Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
File:                     77B49FAE0B44A260013E4F5043DD07033113F7D0.mft (raw, json)
Hash identifier:          aB/kMl6YvCUv/vfPx9aC43kztBbxRc5oq1NPl25lrVE=
Subject key identifier:   E8:DA:52:37:7E:3D:5E:9F:C0:CF:9D:7F:AA:C6:56:96:1C:BF:6E:2F
Authority key identifier: 77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0
Certificate issuer:       /CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
Certificate serial:       4D9316F622E2081F81A7F806AF88A911F763F388
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
Manifest number:          028D
Signing time:             Mon 02 Nov 2026 08:20:00 +0000
Manifest this update:     Mon 02 Nov 2026 08:15:00 +0000
Manifest next update:     Tue 03 Nov 2026 08:59:00 +0000
Files and hashes:         1: 77B49FAE0B44A260013E4F5043DD07033113F7D0.crl (hash: xAfvKIbHw5ds5ANLXrk1K74pj2swOo+2T84fvU67nvE=)
                          2: 323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (hash: OekydxEboXttQnj/bhd3VXYL76popZsFf2yrfCqDBm4=)
                          3: 3138372e36322e37362e302f32322d3234203d3e20323639373133.roa (hash: u2oUI7R5QkY07IuQmdqBcGMHSyvxstboigHHsngLHbc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl
                          rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 08:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:93:16:f6:22:e2:08:1f:81:a7:f8:06:af:88:a9:11:f7:63:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
        Validity
            Not Before: Nov  2 08:15:00 2026 GMT
            Not After : Nov  3 08:59:00 2026 GMT
        Subject: CN=E8DA52377E3D5E9FC0CF9D7FAAC656961CBF6E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:45:b8:fd:49:f3:44:4b:81:49:07:19:77:02:
                    85:ae:05:58:8c:27:a9:b4:a2:79:3f:0e:2e:49:9f:
                    40:ef:1d:9c:e8:aa:6d:4d:d1:89:a2:9e:32:10:5f:
                    24:01:98:0e:61:d1:c2:e1:97:80:13:ba:74:12:07:
                    c1:66:c3:97:88:4b:87:99:74:88:fe:18:15:8b:bf:
                    3f:03:6d:74:5d:42:29:e3:08:b9:34:45:5b:36:9a:
                    63:c4:c1:69:db:75:d9:38:69:5f:e1:e1:80:34:cd:
                    03:b8:ac:cd:12:16:5a:98:f3:d2:33:62:e1:57:f8:
                    1e:88:f0:af:e1:1a:6b:38:df:c4:ab:30:9b:20:02:
                    6c:e2:a7:d1:2a:c9:29:c5:6e:76:8d:1d:19:1c:37:
                    7f:1b:8b:4a:b1:59:2c:c8:0e:3f:03:c2:0a:37:df:
                    6f:fe:0c:88:b4:a5:2a:db:4d:76:85:ef:5e:d6:36:
                    c9:9d:00:f3:ad:33:e9:c2:56:f5:78:dc:f8:d4:fc:
                    e6:21:6a:37:f7:b5:f3:1c:ab:78:d8:ba:c9:f5:df:
                    9b:a4:b4:d7:cc:82:b8:f5:e9:60:d9:2e:bd:c4:a1:
                    6b:27:66:0f:34:d1:c7:8b:ea:5d:60:ef:89:bf:71:
