Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
File:                     8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json)
Hash identifier:          hJCcaScs+NR0PctOc78dGpW5cGavvdfMaOFDNts90XA=
Subject key identifier:   E3:65:60:DD:A0:4D:79:09:7D:DB:61:8B:66:E4:15:FE:D1:76:77:01
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       71FE64D80AC99D0A6F364DB9AFEF1D3E31402D2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
Manifest number:          03F8
Signing time:             Sun 01 Nov 2026 08:46:48 +0000
Manifest this update:     Sun 01 Nov 2026 08:41:48 +0000
Manifest next update:     Mon 02 Nov 2026 10:37:48 +0000
Files and hashes:         1: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: DZUKJT58QNvDzjKeLYED3eYPaCQV0SjeRB5gzfW7e7I=)
                          2: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: Aqd+fkKaetPEM1VZknpBLTRpoa6iacSqGlU6Pqtm/lw=)
                          3: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: bHkaMgsQI+wNREFKFuJNbcR0Pr4FXc5yHzm39e6iE2U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 10:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:64:d8:0a:c9:9d:0a:6f:36:4d:b9:af:ef:1d:3e:31:40:2d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Nov  1 08:41:48 2026 GMT
            Not After : Nov  2 10:37:48 2026 GMT
        Subject: CN=E36560DDA04D79097DDB618B66E415FED1767701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:9f:92:58:34:0d:39:5c:e5:4f:a5:ce:db:
                    b9:12:8e:71:12:77:e2:49:3f:95:36:12:e1:b2:c6:
                    7e:4d:0c:65:cc:7e:45:b7:65:43:4f:b6:3f:67:e8:
                    3e:01:71:73:8b:68:42:c1:f7:e2:e3:2d:7d:a6:94:
                    9b:1c:a7:54:d8:39:05:58:63:49:0b:8a:d5:28:28:
                    c9:9c:9c:f6:cb:1a:96:c9:74:fd:25:49:d5:2e:44:
                    99:b7:9b:a8:85:09:da:4a:73:f5:8d:2e:aa:77:6c:
                    ff:5d:ef:8f:5d:aa:75:a7:2e:25:09:1b:57:7f:7d:
                    5d:e3:66:e8:0c:84:46:df:00:90:53:dc:90:f3:51:
                    3d:09:ac:5d:81:70:a7:70:7a:6f:f2:40:46:ec:38:
                    1f:ce:dc:4f:c1:12:f9:7f:14:0d:42:57:d2:28:20:
                    08:20:d1:cd:16:27:ac:7c:99:73:d8:0a:87:53:5c:
                    9e:ad:33:34:6d:09:57:13:f9:60:7a:16:b7:ac:0e:
                    f2:ec:4a:82:4a:89:47:ae:56:9f:3a:82:86:0b:bf:
                    61:b4:89:3c:2f:c3:6b:56:97:cf:ca:9f:c4:93:fe:
                    b3:3a:55:6f:ec:62:da:ed:6b:3c:96:8f:26:06:c9:
                    62:f2:b9:74:56:46:58:4b:ff:ed:5b:78:ad:40:27:
                    60:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:60:DD:A0:4D:79:09:7D:DB:61:8B:66:E4:15:FE:D1:76:77:01
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:e9:13:28:6f:51:a6:88:b0:44:35:90:2d:b0:a7:2e:e8:
         93:b3:ae:4d:e9:f5:c4:da:3e:40:42:dd:19:71:59:66:04:9a:
         70:bc:9b:2c:10:e4:b7:26:52:e6:b6:99:fb:18:7f:26:39:03:
         a5:7d:88:cc:df:e4:e8:09:01:0f:f2:38:5a:3e:45:4a:9d:dd:
         f9:19:5a:f0:4f:09:8d:d3:64:bf:94:4a:a7:5d:95:ae:af:13:
         fe:89:e9:c9:51:07:97:0a:e5:32:7d:f5:4e:cf:da:4b:d1:d0:
         73:2e:c2:12:31:ed:83:a3:31:a7:18:22:e4:b8:bc:54:da:31:
         af:06:fa:ba:92:67:19:55:f2:f3:88:5f:49:79:7a:4f:0c:88:
         93:47:62:72:51:51:d3:d8:76:ba:b2:6b:2e:7d:b3:ea:d3:fb:
         3f:e5:ed:c2:22:6b:1f:5d:f9:9a:f4:56:88:7f:25:0d:38:59:
         0a:39:b7:98:c1:2e:10:2c:61:c2:57:a4:02:47:3b:f4:8e:5e:
         57:69:4d:10:4a:c1:14:14:9d:63:c6:18:65:4a:e0:51:a6:6e:
         a8:6c:b7:ac:45:be:6a:b9:bf:69:9a:fd:95:49:ec:37:73:7c:
         58:68:11:dd:16:cb:7f:87:18:cf:6f:07:f8:36:8c:11:d9:d8:
         99:8b:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 01:05:48 2026 by rpki-client