Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
File:                     01E324E0856935E5A923E1963BBE18F5274878DD.mft (raw, json)
Hash identifier:          0uXa1+SLhVQB4PPziGiDCbiVhf4S4I7IPJqiKRymFmY=
Subject key identifier:   29:D7:F2:FB:FE:D9:5D:44:31:0C:06:C4:08:23:E4:4F:08:B4:A9:06
Authority key identifier: 01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD
Certificate issuer:       /CN=01E324E0856935E5A923E1963BBE18F5274878DD
Certificate serial:       170D3FDBDB86D547F740E0201910C70F3D2852B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
Manifest number:          02A6
Signing time:             Tue 27 Oct 2026 23:33:49 +0000
Manifest this update:     Tue 27 Oct 2026 23:28:49 +0000
Manifest next update:     Wed 28 Oct 2026 23:57:49 +0000
Files and hashes:         1: 323830343a393032343a3130303a3a2f34302d3430203d3e20323733353333.roa (hash: XjXYldsKRWcIJy4ZZnF+WJLGAu3mbm+sTiSQ5g5i3cQ=)
                          2: 34352e3136362e3232362e302f32332d3233203d3e20323733353333.roa (hash: O7GaMeox0lpt5HVybc46IDBAdsRcW+32YvYbckZJ738=)
                          3: 34352e3136362e3232362e302f32342d3234203d3e20323733353333.roa (hash: aezbv1Awxi0HWvZiCP+ViVULwGji2mivY7wKFdmNFUI=)
                          4: 323830343a393032343a3a2f33322d3332203d3e20323733353333.roa (hash: t7Gdn/BbblwKkAIEGQGUzYvrxo4C5CoDqOEo9ppLmPk=)
                          5: 34352e3136362e3232372e302f32342d3234203d3e20323733353333.roa (hash: voUWKZNBuNV7vmKkxjo+sma2yu2CydLPhfCSRS+ZgB4=)
                          6: 323830343a393032343a3a2f34302d3430203d3e20323733353333.roa (hash: x9AL8AOltntof8UgqTa63OgHDkxX67k75RvTGy+OfPQ=)
                          7: 01E324E0856935E5A923E1963BBE18F5274878DD.crl (hash: cB6fw82LnR0vPGHBDTCwgjBfns/UUtknqlOKBNHGbAg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl
                          rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 23:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0d:3f:db:db:86:d5:47:f7:40:e0:20:19:10:c7:0f:3d:28:52:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01E324E0856935E5A923E1963BBE18F5274878DD
        Validity
            Not Before: Oct 27 23:28:49 2026 GMT
            Not After : Oct 28 23:57:49 2026 GMT
        Subject: CN=29D7F2FBFED95D44310C06C40823E44F08B4A906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:3f:58:6d:c5:ea:82:d1:d3:22:17:b1:99:
                    58:13:72:ec:8c:51:a1:d2:23:12:f7:b1:06:2f:5c:
                    f3:cd:91:1e:d1:db:eb:11:b9:2b:d6:e9:33:07:ba:
                    c2:a9:59:b2:1a:0e:93:1d:40:7b:ac:cb:3e:d7:ed:
                    11:51:a2:e1:99:e7:4e:e3:b2:01:e4:ba:4c:f4:60:
                    6f:80:f9:b0:cb:89:7d:26:2a:2a:50:cc:7d:dc:fb:
                    fe:e7:8f:2c:c6:34:3d:bb:ed:1d:64:f7:e6:e4:00:
                    5a:24:b3:ff:fc:19:00:ac:03:bc:fd:b5:5b:c5:d9:
                    bb:95:5a:4e:7a:d6:14:b9:8f:21:7d:4c:00:ed:5a:
                    11:8a:b2:d4:bc:8e:4a:a2:15:f7:10:a9:e2:8c:ea:
                    60:13:90:05:0d:f3:32:56:ce:4f:bc:38:13:4a:54:
                    a9:4b:a9:cf:d1:f7:75:14:cd:b3:b3:b8:2a:25:10:
                    f8:52:88:de:18:f0:37:bd:f0:43:00:b9:39:ee:1c:
                    ce:94:42:44:11:7f:0c:80:57:a9:0f:d1:90:48:cb:
                    d6:b0:d6:7b:93:fe:9a:76:0b:ad:5d:68:7b:17:6c:
                    d5:2a:2a:c6:5b:81:53:a0:f8:1f:70:ed:40:37:88:
                    3c:a0:d8:7d:28:c9:d3:f8:6c:c9:96:cf:ef:bf:b4:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D7:F2:FB:FE:D9:5D:44:31:0C:06:C4:08:23:E4:4F:08:B4:A9:06
            X509v3 Authority Key Identifier:
                keyid:01:E3:24:E0:85:69:35:E5:A9:23:E1:96:3B:BE:18:F5:27:48:78:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01E324E0856935E5A923E1963BBE18F5274878DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4EnzVr3K4fda7htrHXxa3zCuJZhj6s4akdN2kjNEgTg/0/01E324E0856935E5A923E1963BBE18F5274878DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:ac:96:30:ac:4d:37:18:f9:b4:c2:c7:71:5a:3f:ba:f7:
         42:cc:73:18:2d:ed:98:83:9e:a2:b8:2f:ec:91:b9:82:ef:23:
         d1:00:dd:b5:7e:09:55:1a:78:46:42:20:2d:4c:8a:d7:5e:ff:
         38:54:c0:34:98:b8:c5:c7:98:ee:a7:7c:2e:dc:8d:9a:4b:5f:
         10:76:2c:cc:a2:a6:36:45:c2:d8:4c:c7:4f:56:29:d6:68:4f:
         3e:00:a7:61:02:5a:ba:3c:05:6a:0c:27:30:4d:bb:3c:65:3f:
         c5:51:d8:82:1d:43:b3:1a:9e:19:51:36:2a:57:d9:79:cf:86:
         ba:bb:eb:a2:5c:90:9b:07:39:0e:1e:83:28:ab:54:6d:fa:a3:
         c4:d2:fa:d5:6e:6c:1f:42:24:f9:f2:ad:34:20:44:7d:10:aa:
         09:9d:5a:43:8e:6c:f8:ea:46:64:a4:52:b1:eb:fd:b4:17:80:
         d6:83:3e:ff:b4:29:1f:b0:b4:ef:5a:06:8e:f7:7a:20:11:35:
         3b:c5:10:2a:21:dd:97:d8:25:6f:04:3b:23:21:51:63:2d:a8:
         c5:02:a9:25:44:e8:d2:6e:93:1f:75:7a:fc:2f:b8:20:68:0f:
         10:97:02:b0:88:17:2a:b2:ff:9b:88:a4:8b:67:0e:6b:09:ff:
         40:73:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----