Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft
File:                     14FFC8E5B952B4495755D566554505DF141BAB32.mft (raw, json)
Hash identifier:          WaN5lzn6yhj2+OVieuzl9h15N435bSrCDigGVGgIbb0=
Subject key identifier:   51:16:F3:56:BD:17:2B:80:2A:2A:C1:64:CC:D3:7B:13:5C:23:79:8F
Authority key identifier: 14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32
Certificate issuer:       /CN=14FFC8E5B952B4495755D566554505DF141BAB32
Certificate serial:       74C17D576452BE0BC5A4A7E011EEA6228ED15705
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft
Manifest number:          2A
Signing time:             Sun 11 Oct 2026 02:31:34 +0000
Manifest this update:     Sun 11 Oct 2026 02:26:34 +0000
Manifest next update:     Mon 12 Oct 2026 03:19:34 +0000
Files and hashes:         1: 323830343a333364343a3a2f33342d3438203d3e20323635343139.roa (hash: SJq2IYE9vsPDCfOWipsq6QcPWebtX+jEyYAke4gRGuc=)
                          2: 323830343a333364343a343030303a3a2f33342d3438203d3e20323635343139.roa (hash: sZbFLZ2njzqlxJnlsdOvLibdbZh/F4rqbXRgf3EDaUA=)
                          3: 3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa (hash: 0EUbvystlMssdSlG76g2yLAUrsy4ndurKDzrc1IFnK4=)
                          4: 3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa (hash: 7djI/mzJADoVc/HqfIdHOtunRtOZUSLums/vlO+A10A=)
                          5: 3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (hash: +Iq8/wIEce0ZtQ1zYpFgp0SUQxfyMJj8M0E1QOesLNo=)
                          6: 3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa (hash: yoGh4jYkG3PYTRdhPa6rknyGeIVnw1wiom463ez9miE=)
                          7: 323830343a333364343a383030303a3a2f33342d3438203d3e20323635343139.roa (hash: mteMG9HmOLRsDUyogG9QTF/K6M7ebIKpky9w6qQDpmI=)
                          8: 14FFC8E5B952B4495755D566554505DF141BAB32.crl (hash: eZDhjBpaCbfTiNqh43AkcEqc5Q/9y5+K/XDhHAwqaHA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 03:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c1:7d:57:64:52:be:0b:c5:a4:a7:e0:11:ee:a6:22:8e:d1:57:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFC8E5B952B4495755D566554505DF141BAB32
        Validity
            Not Before: Oct 11 02:26:34 2026 GMT
            Not After : Oct 12 03:19:34 2026 GMT
        Subject: CN=5116F356BD172B802A2AC164CCD37B135C23798F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:fb:a5:f9:26:bb:db:66:6e:3c:b9:6a:68:
                    34:81:f7:72:97:51:cf:af:a2:7c:83:01:7f:d0:1c:
                    c6:d6:2f:8b:18:b0:de:26:f0:f0:86:c1:59:16:04:
                    d9:cf:3a:5b:c8:4c:12:7c:30:fe:d5:a4:f7:2d:a9:
                    73:be:d6:05:25:ca:13:b7:1f:3a:6e:46:57:d3:cb:
                    d8:6a:89:55:b5:69:c9:70:83:8e:37:c7:7c:d7:ba:
                    36:5c:d0:1b:8f:96:5b:91:ee:c4:3c:f1:27:e8:d4:
                    9a:d7:6d:ab:bb:52:51:f5:bb:77:19:4f:dd:3d:31:
                    2c:ba:63:71:bb:0f:9c:95:1d:1f:02:0b:e1:79:ef:
                    69:83:7d:ef:e3:9c:9a:90:8f:e6:73:1d:95:39:36:
