Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
File:                     296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft (raw, json)
Hash identifier:          ulLKUm1bnfdwxBmQvha1aPGFNs23rIj4BspC/FV5hT8=
Subject key identifier:   03:16:40:37:B7:5D:E5:86:91:2B:86:A0:60:C7:15:0D:60:4A:4A:A2
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       0349D3D8845CF034F81BB3607B0A011598D76ABD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
Manifest number:          0209
Signing time:             Fri 16 Oct 2026 09:13:18 +0000
Manifest this update:     Fri 16 Oct 2026 09:08:18 +0000
Manifest next update:     Sat 17 Oct 2026 10:53:18 +0000
Files and hashes:         1: 34352e3136372e32382e302f32322d3234203d3e20323637393832.roa (hash: 8/VmCFkP7rVtzUqkRvtGVgstGF/aytsFpQFdq0/6DbU=)
                          2: 34352e3136372e32382e302f32322d3232203d3e20323730393330.roa (hash: CZGjzT8OSn5qHgRjps8PBAIxc72mqjCxKAaPU9uasQg=)
                          3: 296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl (hash: PMAtrdJUtCstlolMdFsdHznMsMckGsH+IlvAXWtfuRA=)
                          4: 323830343a353633303a3a2f33322d3438203d3e20323637393832.roa (hash: CiGElvWJKORgy0KDRn6GovbU0n3Th4abQMP/FO/NRe8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:49:d3:d8:84:5c:f0:34:f8:1b:b3:60:7b:0a:01:15:98:d7:6a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Oct 16 09:08:18 2026 GMT
            Not After : Oct 17 10:53:18 2026 GMT
        Subject: CN=03164037B75DE586912B86A060C7150D604A4AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:94:63:4c:89:15:09:f7:31:3b:0d:91:4f:
                    97:a3:e6:5d:f2:da:32:5b:c7:ab:03:74:ab:90:f5:
                    d0:49:4d:31:90:0a:35:e3:e6:3d:6a:5b:3d:1e:74:
                    12:1e:64:f9:58:47:50:8c:d3:f5:f3:23:a8:e1:cf:
                    8e:e1:41:c2:46:bd:87:4b:66:19:fa:1f:ff:53:74:
                    bc:8a:3b:b9:a3:ea:c4:c0:1b:61:34:c2:f1:ab:0b:
                    6f:10:76:32:9f:6e:88:63:74:f3:05:00:44:2f:d7:
                    a8:89:e3:83:91:03:de:a0:93:75:6a:30:27:11:0e:
                    f9:a4:05:9e:cd:84:e0:9f:fc:11:31:b7:78:37:d8:
                    df:16:a6:5a:1b:8f:57:50:9f:ef:e9:40:44:27:bb:
                    23:af:6b:50:c6:1f:f0:67:b6:70:c5:b1:08:7e:82:
                    3e:c9:8b:10:fd:b6:8e:ff:d7:5e:ad:70:8d:f2:89:
                    fb:42:d7:46:09:6e:2f:01:42:2d:0a:99:e8:d1:2e:
                    ff:1c:8f:4f:86:37:af:fd:df:8c:18:8b:53:8f:4b:
                    8a:6f:cf:f4:df:39:d7:1e:69:b7:0c:b2:32:c3:cd:
                    4b:7f:a8:6b:ab:e5:44:38:6d:f0:09:e3:92:00:f3:
                    05:0c:6c:ba:33:a6:12:ee:51:c0:4f:fd:ec:cc:4b:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:40:37:B7:5D:E5:86:91:2B:86:A0:60:C7:15:0D:60:4A:4A:A2
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:45:fc:8f:53:f6:3c:5e:63:06:ff:16:1b:3d:c0:d9:4c:
         1a:6f:ee:29:ac:79:ec:be:6a:2a:a0:20:ed:a9:77:ad:ac:91:
         14:b4:30:5c:10:d3:52:f8:ac:c6:ea:2c:dc:fc:41:a3:32:75:
         39:3b:7a:d9:ad:ca:95:0b:8b:db:e5:4a:cd:93:ec:0d:94:55:
         45:e6:96:74:b4:bc:a7:55:03:d2:1e:95:0c:86:c6:1c:c7:c9:
         14:ea:37:0f:b2:62:df:17:c8:46:fa:29:0f:43:25:7a:45:ab:
         aa:19:7c:42:03:fa:47:f1:d7:9f:15:4d:6a:fa:91:fe:1f:e9:
         98:19:03:a0:34:9c:39:96:ea:46:18:4c:fd:97:ed:ad:1b:a5:
         48:43:d3:ca:af:12:47:51:fb:dc:c4:ee:fe:9c:00:1e:23:7e:
         61:8c:79:44:fe:66:58:7b:56:18:52:7b:6d:d2:ad:ae:62:ca:
         d2:67:38:1d:7e:c6:52:70:a7:15:4b:9d:f7:3d:1c:35:46:45:
         42:e9:64:d2:a7:bc:d4:95:b8:e0:9d:4e:37:53:00:42:22:f5:
         c4:52:5d:6d:f5:e0:71:05:b6:e5:c4:23:bf:24:69:0f:a1:ef:
         45:fa:98:c9:80:ce:4b:d0:de:f4:03:54:08:0d:a8:84:9d:e7:
         75:2f:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:23:19 2026 by rpki-client