Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
File:                     A096C66C522750DD8B28AE26182F90FE99954BFF.mft (raw, json)
Hash identifier:          HzoVkzsAwu57rAog3cXbSF255IVBQd4N2aRkVO2rTsI=
Subject key identifier:   E8:EA:75:99:88:1E:92:81:AD:D8:6B:E5:3C:A8:A6:AC:36:45:21:DF
Authority key identifier: A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF
Certificate issuer:       /CN=A096C66C522750DD8B28AE26182F90FE99954BFF
Certificate serial:       23E2AA295E61183A20F1278F2999F6C254A691B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
Manifest number:          A2
Signing time:             Thu 15 Oct 2026 03:41:04 +0000
Manifest this update:     Thu 15 Oct 2026 03:36:04 +0000
Manifest next update:     Fri 16 Oct 2026 06:15:04 +0000
Files and hashes:         1: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: ugUg0t+TLiHq15FxtLnKQMCCEt3+ghcQH5AcIQFVD0A=)
                          2: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: N5AjXVKSQJd7J5bJelKOcWOCwLsj9TyoTdOhhim2l8M=)
                          3: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: xSIClYPhhn3U1wmQicf1IkodAbIhAF5WH3husAz5iPk=)
                          4: A096C66C522750DD8B28AE26182F90FE99954BFF.crl (hash: hUsZui5AgRbMN0gQxcpmT1iCus/uWmMjx1Y4nsBKK/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.crl
                          rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e2:aa:29:5e:61:18:3a:20:f1:27:8f:29:99:f6:c2:54:a6:91:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A096C66C522750DD8B28AE26182F90FE99954BFF
        Validity
            Not Before: Oct 15 03:36:04 2026 GMT
            Not After : Oct 16 06:15:04 2026 GMT
        Subject: CN=E8EA7599881E9281ADD86BE53CA8A6AC364521DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:0e:d2:18:76:b7:ad:e0:b3:18:3d:04:3b:
                    27:09:c9:d2:c6:3a:9f:d7:1f:af:61:c6:57:95:25:
                    df:82:84:1b:67:e6:37:f3:4d:83:24:2c:02:50:a7:
                    1a:14:88:46:76:5b:f2:4d:d4:0c:c5:6f:79:28:6c:
                    73:96:dd:88:5c:e3:73:5c:19:47:c6:5b:49:ca:09:
                    17:ad:5b:8a:2a:d1:23:ec:12:3c:3f:75:47:ff:cf:
                    a2:23:87:47:c0:8b:c5:5b:c5:c1:9a:fd:b4:ec:15:
                    68:22:1c:d8:38:ce:35:2a:e3:00:d6:56:af:2a:6a:
                    b4:f6:88:f2:15:fd:cf:21:fa:aa:ca:8c:3d:a3:55:
                    c3:f1:66:83:b8:75:7a:b6:02:e3:13:c2:f0:5e:26:
                    1b:98:97:b8:95:98:16:e7:91:d0:c2:21:39:36:67:
                    90:81:22:59:74:74:a5:94:98:37:53:fa:70:c6:d0:
                    29:9c:e9:77:b6:38:a9:cb:d3:0c:71:73:80:15:13:
                    46:34:24:48:dc:f5:6c:2f:88:df:be:a4:c0:96:62:
                    70:2b:f9:31:ba:33:11:3f:90:15:88:01:5c:b0:99:
                    ea:77:9b:fc:35:3f:30:63:69:dc:c3:0a:bc:30:4d:
                    a5:15:25:25:2a:c8:4d:64:5f:7e:d6:bd:dc:62:e9:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EA:75:99:88:1E:92:81:AD:D8:6B:E5:3C:A8:A6:AC:36:45:21:DF
            X509v3 Authority Key Identifier:
                keyid:A0:96:C6:6C:52:27:50:DD:8B:28:AE:26:18:2F:90:FE:99:95:4B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A096C66C522750DD8B28AE26182F90FE99954BFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1qfcPZPy5YYoV1gY81dH4JkQUGZvD1vhuVgffrFiQ3L/2/A096C66C522750DD8B28AE26182F90FE99954BFF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:00:23:0b:3d:25:09:2d:3a:f7:40:58:7e:6e:ba:1e:38:da:
         ee:49:1f:f1:27:86:4b:1d:6b:8f:63:eb:be:7e:9e:5e:9c:28:
         40:4e:4e:95:e8:54:ef:d3:f3:a2:f2:ef:c9:9c:64:1c:1e:29:
         43:bd:c6:f5:de:15:12:00:c7:ca:15:85:75:47:31:5e:a0:5a:
         9d:b9:bd:1b:df:d2:b6:6a:d4:f8:25:81:31:e0:79:b3:13:f1:
         c3:75:3a:eb:ad:a7:9e:96:2f:be:c3:9c:cb:17:c3:26:36:25:
         20:4c:51:45:7f:30:32:cd:c9:86:39:ec:3d:bc:63:e3:75:4a:
         f8:6b:2b:37:46:17:ca:e9:f5:13:05:2d:b4:69:9c:7f:95:25:
         9f:45:af:f6:32:75:11:de:f4:25:0d:22:49:a8:64:db:07:c9:
         70:5b:3e:20:83:a9:ce:4f:80:3e:15:68:d4:87:80:db:95:39:
         41:66:86:83:70:c0:5c:87:fe:c0:8c:22:48:d4:44:1e:64:46:
         91:12:ca:a0:7c:72:41:4e:04:12:2b:ea:5b:f8:60:8d:e5:2b:
         9b:c2:1f:00:77:e3:64:af:62:1d:01:2d:fe:d7:be:c3:d2:76:
         c7:78:b9:a2:a6:14:18:2b:83:73:0f:46:25:03:56:35:a1:0b:
         f9:a0:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----