Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
File:                     8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft (raw, json)
Hash identifier:          AzZA1OTOGwe8CQXvZ3Rp521vswy2dtDdm4h8d0utVok=
Subject key identifier:   A7:3E:41:02:89:ED:23:04:56:24:E4:1E:7E:EB:B9:E2:E6:1D:41:D8
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Certificate issuer:       /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial:       5592E500C723A18CFAD229DA18CE5F87D2CE69E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
Manifest number:          04CE
Signing time:             Sat 10 Oct 2026 16:06:43 +0000
Manifest this update:     Sat 10 Oct 2026 16:01:43 +0000
Manifest next update:     Sun 11 Oct 2026 18:17:43 +0000
Files and hashes:         1: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (hash: Kbpv8kUnzf5az+pCSyJ9NVCmqhxQYv9hK3Ucdq4YVWU=)
                          2: 3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (hash: 4p8TTYA6CohQDNLOFM1JNtmKJl01U4tB/4HuWZa5Xv8=)
                          3: 323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (hash: 387xzk9amVofYO5ZMB/wMAqJKQSe9wFogKsEwXMaigY=)
                          4: 3133312e302e34342e302f32322d3234203d3e20313938393439.roa (hash: KL/RirT659qr2cYiYysDMZCYu1/dbH1Lr0UF+97slQ8=)
                          5: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl (hash: wQiFAefLeh7wnVRrIvpBq8hOFg/x0qOJqaexayOgoSs=)
                          6: 3137372e38362e33322e302f32322d3234203d3e20313938393439.roa (hash: 8tGsYATeBYGcrz62TMStiMnlW9X911Vo1z1doJxibOo=)
                          7: 323830343a3732303a3a2f33322d3438203d3e20313938393439.roa (hash: 7hN8AzuP0FzNJCEVeJslaqlAsudTs85gl0B4zSn/YFY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
                          rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 18:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:e5:00:c7:23:a1:8c:fa:d2:29:da:18:ce:5f:87:d2:ce:69:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
        Validity
            Not Before: Oct 10 16:01:43 2026 GMT
            Not After : Oct 11 18:17:43 2026 GMT
        Subject: CN=A73E410289ED23045624E41E7EEBB9E2E61D41D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:1b:30:6e:81:58:98:9a:1a:2a:38:9d:d0:
                    35:3d:14:6c:34:de:cc:9d:07:b3:a9:8f:06:a5:15:
                    b5:48:97:f9:40:39:21:b2:b9:be:f0:92:25:de:2b:
                    61:6b:8e:db:eb:53:70:dd:2f:8a:29:7d:7e:55:df:
                    bf:c4:4b:bc:5b:9f:95:3e:cc:df:74:8c:40:c6:07:
                    8f:e5:b7:39:6b:0f:45:07:41:21:c4:e9:6c:11:03:
                    35:20:ef:3d:56:40:7b:a3:a0:cc:30:f8:a7:42:cf:
                    7d:c7:96:d9:42:e6:6b:ce:41:1c:32:a0:b3:48:64:
                    98:c0:02:51:a2:b6:0e:a4:7d:c1:6e:53:a9:4a:10:
                    27:d8:ec:15:7e:67:6c:41:ec:45:37:f8:fe:82:e6:
                    8f:5a:08:07:25:24:37:4b:91:52:f5:fa:68:b0:2f:
                    21:52:97:48:f7:76:b0:2b:3d:fd:27:fe:9f:ad:08:
