Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
File:                     1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft (raw, json)
Hash identifier:          LR2P341UWjL8PRYAqd9kfjuNnxDP5i6CUdBFUbAnKbE=
Subject key identifier:   73:E3:58:40:42:D2:DE:6D:B9:3D:C5:44:D1:2E:F2:F4:E2:B2:2C:3B
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       54B8AF5539A7E1BD78586AFE6589AA96174064AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
Manifest number:          02D0
Signing time:             Wed 14 Oct 2026 20:03:20 +0000
Manifest this update:     Wed 14 Oct 2026 19:58:20 +0000
Manifest next update:     Thu 15 Oct 2026 21:15:20 +0000
Files and hashes:         1: 3137372e31302e32302e302f32322d3232203d3e203532393136.roa (hash: Ml3I4qzKe6T8WDZeJmLBKCwdzvrj84LixQTRc8VaVQw=)
                          2: 323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa (hash: jfYpBujcF9BZTeO1XIZOkZ7yJ+tTjTNSqLYCao2XPI0=)
                          3: 323830343a326231303a3a2f33392d3339203d3e203532393136.roa (hash: 8b/hCraUx/MusoZST5SuEyQ1+MU1+TV1clEr5j5vdog=)
                          4: 323830343a326231303a3a2f33382d3338203d3e203532393136.roa (hash: 9Yw+mX6QhIFgXtbfJbDMoqmS8YuJDWR6CgINnqw8648=)
                          5: 3134332e3235352e31362e302f32322d3232203d3e203532393136.roa (hash: 7GzhRRv+3GRUk16KqccgdZ1yoAxgpPuiRCaE52IPHqY=)
                          6: 1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl (hash: vHE3SPHPOFLjyBO96bDIpZVS+yoxL3bB9ABeD4eHaoI=)
                          7: 323830343a326231303a3a2f33372d3337203d3e203532393136.roa (hash: xBW2n7MA5JJaKIHDgj7ib2yYgr1MKAn+k/9Vj9ASNcs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b8:af:55:39:a7:e1:bd:78:58:6a:fe:65:89:aa:96:17:40:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Oct 14 19:58:20 2026 GMT
            Not After : Oct 15 21:15:20 2026 GMT
        Subject: CN=73E3584042D2DE6DB93DC544D12EF2F4E2B22C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:69:68:1a:68:68:bc:72:de:50:43:7b:11:
                    d0:d8:ba:04:f7:88:f4:7a:e6:e9:12:da:51:6c:c4:
                    e2:a1:e9:48:60:01:19:9c:1e:f7:a1:8a:4b:08:e8:
                    ac:fb:f3:da:a0:ce:4d:48:e7:ec:04:f3:6c:87:bb:
                    34:1b:0c:24:80:45:65:71:ab:5f:14:2a:47:cf:a0:
                    03:39:c6:6e:4c:9c:af:53:88:0a:41:82:66:ea:b4:
                    f0:d3:56:8b:79:88:42:62:8b:20:f0:b9:da:54:01:
                    4a:89:4f:fc:2b:b7:31:b8:ac:65:2e:e3:48:0a:94:
                    56:85:a6:88:4c:87:6d:ba:b9:c5:81:71:26:a0:6b:
                    82:b1:8a:92:90:51:fa:3d:5a:1a:e5:76:73:f2:32:
                    1c:f2:27:c8:61:95:b1:d7:7b:7b:2a:92:69:89:46:
                    6d:d9:00:0b:78:98:d0:30:1e:7d:19:ea:01:6b:29:
                    09:4a:49:11:e7:e8:89:a2:4c:13:75:c3:89:2d:90:
                    1d:21:88:19:9d:f0:65:de:b8:54:dd:dc:ee:58:d6:
                    9b:78:10:c4:4f:52:1c:09:ec:4d:4a:06:36:d7:44:
                    50:e0:5d:96:3a:06:77:3c:56:4a:4f:d7:1c:d5:b0:
                    7c:15:83:f4:cf:04:d2:c6:0b:60:19:8a:8b:1b:ae:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:58:40:42:D2:DE:6D:B9:3D:C5:44:D1:2E:F2:F4:E2:B2:2C:3B
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:40:24:ee:c5:d1:7c:d0:8f:da:bc:8a:92:c9:c5:e9:c6:bf:
         df:b7:02:d9:51:23:8a:45:4b:da:ce:61:5f:2f:35:03:41:33:
         41:0d:d6:67:87:2f:5e:00:71:fe:0f:d4:c7:04:5e:9e:e4:d6:
         0a:e0:8c:12:16:21:bd:e2:7d:c8:e9:fe:e1:f6:92:f5:0b:de:
         b8:e6:96:b5:4c:f6:3a:c7:49:44:42:bf:6e:80:41:93:e3:16:
         0c:1b:e7:26:07:a9:b0:32:43:fc:5c:45:53:71:4c:e4:62:5f:
         73:a2:61:87:80:18:66:14:39:75:c4:80:24:da:9a:ee:b8:5b:
         98:12:02:cd:aa:b2:f4:d9:3a:41:d4:5c:91:52:a5:fb:0c:67:
         60:dd:48:8d:66:da:6c:e3:32:ac:ad:dd:17:83:95:95:0d:05:
         9a:98:b8:f9:01:08:3a:7f:98:d4:24:c3:68:78:3f:57:79:7b:
         fd:4d:7a:8e:df:a6:d2:98:a0:f3:d6:47:ba:0e:99:0e:c6:99:
         53:be:ad:b6:64:f2:e1:f4:58:f8:a4:49:63:04:b4:a1:6d:51:
         67:39:25:f0:0e:95:75:99:20:6e:64:0d:37:21:92:9b:85:f2:
         65:8c:41:b4:6a:ef:32:d6:aa:67:ab:5c:60:3f:dd:8c:25:cd:
         b9:5d:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:51:03 2026 by rpki-client