Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
File:                     2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json)
Hash identifier:          PSDjigX6GUf4NdLdp6F9aeVUJ+2pn3pFPemhVnYvNyw=
Subject key identifier:   46:98:3C:0A:33:00:1B:C6:CD:C5:30:51:28:15:D3:59:31:E7:24:DD
Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3
Certificate issuer:       /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
Certificate serial:       5CC23828EFCD974E6782CA3854A4CCB9BA3D46FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
Manifest number:          01C5
Signing time:             Sun 11 Oct 2026 11:49:26 +0000
Manifest this update:     Sun 11 Oct 2026 11:44:26 +0000
Manifest next update:     Mon 12 Oct 2026 14:21:26 +0000
Files and hashes:         1: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=)
                          2: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: BpXQ878yXkRYwBdLcKo096mv+EVjLw7M1CLiLztP3z0=)
                          3: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl
                          rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 14:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c2:38:28:ef:cd:97:4e:67:82:ca:38:54:a4:cc:b9:ba:3d:46:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3
        Validity
            Not Before: Oct 11 11:44:26 2026 GMT
            Not After : Oct 12 14:21:26 2026 GMT
        Subject: CN=46983C0A33001BC6CDC530512815D35931E724DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:79:e1:b3:23:65:c4:2e:87:02:6d:09:50:
                    68:6c:a3:6c:09:ba:48:94:cd:de:bf:5c:b6:3c:53:
                    86:4e:0a:67:c1:3d:8e:b2:fe:44:09:45:b3:ce:fe:
                    ff:bc:32:04:9b:48:81:e7:fe:cd:87:59:79:c3:85:
                    60:f2:13:64:a4:89:1f:f6:f3:ca:80:2e:3b:a9:70:
                    df:a2:4f:29:35:e8:a9:c0:c2:d7:4f:c1:48:af:05:
                    d2:78:81:6d:ab:4c:85:ed:fb:c5:d6:a2:50:f6:5f:
                    2b:d3:8c:70:4b:67:4d:a9:fc:8f:a7:57:b7:93:8a:
                    4d:52:0d:ef:f0:8d:ff:f0:ec:7c:06:9d:5e:f9:e2:
                    6b:a8:b0:ca:c1:90:9d:38:3c:a8:46:f4:52:cf:fd:
                    d5:1f:2c:d7:3d:60:c2:d0:4d:d9:ab:99:52:9f:ea:
                    11:d8:0e:74:a9:89:b3:1a:24:37:c7:a6:5d:27:bb:
                    d9:56:a2:f9:b6:42:73:b8:97:d4:87:ea:bc:bb:6f:
                    54:a9:9b:7a:1a:16:dc:37:63:10:81:17:b2:20:47:
                    a1:f4:30:0b:e1:98:5b:3b:f4:a5:75:bc:bf:32:98:
                    73:f8:d1:5c:9f:f8:18:34:e9:84:e2:67:98:cb:63:
                    db:ca:3e:7e:e7:fe:44:38:ed:a7:c1:91:cb:d5:5e:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:98:3C:0A:33:00:1B:C6:CD:C5:30:51:28:15:D3:59:31:E7:24:DD
            X509v3 Authority Key Identifier:
                keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:77:0f:97:43:62:a5:ce:41:0c:0e:2c:30:1f:d7:02:b3:
         18:71:d6:bb:cb:e4:d8:d9:87:6c:10:36:39:85:73:17:a9:6f:
         3b:0e:05:5d:0d:75:bc:ad:f5:08:9e:fa:fa:77:c8:a3:26:2f:
         9c:66:9b:b9:68:c2:15:6e:ab:de:b3:27:db:87:f5:5a:82:1d:
         8a:6c:5d:65:0a:9c:36:b8:85:7c:cc:e6:78:71:3e:2f:bb:32:
         39:bb:5b:2c:6d:65:c8:4d:e4:74:8e:26:f4:a9:ab:6f:45:e6:
         a6:09:b6:cb:4f:93:31:9f:08:76:2a:43:b5:14:2f:3b:ac:b0:
         eb:47:cf:7b:3b:e9:ef:7b:98:12:3c:44:eb:ef:b0:f6:78:fe:
         34:6b:b9:ad:bc:07:d3:b3:6d:2c:10:fb:1c:30:ae:2f:99:00:
         d7:84:58:80:c4:97:bd:a8:c7:59:eb:77:22:2b:76:cb:8f:e5:
         8e:74:62:64:ef:41:6c:d8:f0:66:9a:b2:b5:48:9d:09:33:4e:
         de:9e:08:c6:bb:9a:b6:cc:0a:ab:3f:35:1e:65:80:42:34:43:
         43:99:5f:f8:ec:c4:4b:86:5a:cc:de:eb:6d:56:71:8c:fc:8a:
         1c:93:e8:e7:0f:0b:71:ba:77:5e:73:05:e7:9c:88:7f:29:65:
         ef:b3:d9:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXMI4KO/Nl05ngso4VKTMubo9RvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy
RjhCRTZBMzAeFw0yNjEwMTExMTQ0MjZaFw0yNjEwMTIxNDIxMjZaMDMxMTAvBgNV
BAMTKDQ2OTgzQzBBMzMwMDFCQzZDREM1MzA1MTI4MTVEMzU5MzFFNzI0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLx3nhsyNlxC6HAm0JUGhso2wJ
ukiUzd6/XLY8U4ZOCmfBPY6y/kQJRbPO/v+8MgSbSIHn/s2HWXnDhWDyE2SkiR/2
88qALjupcN+iTyk16KnAwtdPwUivBdJ4gW2rTIXt+8XWolD2XyvTjHBLZ02p/I+n
V7eTik1SDe/wjf/w7HwGnV754muosMrBkJ04PKhG9FLP/dUfLNc9YMLQTdmrmVKf
6hHYDnSpibMaJDfHpl0nu9lWovm2QnO4l9SH6ry7b1Spm3oaFtw3YxCBF7IgR6H0
MAvhmFs79KV1vL8ymHP40Vyf+Bg06YTiZ5jLY9vKPn7n/kQ47afBkcvVXj3TAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURpg8CjMAG8bNxTBRKBXTWTHnJN0wHwYDVR0j
BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS
YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx
NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y
REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKOF3D5dDYqXOQQwOLDAf1wKzGHHWu8vk2NmHbBA2OYVzF6lvOw4FXQ11vK31
CJ76+nfIoyYvnGabuWjCFW6r3rMn24f1WoIdimxdZQqcNriFfMzmeHE+L7syObtb
LG1lyE3kdI4m9Kmrb0Xmpgm2y0+TMZ8IdipDtRQvO6yw60fPezvp73uYEjxE6++w
9nj+NGu5rbwH07NtLBD7HDCuL5kA14RYgMSXvajHWet3Iit2y4/ljnRiZO9BbNjw
ZpqytUidCTNO3p4IxruatswKqz81HmWAQjRDQ5lf+OzES4ZazN7rbVZxjPyKHJPo
5w8Lcbp3XnMF55yIfyll77PZnw==
-----END CERTIFICATE-----