                    cc:cf:90:37:68:54:72:55:5c:ee:11:a7:9f:16:66:
                    7a:d0:39:97:8f:9a:69:60:51:39:f5:60:76:97:ea:
                    b7:ea:59:f5:df:0b:02:a7:a1:44:a9:bf:21:03:41:
                    d3:93:fa:ea:a3:d4:31:d2:03:b1:40:80:4a:f9:cf:
                    55:70:d0:3d:ba:ed:07:ea:60:96:de:80:d6:0c:a0:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3E:41:02:89:ED:23:04:56:24:E4:1E:7E:EB:B9:E2:E6:1D:41:D8
            X509v3 Authority Key Identifier:
                keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:8e:15:bd:18:4e:60:f2:00:6c:28:9b:56:3f:19:07:be:f3:
         da:e9:12:d2:4e:ef:80:95:d9:12:2f:47:5d:90:84:8d:43:8c:
         a4:49:9c:f1:77:e0:ab:c5:cf:c2:29:ba:bf:61:81:56:d9:cb:
         c9:6d:a0:95:e3:98:2f:6c:72:6f:3d:f6:14:6b:6e:b0:56:f6:
         a9:c0:27:89:0c:60:d4:1b:7c:13:40:c5:88:c3:35:6c:74:d2:
         88:c4:ba:8e:66:48:e1:d3:4e:ea:67:ec:0e:79:10:18:3b:4d:
         16:27:af:94:f8:04:fa:b8:94:3a:07:49:bd:cd:03:97:e8:0b:
         77:12:94:7e:a8:f0:6d:89:96:d1:4e:88:3d:22:b5:f7:fd:86:
         67:b6:e3:0d:df:13:59:6e:4e:52:37:65:67:85:fc:97:cc:f8:
         9e:2d:57:24:69:cf:2c:28:ee:9f:17:fd:f7:3c:ba:16:08:57:
         38:e4:c1:e2:e6:97:79:0e:92:4d:37:b7:d2:7f:46:d7:ae:9a:
         f0:50:b0:26:7e:3f:7a:53:37:8a:35:44:7f:ad:dd:ab:20:1b:
         13:5e:72:55:06:e3:71:73:a8:3b:23:8e:a2:a1:f7:0b:c2:e6:
         48:89:96:5e:4b:e8:71:0b:61:aa:6b:03:6e:35:53:69:4b:b0:
         7f:76:8a:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVZLlAMcjoYz60inaGM5fh9LOaeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2RkQ3M0I3RTI0RTcwNzcxMkVDMDA2MDQ3MUQ0NkVE
REMxRDBBNTAeFw0yNjEwMTAxNjAxNDNaFw0yNjEwMTExODE3NDNaMDMxMTAvBgNV
BAMTKEE3M0U0MTAyODlFRDIzMDQ1NjI0RTQxRTdFRUJCOUUyRTYxRDQxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktRswboFYmJoaKjid0DU9FGw0
3sydB7OpjwalFbVIl/lAOSGyub7wkiXeK2FrjtvrU3DdL4opfX5V37/ES7xbn5U+
zN90jEDGB4/ltzlrD0UHQSHE6WwRAzUg7z1WQHujoMww+KdCz33HltlC5mvOQRwy
oLNIZJjAAlGitg6kfcFuU6lKECfY7BV+Z2xB7EU3+P6C5o9aCAclJDdLkVL1+miw
LyFSl0j3drArPf0n/p+tCMzPkDdoVHJVXO4Rp58WZnrQOZePmmlgUTn1YHaX6rfq
WfXfCwKnoUSpvyEDQdOT+uqj1DHSA7FAgEr5z1Vw0D267QfqYJbegNYMoDfjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpz5BAontIwRWJOQefuu54uYdQdgwHwYDVR0j
BBgwFoAUjG/XO34k5wdxLsAGBHHUbt3B0KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlN
OGUvMS84QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkZENzNCN0UyNEU3MDc3
MTJFQzAwNjA0NzFENDZFRERDMUQwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlNOGUvMS84
QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0I4VvRhOYPIAbCibVj8ZB77z2ukS0k7vgJXZEi9HXZCEjUOMpEmc8Xfgq8XP
wim6v2GBVtnLyW2gleOYL2xybz32FGtusFb2qcAniQxg1Bt8E0DFiMM1bHTSiMS6
jmZI4dNO6mfsDnkQGDtNFievlPgE+riUOgdJvc0Dl+gLdxKUfqjwbYmW0U6IPSK1
9/2GZ7bjDd8TWW5OUjdlZ4X8l8z4ni1XJGnPLCjunxf99zy6FghXOOTB4uaXeQ6S
TTe30n9G166a8FCwJn4/elM3ijVEf63dqyAbE15yVQbjcXOoOyOOoqH3C8LmSImW
XkvocQthqmsDbjVTaUuwf3aKqA==
-----END CERTIFICATE-----