Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
File:                     A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json)
Hash identifier:          TCexrb4wD/Oaos+9aLotGuiX/rCEgjhozRFlogeGc+I=
Subject key identifier:   7B:19:4D:6B:3E:1E:60:FB:85:3F:29:84:BA:50:FF:D0:05:42:9F:7B
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       5A7750E77C37E22964A5733E3740CB5E319F6F63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
Manifest number:          04AD
Signing time:             Tue 13 Oct 2026 00:05:12 +0000
Manifest this update:     Tue 13 Oct 2026 00:00:12 +0000
Manifest next update:     Wed 14 Oct 2026 00:47:12 +0000
Files and hashes:         1: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: 0hWEoEOj1wMVXMocZxTUFZHjN5Wo52lBh8NcNDKkNDE=)
                          2: 3132382e3230312e3232302e302f32322d3233203d3e203238323737.roa (hash: N3AgCy+esuwSU9C9WKmNHIiIp40PDYATBPmGEEjwxpQ=)
                          3: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: GXHfr48mL0OTbFBsXo6729DL8vpoCqzLwnRpiGV5JUw=)
                          4: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: pr+NuLnjSj8j+ye8Gp7xVLzUQ2AdNzc97uJG2qwHGSY=)
                          5: 3132382e3230312e3232332e302f32342d3234203d3e20323734353530.roa (hash: lPMWQOahc5VXQy4aC3qSu9jbPLhoWI/+mdTuFz+QYV4=)
                          6: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: zUh5d0ilRi1kWKl+eSUSG/nXPhyikJVFYIqNwaCIunY=)
                          7: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: 8iO6hxEqaqWyvHBb4DRpLUHaoNw5yC4dDSRBBR/0cCA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:77:50:e7:7c:37:e2:29:64:a5:73:3e:37:40:cb:5e:31:9f:6f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Oct 13 00:00:12 2026 GMT
            Not After : Oct 14 00:47:12 2026 GMT
        Subject: CN=7B194D6B3E1E60FB853F2984BA50FFD005429F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:31:36:bb:01:5e:4c:41:ff:78:c8:d7:69:
                    a4:13:92:2a:d2:96:89:45:29:3a:cc:f0:47:b1:d3:
                    ac:21:30:6d:19:cf:b1:63:76:4c:70:0f:a3:92:e4:
                    16:c5:15:94:14:1d:f8:8c:ed:29:a4:17:42:9a:2f:
                    a0:fb:6b:9a:2d:87:14:2b:f0:9a:dc:a2:30:05:71:
                    dc:c0:ef:6c:f0:bd:14:67:aa:a4:20:dc:09:c2:f9:
                    44:39:f5:7d:07:14:39:9c:43:57:5e:3b:34:72:d3:
                    21:ae:5c:38:f6:f2:8b:05:55:54:46:af:57:fc:b5:
                    13:1b:a6:92:a1:e0:5d:c1:a1:be:a7:dc:2a:39:e4:
                    67:64:98:ed:f5:fd:20:5c:c1:f7:f5:fb:6a:c5:80:
                    40:8a:2d:ee:1b:84:89:97:be:73:c6:50:37:a7:88:
                    e5:c8:28:60:e7:e0:d9:6f:a7:03:4f:e0:01:42:1b:
                    24:5b:07:2a:d0:88:1a:01:ed:38:22:69:ae:5f:57:
                    97:9a:e5:00:26:88:82:35:af:b4:7d:51:e4:fd:d1:
                    81:b1:f4:75:b7:c5:14:d8:e1:45:39:0d:91:06:bf:
                    8d:f9:db:f2:16:58:43:de:48:c2:2c:06:20:91:7c:
                    c2:1c:19:31:00:7b:82:86:f9:7f:f6:04:bf:32:99:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:4D:6B:3E:1E:60:FB:85:3F:29:84:BA:50:FF:D0:05:42:9F:7B
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:05:4a:7e:ba:f7:06:4a:a3:1a:96:73:8d:67:a7:de:21:2e:
         25:54:58:98:e8:75:37:7b:7d:ba:7f:7c:ee:1b:56:94:9e:dc:
         0a:d6:9d:0e:2b:3c:43:9e:11:d5:ae:7b:37:b0:5b:ea:96:a1:
         52:53:22:76:f3:7e:b8:bb:3f:99:6c:4c:37:bc:1d:74:df:a8:
         2d:7d:fd:b9:a4:fa:8c:1b:d7:db:91:74:76:ff:d7:77:7f:84:
         00:ef:12:40:99:1e:46:3e:85:24:6e:2c:92:0c:8f:de:12:f0:
         02:68:20:7a:03:51:4f:37:07:c2:9b:89:c3:a8:c0:35:28:41:
         e1:e9:df:b0:25:f6:79:1e:04:12:1d:44:d8:b4:db:ae:a5:98:
         c7:44:d6:0e:bd:67:50:0d:df:06:74:97:93:69:00:02:42:70:
         36:99:f8:f8:4f:81:b8:33:9c:45:61:53:88:ec:22:59:da:bd:
         6f:b2:b2:38:94:ec:26:b7:2e:21:a7:9e:27:4d:8b:a3:e6:8e:
         e7:5a:a1:5c:5c:3c:b1:24:64:8b:8c:78:bd:6f:cd:8e:f5:69:
         67:31:a4:c5:f9:cb:ab:3f:22:73:28:2c:08:af:78:d3:fe:88:
         c9:b8:e4:dc:a4:fd:0e:24:3c:43:e2:a0:5e:ae:aa:ac:d0:f2:
         11:58:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:09:02 2026 by rpki-client