Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft
File:                     288267D3244089D185E376664BAE168B0EB28E94.mft (raw, json)
Hash identifier:          z6xWWPu6cmesufTDs5RHP3tOBWvl8h7EGtsiLS4FpnE=
Subject key identifier:   39:2A:4B:D0:C7:33:8A:D9:A1:0E:D0:98:3B:11:27:73:0F:71:A0:62
Authority key identifier: 28:82:67:D3:24:40:89:D1:85:E3:76:66:4B:AE:16:8B:0E:B2:8E:94
Certificate issuer:       /CN=288267D3244089D185E376664BAE168B0EB28E94
Certificate serial:       3654290CDE2CEBDC945CA2D5AD49B2F61FA75736
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft
Manifest number:          42
Signing time:             Tue 27 Oct 2026 14:01:41 +0000
Manifest this update:     Tue 27 Oct 2026 13:56:41 +0000
Manifest next update:     Wed 28 Oct 2026 15:46:41 +0000
Files and hashes:         1: 323830343a333231303a3a2f33372d3338203d3e20323632373739.roa (hash: 7W2dUMaCFK9dp6/J2WZIzPddITn9KOZ/FP1EIkGRTcg=)
                          2: 3138362e3232372e3234342e302f32322d3234203d3e20323632373739.roa (hash: ZARK5UDzO9OX3PxlIt+k8sxmfFK8cPbalPnXPWgSOy0=)
                          3: 3138362e3232372e3234302e302f32322d3232203d3e20323632373739.roa (hash: nWeScY1XXvy3jchns9NBVKMjVgoiOLBnggPgVqS040E=)
                          4: 3138362e3232372e3234382e302f32312d3234203d3e20323632373739.roa (hash: wGw7/ZEuG8tmFWdy1oT8ah8GVo1LS7JeYHaSyemd/dU=)
                          5: 323830343a333231303a313030303a3a2f33372d3337203d3e20323632373739.roa (hash: Os8mZ265nyt/ybylOf19lB/dnS1b7d6cMlO0Ktp9SzE=)
                          6: 288267D3244089D185E376664BAE168B0EB28E94.crl (hash: 3MLY2WdmGoNBP6675HeBcgzFCaLfWc9olJFCEyB7kU0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 15:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:54:29:0c:de:2c:eb:dc:94:5c:a2:d5:ad:49:b2:f6:1f:a7:57:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=288267D3244089D185E376664BAE168B0EB28E94
        Validity
            Not Before: Oct 27 13:56:41 2026 GMT
            Not After : Oct 28 15:46:41 2026 GMT
        Subject: CN=392A4BD0C7338AD9A10ED0983B1127730F71A062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:a4:1d:cb:f2:a2:da:b7:11:4a:15:83:a5:
                    ae:ee:cb:49:68:b6:19:d4:15:4c:5e:33:5c:f8:83:
                    18:c9:06:05:9b:a2:70:2f:41:fa:1c:1e:4e:68:71:
                    f6:d8:99:b6:43:3b:6e:0c:41:b0:c6:8f:3c:9a:e1:
                    bb:da:0e:bd:39:61:de:82:4c:6d:3a:e6:5d:c4:4e:
                    6b:cd:56:5b:03:ad:13:8b:61:ba:e0:0d:f0:2d:83:
                    57:18:22:e2:30:80:4e:5f:4b:96:49:84:c1:d9:20:
                    39:d2:e0:12:12:f0:5c:54:7f:8d:fa:b2:92:6b:81:
                    90:de:1b:bf:20:27:37:6a:21:0f:5b:ec:1a:d2:ee:
                    44:67:c1:06:86:8e:3a:ec:e1:83:7d:50:a1:29:26:
                    e5:2d:8b:47:8a:da:d7:14:f1:91:23:e0:d4:fb:38:
                    06:dc:00:d7:99:ba:cb:03:49:5b:18:b1:2f:4c:45:
                    9e:62:23:4a:77:d4:6f:97:9e:48:ef:42:2a:30:a8:
                    5c:2d:9c:31:a5:08:55:48:b8:6b:9e:aa:85:1b:d0:
                    22:99:08:45:0b:15:d4:3b:4c:ae:f3:e4:90:2b:3b:
                    c0:84:61:a8:61:0b:a3:f9:dd:32:24:cf:f3:bd:a0:
                    40:c1:b6:fc:57:12:2e:20:be:1e:63:d9:4c:1a:85:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2A:4B:D0:C7:33:8A:D9:A1:0E:D0:98:3B:11:27:73:0F:71:A0:62
            X509v3 Authority Key Identifier:
                keyid:28:82:67:D3:24:40:89:D1:85:E3:76:66:4B:AE:16:8B:0E:B2:8E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:de:19:9c:32:93:b0:fa:f5:08:29:9e:db:b8:04:83:97:
         61:66:25:43:0f:91:86:3b:20:99:be:b1:10:d3:c3:47:bf:26:
         76:11:06:d1:ec:a3:be:64:3d:bf:05:aa:a1:d7:b5:c9:ad:24:
         d4:b7:ed:98:3b:57:00:4c:57:75:57:1e:3c:b2:3d:77:8a:44:
         4c:f8:bf:0d:1a:ed:94:76:7a:63:fc:e4:33:50:6e:3b:5e:ff:
         e3:8d:4c:c2:7d:08:54:af:80:90:39:18:0b:36:e4:9a:9b:66:
         c9:1e:be:01:b6:ab:60:f4:4e:36:24:d0:4f:fd:8d:cc:a1:56:
         ad:79:df:1d:38:0b:2b:ef:59:5f:c9:7b:97:c1:89:2a:7e:c5:
         43:1e:20:62:26:35:37:70:50:e9:b0:87:9d:f5:f8:2d:3d:28:
         e1:45:5f:94:e6:ba:fb:50:73:cb:d4:01:45:76:af:68:d8:39:
         97:84:44:ce:e9:74:9d:b6:ae:7b:30:18:b5:4c:94:e7:7c:1e:
         55:2f:fc:eb:86:8f:66:e7:d5:e7:26:0c:51:ca:f7:a4:8a:3a:
         ec:e9:8f:0f:58:e8:63:fe:fa:2c:97:28:29:cb:c9:d3:1e:8c:
         21:d3:0e:cf:ab:3f:a8:4e:00:28:16:93:be:82:e5:d2:28:fd:
         b1:32:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:53:47 2026 by rpki-client