmtTIrSunwvK+0w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl
                          rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 11:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:41:2d:5d:52:36:4a:68:0c:c8:23:25:42:50:b2:10:6f:65:f9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E492D5301F48C89C571A5B4B810A0CC7DE82CAB
        Validity
            Not Before: Oct 10 10:43:46 2026 GMT
            Not After : Oct 11 11:04:46 2026 GMT
        Subject: CN=1E9BFD30532F8275DE1A977FB8A91DBC6BF18E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:e2:9c:c3:cd:6f:8a:6e:50:a9:14:da:12:
                    32:6b:d2:04:f8:d1:b7:5e:ae:49:01:a1:ef:5f:62:
                    4e:bd:c8:a3:92:87:9d:f2:ce:e7:ab:c3:2e:c5:00:
                    25:a2:ee:eb:b4:aa:51:02:e1:4c:f3:d4:3f:d0:60:
                    7e:96:01:3f:87:e6:8b:ae:50:dd:9f:93:5a:c9:2f:
                    a4:49:99:2e:7e:63:4d:4d:ab:7a:42:c8:df:73:04:
                    b4:aa:f4:88:9f:16:15:ef:96:09:3a:45:b0:72:72:
                    b5:0f:8b:fb:7a:8b:b0:12:92:f5:c2:1e:61:2f:3c:
                    2f:a2:02:40:98:44:1b:50:4b:0e:05:0c:18:04:51:
                    80:8f:db:8f:99:88:d0:0b:da:69:76:e7:19:28:f3:
                    24:7d:fb:dc:d1:3a:d7:fc:06:88:1b:2c:f2:fa:79:
                    74:56:cd:62:df:fd:fe:6f:cb:96:9b:25:cb:a7:8d:
                    62:91:a7:d5:59:2b:32:09:d4:47:69:7e:f7:58:ea:
                    c3:66:8f:ba:0c:2e:89:5f:85:9e:fb:33:5e:d0:d3:
                    5f:2a:86:b5:e3:77:d8:b7:c3:c1:24:1e:67:0a:5d:
                    7c:07:ad:b8:af:66:25:82:df:e5:02:31:cd:e8:50:
                    a2:66:e6:4a:97:37:9c:81:7a:cb:5c:73:be:33:eb:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:FD:30:53:2F:82:75:DE:1A:97:7F:B8:A9:1D:BC:6B:F1:8E:45
            X509v3 Authority Key Identifier:
                keyid:8E:49:2D:53:01:F4:8C:89:C5:71:A5:B4:B8:10:A0:CC:7D:E8:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rLAq9RNsusLEPS6AbqWmUZQR3BPgVvQmThFpcPko9Xe/0/8E492D5301F48C89C571A5B4B810A0CC7DE82CAB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:03:49:44:e0:4d:f1:c9:15:57:ca:60:42:3d:4e:e8:3c:
         66:e8:94:fa:81:ad:20:1c:ff:cb:ac:8b:d8:9d:20:a8:26:c6:
         a8:61:50:a9:03:93:e8:de:02:76:ac:e0:9d:4d:81:08:73:18:
         81:dd:08:9c:f5:00:da:90:ea:32:36:96:57:f8:e7:e6:be:cc:
         dd:8c:c4:84:da:9c:d4:f0:bb:68:c8:82:2f:34:72:68:5d:b3:
         04:8a:24:4d:38:ef:73:d3:27:89:7d:2a:0e:53:88:9c:3c:4a:
         f1:7a:cf:48:c1:d1:72:4e:a5:44:12:1d:d4:64:dc:3b:31:f7:
         0b:44:ef:f2:84:fb:bf:71:69:4d:a9:f5:d7:60:7a:12:00:16:
         fc:bc:cb:c8:ee:4a:f1:c4:79:b5:36:32:ba:69:ae:b9:26:42:
         91:6d:00:14:85:02:15:98:67:2e:ce:ec:db:36:84:83:6e:a3:
         e3:14:47:32:06:66:d0:d8:60:44:9c:92:80:50:e6:55:70:79:
         a4:2c:00:7c:ed:6f:a4:04:c1:58:01:0c:eb:07:53:39:26:e7:
         df:74:67:ee:cf:08:43:33:6a:87:e7:b6:ae:35:0e:19:75:88:
         4e:5f:25:91:57:7f:1d:38:ce:3d:1d:59:f9:38:5b:53:73:b5:
         de:43:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:29:52 2026 by rpki-client