                    0c:85:b2:56:9c:8f:cf:34:79:97:ff:e4:17:64:c8:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DA:52:37:7E:3D:5E:9F:C0:CF:9D:7F:AA:C6:56:96:1C:BF:6E:2F
            X509v3 Authority Key Identifier:
                keyid:77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:12:93:c7:c2:b1:da:81:78:14:96:6d:0c:55:dc:6e:51:
         f3:fd:c0:89:63:50:aa:35:78:4c:dd:eb:09:62:83:c6:52:94:
         fe:ca:bd:27:91:56:4f:c5:fd:ec:1f:1a:c4:4b:23:7c:d6:bb:
         a3:fe:7c:58:7d:f0:e1:a9:8b:97:2b:21:43:53:c0:e2:92:3c:
         2b:5e:b1:34:6c:fa:da:f8:6b:ed:40:cd:73:b1:2c:54:d0:f7:
         42:55:ae:2f:dc:32:7e:56:46:3a:74:d8:c0:be:43:a7:a6:36:
         0b:4f:87:98:ab:b6:8a:eb:7f:ea:d2:66:37:30:d2:16:db:18:
         92:91:44:37:34:9b:3f:f4:b6:af:b9:09:cd:36:f3:b9:57:77:
         75:ba:26:53:9a:40:53:3d:4a:81:c4:41:15:dc:58:5e:56:01:
         e7:a3:d2:17:62:bf:45:5a:22:5e:3c:22:02:29:1d:f9:f9:fa:
         82:f4:99:df:a7:06:cb:37:63:67:86:4c:20:99:f0:51:48:7a:
         27:66:72:68:78:23:1e:d8:15:6e:49:b0:5c:cc:fd:08:ca:35:
         b6:e2:7b:35:6a:9f:57:5c:14:a9:2b:29:67:44:d3:df:14:9f:
         77:34:dd:a4:1f:65:c4:c4:a0:46:d2:60:46:0b:01:57:a5:79:
         4e:2f:2e:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTZMW9iLiCB+Bp/gGr4ipEfdj84gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdCNDlGQUUwQjQ0QTI2MDAxM0U0RjUwNDNERDA3MDMz
MTEzRjdEMDAeFw0yNjExMDIwODE1MDBaFw0yNjExMDMwODU5MDBaMDMxMTAvBgNV
BAMTKEU4REE1MjM3N0UzRDVFOUZDMENGOUQ3RkFBQzY1Njk2MUNCRjZFMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvRbj9SfNES4FJBxl3AoWuBViM
J6m0onk/Di5Jn0DvHZzoqm1N0YminjIQXyQBmA5h0cLhl4ATunQSB8Fmw5eIS4eZ
dIj+GBWLvz8DbXRdQinjCLk0RVs2mmPEwWnbddk4aV/h4YA0zQO4rM0SFlqY89Iz
YuFX+B6I8K/hGms438SrMJsgAmzip9EqySnFbnaNHRkcN38bi0qxWSzIDj8Dwgo3
32/+DIi0pSrbTXaF717WNsmdAPOtM+nCVvV43PjU/OYhajf3tfMcq3jYusn135uk
tNfMgrj16WDZLr3EoWsnZg800ceL6l1g74m/cQyFslacj880eZf/5BdkyMEJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6NpSN349Xp/Az51/qsZWlhy/bi8wHwYDVR0j
BBgwFoAUd7SfrgtEomABPk9QQ90HAzET99AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVR
Q1AvMC83N0I0OUZBRTBCNDRBMjYwMDEzRTRGNTA0M0REMDcwMzMxMTNGN0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3QjQ5RkFFMEI0NEEyNjAw
MTNFNEY1MDQzREQwNzAzMzExM0Y3RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVRQ1AvMC83
N0I0OUZBRTBCNDRBMjYwMDEzRTRGNTA0M0REMDcwMzMxMTNGN0QwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXTcSk8fCsdqBeBSWbQxV3G5R8/3AiWNQqjV4TN3rCWKDxlKU/sq9J5FWT8X9
7B8axEsjfNa7o/58WH3w4amLlyshQ1PA4pI8K16xNGz62vhr7UDNc7EsVND3QlWu
L9wyflZGOnTYwL5Dp6Y2C0+HmKu2iut/6tJmNzDSFtsYkpFENzSbP/S2r7kJzTbz
uVd3dbomU5pAUz1KgcRBFdxYXlYB56PSF2K/RVoiXjwiAikd+fn6gvSZ36cGyzdj
Z4ZMIJnwUUh6J2ZyaHgjHtgVbkmwXMz9CMo1tuJ7NWqfV1wUqSspZ0TT3xSfdzTd
pB9lxMSgRtJgRgsBV6V5Ti8uhA==
-----END CERTIFICATE-----