Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
File:                     9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json)
Hash identifier:          ZYAQyd1EZfULCT4uF1x5Pt5nQYmqCtLWAtOHbV3N5fE=
Subject key identifier:   DE:13:41:64:D6:0B:E5:7C:CC:76:DE:E6:8C:9A:0B:76:82:64:8D:E4
Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1
Certificate issuer:       /CN=9A8CDCA9443D140D02860AA0070928656A172CE1
Certificate serial:       709EC2A521C98FEC0022244A9EDC9868879BFB75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
Manifest number:          04E2
Signing time:             Fri 30 Oct 2026 02:52:05 +0000
Manifest this update:     Fri 30 Oct 2026 02:47:05 +0000
Manifest next update:     Sat 31 Oct 2026 02:54:05 +0000
Files and hashes:         1: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: BMHX+1+NGBzIiFYfB+rioYYbYvCXPqn4RJAYIjRAYoc=)
                          2: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: sR6YJGe08L+glJF639g017bb7dsjDyjPuC5rBsOOOSA=)
                          3: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: aeSl6IsLfGkBfaB/iNcn3uKPaA6fSgyvAQa4dgJoqqs=)
                          4: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: ZQOJTRVfOPr0X1FcCrWFyhzRVfTuLoy1DsPF2IoO7/I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl
                          rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 02:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9e:c2:a5:21:c9:8f:ec:00:22:24:4a:9e:dc:98:68:87:9b:fb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1
        Validity
            Not Before: Oct 30 02:47:05 2026 GMT
            Not After : Oct 31 02:54:05 2026 GMT
        Subject: CN=DE134164D60BE57CCC76DEE68C9A0B7682648DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:8d:d4:dc:5e:69:d5:e2:9f:26:04:6e:5d:
                    df:1c:bc:2b:6a:31:ef:76:82:eb:0b:bb:12:b8:c2:
                    12:7d:90:b2:e4:0a:d6:4b:12:6d:28:de:00:bb:60:
                    82:1b:73:e2:67:5a:d8:48:e5:71:e7:67:06:98:c3:
                    7f:26:1e:ef:0a:d6:00:65:8e:74:7d:e6:26:c4:ee:
                    7d:dd:cf:27:10:46:18:e5:8a:a9:d6:c6:56:db:30:
                    0e:ec:70:45:74:62:0d:7b:78:bf:34:b6:eb:61:1c:
                    8f:b7:0e:1d:de:b5:fb:a0:01:d1:b2:cb:ac:cc:87:
                    be:21:56:64:ae:d7:79:78:ab:de:0b:0b:35:9c:f8:
                    61:b4:bd:17:df:4a:ed:64:12:38:bd:b9:63:1a:c3:
                    a9:56:d8:da:74:a0:d9:86:4c:e4:fb:45:24:de:47:
                    f5:b3:a6:24:e7:45:e1:2a:0a:67:fb:e5:7f:ce:78:
                    0b:24:fa:7b:8b:88:f1:14:23:2b:53:77:2e:eb:4e:
                    12:08:fa:1b:bc:a0:9d:9f:24:6f:ee:df:d0:5c:1e:
                    00:0d:bf:4f:0a:6e:5c:85:ef:50:21:33:fc:3c:42:
                    e7:d7:8e:94:61:19:84:f6:49:d6:c0:81:0d:ef:9c:
                    d4:5f:75:f7:22:cd:85:00:b5:88:86:8b:4b:0f:1c:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:41:64:D6:0B:E5:7C:CC:76:DE:E6:8C:9A:0B:76:82:64:8D:E4
            X509v3 Authority Key Identifier:
                keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:15:61:9a:ae:4d:9d:a9:0a:38:10:90:b2:40:6e:0d:71:e3:
         f9:77:65:0c:69:d8:4c:d1:93:50:d3:53:dc:7d:c7:32:db:ca:
         e3:51:5e:b8:95:c7:3f:4e:a6:8b:f3:75:51:c5:91:49:7e:04:
         f6:02:0e:2e:7f:91:48:52:3c:b8:44:09:b2:cc:3a:e0:87:55:
         ad:9a:55:41:1d:b6:2a:dc:8e:68:37:cb:a7:b4:e3:90:92:6f:
         f5:ca:4c:1d:f9:26:a5:25:2a:0f:f5:77:18:15:65:4e:44:9d:
         35:c3:02:22:8b:44:52:d3:8c:3e:d8:e1:dd:21:7f:45:7b:ee:
         8b:5a:6b:c0:0c:7e:5f:b8:95:5d:e0:46:c5:ef:30:14:ed:c9:
         01:02:b9:9f:8b:a3:90:1a:02:81:67:b6:8f:b3:e6:9e:2c:4a:
         c5:5c:e3:4a:d4:98:b9:3a:0d:67:c1:d6:3b:5e:2b:86:a5:0d:
         df:24:59:4f:d6:79:df:fa:73:29:43:4e:95:c9:a1:c5:64:7e:
         71:c6:a3:5c:20:b1:0b:30:bc:bf:08:97:37:23:40:2c:d6:69:
         98:34:e1:26:d1:e4:af:f0:df:59:50:37:56:08:a8:a9:9c:2d:
         6c:16:e3:d3:1f:e9:c0:e4:03:3f:00:94:9b:fc:82:a3:f8:a1:
         0f:ae:b8:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcJ7CpSHJj+wAIiRKntyYaIeb+3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2
QTE3MkNFMTAeFw0yNjEwMzAwMjQ3MDVaFw0yNjEwMzEwMjU0MDVaMDMxMTAvBgNV
BAMTKERFMTM0MTY0RDYwQkU1N0NDQzc2REVFNjhDOUEwQjc2ODI2NDhERTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcY3U3F5p1eKfJgRuXd8cvCtq
Me92gusLuxK4whJ9kLLkCtZLEm0o3gC7YIIbc+JnWthI5XHnZwaYw38mHu8K1gBl
jnR95ibE7n3dzycQRhjliqnWxlbbMA7scEV0Yg17eL80tuthHI+3Dh3etfugAdGy
y6zMh74hVmSu13l4q94LCzWc+GG0vRffSu1kEji9uWMaw6lW2Np0oNmGTOT7RSTe
R/WzpiTnReEqCmf75X/OeAsk+nuLiPEUIytTdy7rThII+hu8oJ2fJG/u39BcHgAN
v08KblyF71AhM/w8QufXjpRhGYT2SdbAgQ3vnNRfdfcizYUAtYiGi0sPHIPFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU3hNBZNYL5XzMdt7mjJoLdoJkjeQwHwYDVR0j
BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC
VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw
Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85
QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtRVhmq5NnakKOBCQskBuDXHj+XdlDGnYTNGTUNNT3H3HMtvK41FeuJXHP06m
i/N1UcWRSX4E9gIOLn+RSFI8uEQJssw64IdVrZpVQR22KtyOaDfLp7TjkJJv9cpM
HfkmpSUqD/V3GBVlTkSdNcMCIotEUtOMPtjh3SF/RXvui1prwAx+X7iVXeBGxe8w
FO3JAQK5n4ujkBoCgWe2j7PmnixKxVzjStSYuToNZ8HWO14rhqUN3yRZT9Z53/pz
KUNOlcmhxWR+ccajXCCxCzC8vwiXNyNALNZpmDThJtHkr/DfWVA3VgioqZwtbBbj
0x/pwOQDPwCUm/yCo/ihD664zQ==
-----END CERTIFICATE-----