Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft
File:                     27A8979B6F02B01140ACE2AF10E4E54944037A11.mft (raw, json)
Hash identifier:          XCqDQlK0+8JNYqtOKHc4a0pTyIA/yiQBHAr2nyAs3TQ=
Subject key identifier:   92:5C:BA:12:24:CB:28:8F:35:1B:9A:DE:A7:92:E7:48:77:7F:6C:43
Authority key identifier: 27:A8:97:9B:6F:02:B0:11:40:AC:E2:AF:10:E4:E5:49:44:03:7A:11
Certificate issuer:       /CN=27A8979B6F02B01140ACE2AF10E4E54944037A11
Certificate serial:       5DE9C657E309C95BA05EC5ED4CFE94FDEA18380B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A8979B6F02B01140ACE2AF10E4E54944037A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft
Manifest number:          BC
Signing time:             Sun 11 Oct 2026 02:49:04 +0000
Manifest this update:     Sun 11 Oct 2026 02:44:04 +0000
Manifest next update:     Mon 12 Oct 2026 04:53:04 +0000
Files and hashes:         1: 34352e3136332e37302e302f32332d3233203d3e20323638353539.roa (hash: kp5+QSxWNEELAq5NoZt3EOl16e1kSwt1vFa0SfVy7Kc=)
                          2: 34352e3136332e36382e302f32322d3232203d3e20323638353539.roa (hash: Q4QAQKiu5797hUeZcAXzK+BQ7iADHiSZWeQtd9pzeWM=)
                          3: 34352e3136332e37312e302f32342d3234203d3e20323638353539.roa (hash: h61eg6nvXQTDjDgc2niICDkg+/s6f8lnuEsccTzmYiY=)
                          4: 34352e3136332e37302e302f32342d3234203d3e20323638353539.roa (hash: y0kMK9Myblk0g7ASvVR1e96IY5nQPKfZAXvCP+jFeu4=)
                          5: 27A8979B6F02B01140ACE2AF10E4E54944037A11.crl (hash: pGWboNVX8RYJezWgXYaJpmRC0ntrclAUmrCtQ6wbGxc=)
                          6: 323830343a353330383a3a2f33322d3332203d3e20323638353539.roa (hash: vxW4vftRE0JQbJDrkFdNc5VjHh/N2eeYz2GoW5r7XKc=)
                          7: 34352e3136332e36382e302f32342d3234203d3e20323638353539.roa (hash: 281OEi9GugpqYJ2j7+Fs/BY1+O9L/hNXHKg8ZeaBbB4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.crl
                          rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A8979B6F02B01140ACE2AF10E4E54944037A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e9:c6:57:e3:09:c9:5b:a0:5e:c5:ed:4c:fe:94:fd:ea:18:38:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A8979B6F02B01140ACE2AF10E4E54944037A11
        Validity
            Not Before: Oct 11 02:44:04 2026 GMT
            Not After : Oct 12 04:53:04 2026 GMT
        Subject: CN=925CBA1224CB288F351B9ADEA792E748777F6C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:76:37:3d:97:ff:bc:c4:d6:9b:22:32:ad:
                    04:fd:7b:48:0a:58:e6:37:35:a9:f8:2e:b0:6e:04:
                    53:2b:8e:81:ba:f5:f0:f1:c0:a6:bb:76:6d:5f:d2:
                    c8:da:04:f1:6f:d2:00:aa:2e:4c:2c:cf:89:df:60:
                    74:a8:6c:6a:d5:de:9e:77:d1:3e:3c:48:f8:33:b1:
                    3d:4f:f2:99:a7:01:e1:e5:58:e1:40:21:b6:e1:6e:
                    90:79:1c:7a:78:d9:0e:61:01:dd:ed:c1:ee:01:f6:
                    1b:cf:e3:45:82:57:94:80:29:aa:e1:2f:bb:7a:cf:
                    a1:c6:87:0d:69:56:14:b5:2b:b0:58:44:b3:db:4d:
                    0d:59:03:e5:09:67:4f:26:17:6b:47:42:b4:f8:00:
                    fa:93:a8:ca:ec:06:0c:d7:0b:1c:11:c4:76:94:48:
                    0b:9e:29:ec:e1:bb:e6:ac:c1:b4:a6:e6:02:d0:72:
                    34:db:be:74:1a:12:ac:f7:e3:28:de:9f:aa:62:ba:
                    0a:1e:b6:35:b1:53:a4:22:d3:34:f1:22:85:ab:a2:
                    0e:0d:00:48:21:91:c0:f9:3b:a2:87:2e:d6:8b:38:
                    b0:08:b3:0b:9d:3e:b9:ab:5d:af:05:b5:c2:1e:f6:
                    63:c4:7d:a2:df:5e:d9:8f:f2:58:b3:3e:2b:9b:85:
                    77:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5C:BA:12:24:CB:28:8F:35:1B:9A:DE:A7:92:E7:48:77:7F:6C:43
            X509v3 Authority Key Identifier:
                keyid:27:A8:97:9B:6F:02:B0:11:40:AC:E2:AF:10:E4:E5:49:44:03:7A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A8979B6F02B01140ACE2AF10E4E54944037A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:3b:1e:31:72:e7:91:a4:7c:c7:c5:b6:f3:fd:ec:59:ee:
         e1:3b:fd:0f:97:51:98:c8:7d:8e:93:95:93:5f:77:29:4f:b6:
         87:48:f3:f4:8f:ab:8c:ab:82:3b:90:a8:6f:63:b6:4e:ef:5a:
         33:20:c3:87:39:e1:8f:ce:63:be:4b:9d:3b:7e:fc:13:0b:dc:
         4c:25:8b:15:50:a8:b4:67:cf:b0:c6:a9:49:ce:2a:70:1d:d1:
         3d:9f:45:83:59:6a:1a:bf:53:83:ad:65:b3:80:60:81:b1:37:
         ec:45:c1:e4:d2:cf:9b:c4:c4:c7:c2:68:74:d0:2d:1c:2f:18:
         7d:bc:77:88:00:77:d6:4e:74:1b:f8:c0:91:db:40:41:11:1e:
         a3:04:2e:e4:35:f4:2b:80:5e:a4:39:c9:98:2b:0a:96:e7:14:
         e3:97:71:d9:c4:0d:a4:44:68:78:63:00:8b:b5:39:8c:55:45:
         4f:af:fe:24:02:0a:93:67:97:5c:c4:30:21:89:ff:d5:fa:45:
         bf:7c:97:20:da:20:e5:de:f9:75:74:98:da:de:1d:8c:87:8e:
         a7:69:d8:9b:17:ec:7d:97:f0:8e:6a:99:43:51:88:9d:c4:8e:
         23:fe:93:87:7c:73:16:bf:b8:e5:a3:d0:59:0c:82:af:3c:92:
         1b:3b:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:09:26 2026 by rpki-client