Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File:                     2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier:          +zWi2xYAymiSQzETl8BZebV8wSC+RA+2VCw6xrxzWlY=
Subject key identifier:   DF:BF:65:A4:EA:56:89:DC:5D:E4:D8:91:24:2F:BA:87:E8:7C:5C:BE
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       671BC2D3BBC4E34696D5BEB66C51ECBB2C768AED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number:          03A4
Signing time:             Thu 15 Oct 2026 17:29:38 +0000
Manifest this update:     Thu 15 Oct 2026 17:24:38 +0000
Manifest next update:     Fri 16 Oct 2026 21:10:38 +0000
Files and hashes:         1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: XITAdmb++yUINuYFtHA6APKEALxh7PgOTyzyaA/fr4U=)
                          2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: i6sQsqwM9UEYh4VTEkwFg83NGz1/DRIEYjES2nVYxB0=)
                          3: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: 3Jx/ydpDgAIaYBfX4HzoCu53GKmkKQIYK6x4cFgIeXo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 21:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1b:c2:d3:bb:c4:e3:46:96:d5:be:b6:6c:51:ec:bb:2c:76:8a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Oct 15 17:24:38 2026 GMT
            Not After : Oct 16 21:10:38 2026 GMT
        Subject: CN=DFBF65A4EA5689DC5DE4D891242FBA87E87C5CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:d1:66:36:e1:5e:3a:2e:c1:c0:b2:be:6d:
                    e4:19:ff:de:f5:69:58:d8:28:2a:1a:e4:ae:d9:cd:
                    18:5f:5a:78:15:7d:7b:46:cd:ff:43:53:40:89:f2:
                    c6:08:9e:a0:52:e8:46:7c:69:59:dc:3f:d7:38:3a:
                    7b:a1:4b:b2:87:39:7a:00:1e:cc:f3:4d:20:5d:1f:
                    1a:e7:88:88:aa:57:18:1c:e6:79:44:28:78:ba:14:
                    84:d7:3d:40:c6:bc:85:ae:bb:96:4c:7b:ea:ac:9e:
                    57:bf:2d:a7:3d:bf:c6:62:7f:a5:42:b7:0f:d4:2a:
                    43:c8:a2:37:f9:5e:1d:6b:bb:19:19:54:34:16:3b:
                    95:9a:c9:d7:fd:e6:8b:56:e3:ea:a7:d5:bf:19:8e:
                    56:97:98:cc:b6:12:3b:e6:dc:23:73:8a:f9:fd:70:
                    7d:0d:74:c5:8e:63:29:03:77:1c:34:0c:f8:2a:8f:
                    f3:0b:fd:82:78:06:d8:97:b8:b4:b5:ba:97:13:6e:
                    cb:db:f2:02:ba:67:81:18:00:c5:64:3d:61:70:b7:
                    42:21:93:ea:ad:d5:90:78:e8:70:61:00:f8:91:b4:
                    3f:11:85:46:22:24:b8:b3:6b:13:8e:fc:b0:e0:d5:
                    e1:e0:8c:fd:bc:e6:04:d6:0f:a9:85:2b:a7:f9:56:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BF:65:A4:EA:56:89:DC:5D:E4:D8:91:24:2F:BA:87:E8:7C:5C:BE
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:75:7f:22:48:4c:c4:bc:21:4d:0a:e3:20:a4:6b:ac:7b:
         ac:b2:30:d8:68:2e:00:5e:96:eb:e8:3c:e0:a0:a5:3d:d9:f4:
         e9:15:ea:eb:b0:e0:5a:3a:17:3f:a0:f3:bb:e7:b7:26:00:94:
         d8:b7:6c:8e:72:de:41:45:86:31:af:dd:23:19:a7:37:fe:72:
         07:71:7e:7e:6c:1e:25:0e:b7:90:47:b8:fa:ee:50:24:a9:68:
         50:41:50:55:84:07:2e:60:06:ed:86:eb:4c:d5:d3:d7:dd:8c:
         97:7b:f9:20:90:f2:7f:76:38:05:ce:7b:4e:1d:2f:96:87:43:
         03:d6:5e:42:ac:0b:c7:46:9f:f2:3b:59:3d:66:08:aa:d5:56:
         86:0f:01:f5:5c:14:9f:9f:d3:98:15:91:0b:78:62:61:fd:23:
         27:f7:8d:4e:1c:ca:7e:db:3b:81:aa:f7:2c:91:83:db:d5:2c:
         39:2f:0a:00:79:7d:87:b3:62:c9:f6:59:84:4f:0a:11:c3:42:
         53:57:69:a4:1e:93:ac:af:fe:95:c2:4b:7a:e2:cd:89:dc:1d:
         ae:1b:5d:29:2c:73:b4:11:f1:9a:8c:fa:8f:d5:3b:14:b8:fe:
         77:09:4b:66:29:d6:39:57:06:06:93:43:01:05:e9:48:c0:e9:
         db:76:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----