Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
File:                     91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft (raw, json)
Hash identifier:          TOGI4ev2vvTQpTwqtLJj5FQhZWb1YFDVI50LPJIpqeg=
Subject key identifier:   5A:F6:95:68:E9:FF:50:75:96:DB:1C:FE:87:02:9D:54:6A:CA:F6:25
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       36361D343CE12F115939CE81BD02852D522F2D06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
Manifest number:          04CF
Signing time:             Tue 13 Oct 2026 18:26:32 +0000
Manifest this update:     Tue 13 Oct 2026 18:21:32 +0000
Manifest next update:     Wed 14 Oct 2026 20:09:32 +0000
Files and hashes:         1: 323830343a316439633a3a2f33322d3438203d3e20323634333831.roa (hash: Tjtb0yrKneu1g0oGHk0jUU1tNE1Xt2bqWlrqk5iCF9o=)
                          2: 3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa (hash: iibGNRH7OcErS01Z8opi3HtnXaeDth04jKs4hfjbzJk=)
                          3: 3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa (hash: G756CFtDIz+lsIWUfjw9nhdX7dfnpHBSSBJsRUWPMf4=)
                          4: 3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa (hash: GGyDSii6/+pO2rX90nnIJtjNr8fv0eemKt8Y5d/6M4M=)
                          5: 3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (hash: FTgIarqenyYsFIevmdjI0/xlBryzwd3uALHwH4vmTc0=)
                          6: 3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa (hash: 1Z4GgDP0MCVzcPLNIfwVTA3+dMA6idKTOthHvHis3VY=)
                          7: 91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl (hash: vAJARRa5YEq242H38dset40Y+xXrm27DMNNSDhsCuNQ=)
                          8: 3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (hash: 5A0Q+absa8vl2uFm9Nmgq1uHnxA2kTjMaqGCP0EfVco=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 20:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:36:1d:34:3c:e1:2f:11:59:39:ce:81:bd:02:85:2d:52:2f:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Oct 13 18:21:32 2026 GMT
            Not After : Oct 14 20:09:32 2026 GMT
        Subject: CN=5AF69568E9FF507596DB1CFE87029D546ACAF625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:1c:11:4b:f2:0b:3e:c0:c8:f8:1e:d0:26:
                    27:fe:30:86:da:f2:00:9d:f9:ea:0c:0e:c8:87:4d:
                    39:cd:66:64:42:11:6a:de:71:4b:4c:42:cc:b8:a1:
                    93:b7:13:59:1e:3d:ff:f1:ec:5b:77:c8:21:74:77:
                    d1:0b:4d:81:23:9e:28:96:53:90:dd:80:31:e4:ff:
                    36:05:f9:d8:29:a2:70:23:60:8f:08:7b:aa:02:69:
                    81:dc:c1:5f:59:b9:cc:b7:57:92:1c:54:f4:bf:64:
                    31:98:b0:b5:ba:86:b6:73:6e:39:06:a5:a8:db:00:
                    05:77:1c:60:9a:c2:31:e8:75:79:2e:c7:63:8a:07:
                    e8:71:2d:bb:84:f9:d6:2a:74:71:70:a3:4f:6f:83:
                    74:c7:45:fa:e0:ae:bd:2e:c1:00:98:d3:ad:86:b7:
                    d1:17:3a:90:a0:93:4b:d0:bb:66:9d:64:33:89:da:
                    fc:8f:b6:5b:0a:13:4f:7c:84:51:3d:35:12:68:c3:
                    29:de:db:b8:48:58:d4:74:49:9e:bc:e5:fe:87:be:
                    94:23:c3:7f:8a:b3:b6:e4:d8:16:6a:b1:1c:81:b6:
                    5e:f1:d8:c7:f9:1f:40:cd:0a:f1:1b:10:d3:13:e2:
                    46:78:ce:ab:32:35:9c:19:c2:e6:c6:18:f6:ae:97:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:95:68:E9:FF:50:75:96:DB:1C:FE:87:02:9D:54:6A:CA:F6:25
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:46:63:1d:cb:0b:e2:3d:1f:74:de:35:b2:67:2a:9e:db:
         42:27:09:11:6c:ae:01:01:11:29:9a:07:50:c0:ac:0d:92:42:
         38:9c:83:27:28:2a:eb:b0:a9:b3:1a:1e:ca:f3:b0:4a:d2:70:
         6e:05:5a:ca:eb:77:25:d0:57:46:d2:70:6f:67:d1:6b:c5:3d:
         bf:ca:a3:70:3e:bb:19:e7:37:c2:11:5f:38:d0:1c:e5:1b:8d:
         bd:18:34:3e:48:12:4f:ce:50:4c:aa:8b:bb:2d:fe:5d:89:bb:
         f7:bd:66:ee:63:a9:76:21:1e:5c:a7:8b:a4:36:63:f4:16:9e:
         3c:33:b7:47:92:fe:b5:40:99:57:20:8d:69:29:fd:7b:be:43:
         06:28:bd:17:4c:74:a4:9c:36:30:d2:d3:f1:e8:7b:b6:ac:c9:
         62:0a:74:b5:40:68:60:fa:42:6a:59:cd:3b:65:b1:ff:84:e5:
         e4:3f:24:31:45:e8:d6:93:cf:ef:5a:e9:16:54:c3:23:59:cb:
         b2:05:dc:84:07:1c:45:9b:b0:25:e6:ee:41:52:d2:8d:5e:d3:
         08:56:a3:b8:ce:8a:60:6d:45:40:dd:c9:9b:8b:e7:31:47:c3:
         2a:47:9f:91:d2:20:be:63:cc:a6:ed:a6:1e:76:0d:3b:1d:9b:
         b2:4f:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----