Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
File:                     35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json)
Hash identifier:          kc6j0bD1/tpLWlMsUz8TIkC7qQ2hCVKmExUviUp4GBs=
Subject key identifier:   86:F0:23:F4:1F:3B:4A:A9:F2:08:6A:B5:1D:6E:53:2D:86:7C:1D:07
Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18
Certificate issuer:       /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
Certificate serial:       4B37BBB05A5172BA5A32702E76F4F7FBF00AC4F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
Manifest number:          04D2
Signing time:             Wed 14 Oct 2026 12:31:05 +0000
Manifest this update:     Wed 14 Oct 2026 12:26:05 +0000
Manifest next update:     Thu 15 Oct 2026 14:33:05 +0000
Files and hashes:         1: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: 72TiipRXGxfru++3XIcM5k+Itzx6WU1OFVxDuIZLzI8=)
                          2: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: 6goGBettQXlYT3dwNzXMNEk/cOwbQJLprhXKpD/i9z0=)
                          3: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: dBK5EWUwBHCRzo0bpYkF0fx5VE9hBRp/pTinxYG0hU8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl
                          rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:37:bb:b0:5a:51:72:ba:5a:32:70:2e:76:f4:f7:fb:f0:0a:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218
        Validity
            Not Before: Oct 14 12:26:05 2026 GMT
            Not After : Oct 15 14:33:05 2026 GMT
        Subject: CN=86F023F41F3B4AA9F2086AB51D6E532D867C1D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:2f:42:c5:40:8b:00:29:ec:87:94:0b:99:
                    81:32:8b:7f:9c:cc:dd:dc:42:95:16:34:86:be:67:
                    c0:86:91:64:13:0a:b4:30:55:7d:73:25:fd:4a:2f:
                    a8:85:36:40:55:80:53:4b:e2:fc:dd:c6:77:fd:a9:
                    86:c3:3a:b1:79:a7:e9:fd:98:ae:b9:fb:4c:4c:4c:
                    5e:fa:22:99:a7:0c:b2:dc:9c:a4:e9:f5:ad:24:2d:
                    69:8b:28:5d:35:77:f2:1b:be:c9:c9:c4:4c:62:44:
                    57:f1:3c:a7:0e:1a:cd:7b:ed:b6:86:4b:d0:44:76:
                    a0:2b:b1:99:56:26:6b:9f:f3:6c:f9:67:d0:c7:21:
                    c3:42:a9:7e:3d:38:53:fc:40:17:88:ea:21:1f:65:
                    1b:ff:5b:11:26:be:56:3b:e7:8d:b4:ad:63:40:1e:
                    62:e4:2d:43:aa:9d:f9:52:25:25:c8:c5:42:84:68:
                    eb:ca:30:b3:9f:73:5c:b9:a2:0a:b4:06:34:cf:99:
                    1a:73:59:bf:ed:dd:2c:d1:17:7b:49:87:a3:4d:d9:
                    1a:0c:0f:24:b5:4f:3e:2d:53:15:70:d7:5e:77:ae:
                    4d:b5:b9:21:8a:79:4a:64:6f:7c:3c:45:7b:42:a4:
                    7e:69:19:33:04:c4:c4:a4:12:c6:a7:1e:c2:73:c7:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F0:23:F4:1F:3B:4A:A9:F2:08:6A:B5:1D:6E:53:2D:86:7C:1D:07
            X509v3 Authority Key Identifier:
                keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4b:c2:ce:49:a2:e5:90:37:f0:65:b8:43:15:6c:37:7b:ce:
         b8:29:18:0a:14:2c:78:5d:b4:d7:b5:7c:b4:1c:2a:6e:b8:59:
         ab:3a:6b:15:bf:a5:12:58:09:ce:b5:5d:14:71:c0:38:83:53:
         28:ae:a1:06:36:0a:40:78:1a:cc:11:1e:a8:ea:b7:b5:55:b2:
         20:d6:43:ed:72:07:ad:cd:2e:4e:77:3b:57:14:7d:f1:ab:06:
         ff:da:61:d8:89:c5:a0:0a:33:b1:cc:d9:ef:43:5e:f9:0f:8d:
         95:d4:42:cf:e9:a6:44:8e:f8:a0:95:3d:52:d3:cb:0c:5e:65:
         d9:da:51:d9:77:ae:5f:95:8b:c8:ee:47:a4:16:cc:d6:d6:52:
         a6:79:4e:d6:de:e8:bf:a3:4e:a7:a8:91:73:f8:4c:cc:d9:0c:
         d8:1c:ab:c6:76:cd:2b:72:55:40:63:40:f6:cb:43:d4:9c:3e:
         79:91:0b:10:12:30:9d:e3:26:f0:17:2e:8c:7d:21:40:66:a1:
         29:3f:4d:b1:2f:52:cb:4c:02:9b:86:e3:2a:84:71:c9:be:47:
         df:05:cc:3d:f7:81:11:19:28:67:ef:9a:92:a1:72:8b:e5:45:
         ce:b0:2b:d5:36:a3:50:85:8e:1f:7b:92:b5:3f:4a:b4:dc:d1:
         a6:0d:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----