Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
File:                     942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft (raw, json)
Hash identifier:          ipuYHqi+fjre83F9n6tB9FbooItv4hppnYlubNm1jqc=
Subject key identifier:   24:93:68:9B:CF:60:9B:8F:12:3A:3B:7D:2A:7A:D2:4E:D3:11:2A:8A
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       3F73FCCB0478B5B6227F8728BF606B65897F2889
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
Manifest number:          04CE
Signing time:             Tue 13 Oct 2026 23:08:10 +0000
Manifest this update:     Tue 13 Oct 2026 23:03:10 +0000
Manifest next update:     Thu 15 Oct 2026 00:37:10 +0000
Files and hashes:         1: 323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (hash: QyXOQDEs96gWpD7KTDqJA1FGdGMTzFA2NR1MSDpVqME=)
                          2: 3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (hash: GZlkc04TEiHS/yGu7rHFVGgZRHXaY2e7fADLFday7lc=)
                          3: 942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl (hash: yRgRacfizcIax66pA6feMIzKW6SOEfq4bRqgvF6Tfjw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:73:fc:cb:04:78:b5:b6:22:7f:87:28:bf:60:6b:65:89:7f:28:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Oct 13 23:03:10 2026 GMT
            Not After : Oct 15 00:37:10 2026 GMT
        Subject: CN=2493689BCF609B8F123A3B7D2A7AD24ED3112A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:e2:0d:1b:38:f3:d7:0e:17:df:c5:6e:f3:
                    23:48:88:44:55:f5:65:4f:95:22:4a:fb:fe:db:94:
                    0e:82:f8:e8:f6:ca:2a:ed:14:f8:4b:38:1c:c4:f2:
                    4f:d6:9b:32:cc:9f:dc:15:a6:00:b6:54:22:1f:43:
                    0c:8e:e0:f8:1e:b7:fd:74:12:ac:a9:95:44:e7:b7:
                    f6:7d:c9:96:47:cf:d9:78:1c:85:9b:08:49:71:64:
                    1d:64:d0:5d:45:2f:4e:b8:02:e3:ac:e4:09:11:d1:
                    d8:47:6c:7a:3c:9c:71:f6:5c:fd:b0:6e:29:eb:23:
                    0c:3b:b8:bb:4b:b7:35:d7:cf:9d:5c:8c:fb:cc:f8:
                    19:98:fb:68:08:6d:ff:09:c0:24:ee:54:af:2d:95:
                    1e:d2:14:34:8a:7a:48:9c:00:12:62:f6:7c:d5:c7:
                    d1:4c:74:9c:67:a5:4b:0d:24:2b:ee:89:02:e6:9d:
                    68:37:a3:6e:c7:99:7f:df:22:32:a3:4a:ba:e9:eb:
                    ed:76:a5:55:13:50:92:e8:a0:b3:a3:8f:c6:c0:a9:
                    5f:57:ae:ee:50:1d:63:84:44:5a:d5:ad:c1:55:53:
                    02:5a:ac:64:8e:88:9e:fd:76:f8:c9:94:da:ac:1a:
                    a0:1f:5b:c5:66:00:6e:36:f6:14:58:ac:d0:4f:55:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:68:9B:CF:60:9B:8F:12:3A:3B:7D:2A:7A:D2:4E:D3:11:2A:8A
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:5c:67:23:d9:7a:ff:67:61:13:20:eb:5a:4c:e9:1a:9f:
         1d:bf:1e:1a:ec:b3:ef:ef:b7:25:fc:58:4d:dc:c5:20:f6:97:
         43:b8:cf:85:69:75:0c:9a:b3:d3:41:07:fd:0e:1e:61:8a:fa:
         e5:f4:56:b4:dc:a1:e8:7d:e6:3b:17:e6:5d:ad:4a:9f:b3:04:
         0e:ab:93:f0:d4:8c:0b:6f:42:e2:61:b5:d8:b9:4b:51:2a:fe:
         05:a9:1b:cc:bb:82:4c:ec:88:69:94:f9:0f:d7:0e:69:28:a9:
         a6:96:39:ec:be:91:a3:2d:d3:e9:32:dc:dc:4c:6a:29:0d:bc:
         23:4f:3a:dd:7e:5a:71:54:e5:0a:df:d6:3f:6f:ad:78:8e:b3:
         22:86:44:ff:6d:fc:b6:b2:de:97:f2:92:5d:67:09:38:59:9a:
         55:03:a9:b3:00:38:16:98:e1:3f:ab:9a:66:70:f0:48:cd:d8:
         15:46:f0:fe:94:5d:63:42:70:b6:9f:b0:a4:d3:6e:22:ab:36:
         d5:a3:c5:08:b6:63:f5:07:f3:f1:56:44:75:61:5a:bf:ae:2b:
         c6:0e:65:01:57:9e:58:98:e3:88:6b:1c:c6:3a:63:02:a1:72:
         5b:45:f4:c9:79:eb:1f:02:c6:77:e9:4f:d6:df:e5:c2:db:2a:
         d9:05:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----