Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
File:                     66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft (raw, json)
Hash identifier:          sSpKEzo0MBolkxSTn3AGRT6NyG3DQtgvx2fxbOU/g/U=
Subject key identifier:   0F:0C:8A:DC:13:BB:FF:3C:DD:7E:72:F4:6F:71:C0:57:F6:B0:11:1E
Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A
Certificate issuer:       /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
Certificate serial:       4E8FEF9635D959DBB2ED8F8B7B787C906611EDE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
Manifest number:          02F9
Signing time:             Mon 19 Oct 2026 03:37:49 +0000
Manifest this update:     Mon 19 Oct 2026 03:32:49 +0000
Manifest next update:     Tue 20 Oct 2026 06:42:49 +0000
Files and hashes:         1: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl (hash: 2Yhdn2xnwyJn5/nmfSoTrgTTN0BJQTagTz4RcQpLJQY=)
                          2: 34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (hash: LT5c6jnVzotps881c0JYu4XM6nY0scEavk9ztd8JFL8=)
                          3: 34352e37312e3233372e302f32342d3234203d3e20323637363235.roa (hash: By+JN2UbBQEolCfzkV9Os+i9R26phRqh6G69Kc0k+dg=)
                          4: 34352e37312e3233382e302f32342d3234203d3e20323637363235.roa (hash: QRTKqbjxncElRjOqahAy3tYtR7nv9TLqE7uexiIN97c=)
                          5: 34352e37312e3233392e302f32342d3234203d3e20323637363235.roa (hash: epbm70oLbMWA9MUpZ3qsXdoMzCAiRyHOeDjmjHaJTh8=)
                          6: 323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (hash: paYwLoypIFKXy1lPUpQjU0kmii9owEkl44K65Uh4EX4=)
                          7: 34352e37312e3233362e302f32342d3234203d3e20323637363235.roa (hash: QC3BOEThK/A9mECawEiav2k5ee4Miiqx4Q7Cipnk8zc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl
                          rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 06:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8f:ef:96:35:d9:59:db:b2:ed:8f:8b:7b:78:7c:90:66:11:ed:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A
        Validity
            Not Before: Oct 19 03:32:49 2026 GMT
            Not After : Oct 20 06:42:49 2026 GMT
        Subject: CN=0F0C8ADC13BBFF3CDD7E72F46F71C057F6B0111E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:6e:a3:be:00:61:2f:cf:7c:1f:20:40:a3:
                    75:80:39:33:ef:c1:b0:7c:df:f4:11:09:94:77:b2:
                    e3:70:21:b2:84:b4:f3:be:e8:a6:71:68:2a:74:6d:
                    1a:28:8d:cc:5a:b0:4d:6b:c5:ec:09:9e:ba:3d:55:
                    83:77:c3:d5:3a:19:6c:3a:11:9c:71:45:7e:44:a4:
                    88:fb:b8:c7:2c:a5:e2:64:37:d7:93:f3:90:2c:ae:
                    7d:fe:c2:2c:19:12:aa:44:80:3a:d6:e9:3c:b7:2a:
                    35:6c:27:b0:e9:5c:38:cd:2e:64:71:58:05:af:ce:
                    ac:d5:91:c4:cf:95:26:b6:dc:c3:4a:a9:2e:0d:b5:
                    f6:fb:3a:6b:5d:16:9c:11:52:ae:19:e5:2c:38:5d:
                    88:40:31:4f:fc:97:f2:ac:ae:db:f8:13:8a:bb:20:
                    a3:56:4a:15:79:16:4c:85:df:b1:6a:a1:37:97:00:
                    6f:fb:f6:12:1e:bb:a2:87:0e:31:00:25:a6:57:af:
                    85:3c:05:59:d0:82:85:9e:8c:d1:56:f2:5b:d1:9b:
                    a9:d2:f6:7c:16:b9:4a:2e:56:35:2a:1f:67:34:74:
                    35:ff:1a:93:23:93:8c:d0:f2:af:af:60:fe:61:e8:
                    d5:3e:b9:72:1d:87:d2:ec:d8:f6:d3:d9:e4:1f:27:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0C:8A:DC:13:BB:FF:3C:DD:7E:72:F4:6F:71:C0:57:F6:B0:11:1E
            X509v3 Authority Key Identifier:
                keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:92:db:5d:ab:47:55:cb:56:71:df:37:e0:4d:cf:1d:cf:
         29:be:ed:0c:eb:e7:2e:d6:3e:c9:68:8b:c9:d2:f2:f7:ad:78:
         a1:6d:03:09:7e:e8:9c:c4:f2:23:3a:80:64:ff:7b:8e:49:68:
         c1:fe:41:bc:85:e7:14:12:34:c4:25:8a:5d:c6:dc:34:63:84:
         ef:85:a5:b0:52:28:92:aa:2c:d4:2d:af:1d:a8:e1:8b:45:9d:
         dd:80:fb:4d:c3:61:e4:98:b9:5f:37:04:aa:fc:5f:f3:b6:38:
         dd:18:be:a6:b9:05:60:c4:4e:d1:06:2a:8d:cd:b0:b6:c5:9b:
         19:41:e4:5e:73:1f:fb:d5:ce:59:06:18:5f:bd:9b:15:c0:13:
         79:6f:2f:eb:2e:00:e3:8a:b5:35:95:6c:70:5e:12:91:08:46:
         80:c9:ab:79:7c:f5:85:20:1a:88:6b:4d:9b:30:ae:08:9a:55:
         da:f5:2d:ed:e3:de:e1:6f:57:42:8e:c0:8d:dd:f9:90:14:70:
         49:f7:74:3a:a5:6c:d2:cc:60:96:96:fb:fb:15:71:90:ed:63:
         15:95:d1:2a:34:8e:59:52:f1:dd:74:1d:66:21:ac:11:99:9d:
         1d:cb:2c:25:a8:86:78:7b:05:32:aa:ad:2f:6c:0c:92:94:7f:
         cb:47:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:37:44 2026 by rpki-client