                    3f:07:3c:22:c9:99:cd:e9:9e:0f:ef:fc:a4:f8:3b:
                    f0:e6:48:3d:79:31:2b:be:ee:44:8b:e4:bb:22:08:
                    b0:af:a3:96:12:36:ec:e5:9b:c4:90:ca:c0:a1:4c:
                    42:08:91:79:cf:9f:b0:cc:ab:71:82:e6:16:86:f5:
                    97:29:29:01:83:ee:f7:91:62:80:f4:b9:66:a6:55:
                    ed:b5:b7:80:d2:25:7c:8d:0c:f1:f9:39:cf:f9:67:
                    eb:64:88:e6:5a:00:04:72:63:1f:7f:d0:0a:ae:0f:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:F3:56:BD:17:2B:80:2A:2A:C1:64:CC:D3:7B:13:5C:23:79:8F
            X509v3 Authority Key Identifier:
                keyid:14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:db:52:3f:76:50:03:15:45:fa:fd:06:18:83:88:9b:83:
         94:60:95:6f:53:19:ca:6c:d8:1b:7d:c9:3a:22:38:69:03:1b:
         73:38:79:a4:c8:20:05:7a:1f:d7:dc:20:9c:1d:48:e9:2d:b7:
         3f:d5:1c:a2:b8:f9:fa:c1:aa:a6:96:d7:f9:0d:27:4e:fd:93:
         36:26:31:cb:63:09:9b:e2:4f:4a:cf:d8:ae:1f:b2:a6:c5:a9:
         e5:8b:92:d2:4b:25:90:81:2e:80:1a:93:8b:a5:79:4f:d6:ac:
         cd:68:ca:22:08:e0:23:2e:68:1d:eb:3c:d3:f8:36:4b:67:2c:
         46:38:e7:79:11:96:ca:8d:73:25:46:71:cd:8e:89:26:7a:88:
         46:ea:4d:8e:66:6b:81:68:31:08:3a:99:86:ca:97:c1:4c:42:
         a2:20:4d:20:f3:5c:3f:8c:c8:99:f0:e8:8a:a6:ae:f5:7f:35:
         fa:8e:3f:2d:4a:68:f7:3d:af:6a:09:8d:dc:79:39:25:3e:5d:
         ac:f7:a9:21:13:fa:14:e0:1c:6f:42:91:c1:e5:e0:ae:b5:f0:
         67:ed:12:78:0f:dc:af:c4:a8:87:dd:ff:2a:4b:2e:1d:c9:d4:
         8c:2a:5f:be:f1:92:2d:60:df:5e:bd:2d:2c:9d:66:ef:f8:88:
         a0:34:67:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdMF9V2RSvgvFpKfgEe6mIo7RVwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkM4RTVCOTUyQjQ0OTU3NTVENTY2NTU0NTA1REYx
NDFCQUIzMjAeFw0yNjEwMTEwMjI2MzRaFw0yNjEwMTIwMzE5MzRaMDMxMTAvBgNV
BAMTKDUxMTZGMzU2QkQxNzJCODAyQTJBQzE2NENDRDM3QjEzNUMyMzc5OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOPul+Sa722ZuPLlqaDSB93KX
Uc+vonyDAX/QHMbWL4sYsN4m8PCGwVkWBNnPOlvITBJ8MP7VpPctqXO+1gUlyhO3
HzpuRlfTy9hqiVW1aclwg443x3zXujZc0BuPlluR7sQ88Sfo1JrXbau7UlH1u3cZ
T909MSy6Y3G7D5yVHR8CC+F572mDfe/jnJqQj+ZzHZU5Nj8HPCLJmc3png/v/KT4
O/DmSD15MSu+7kSL5LsiCLCvo5YSNuzlm8SQysChTEIIkXnPn7DMq3GC5haG9Zcp
KQGD7veRYoD0uWamVe21t4DSJXyNDPH5Oc/5Z+tkiOZaAARyYx9/0AquDxhRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUURbzVr0XK4AqKsFkzNN7E1wjeY8wHwYDVR0j
BBgwFoAUFP/I5blStElXVdVmVUUF3xQbqzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry
OGMvMC8xNEZGQzhFNUI5NTJCNDQ5NTc1NUQ1NjY1NTQ1MDVERjE0MUJBQjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RkZDOEU1Qjk1MkI0NDk1
NzU1RDU2NjU1NDUwNURGMTQxQkFCMzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3RyOGMvMC8x
NEZGQzhFNUI5NTJCNDQ5NTc1NUQ1NjY1NTQ1MDVERjE0MUJBQjMyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA/PbUj92UAMVRfr9BhiDiJuDlGCVb1MZymzYG33JOiI4aQMbczh5pMggBXof
19wgnB1I6S23P9Ucorj5+sGqppbX+Q0nTv2TNiYxy2MJm+JPSs/Yrh+ypsWp5YuS
0kslkIEugBqTi6V5T9aszWjKIgjgIy5oHes80/g2S2csRjjneRGWyo1zJUZxzY6J
JnqIRupNjmZrgWgxCDqZhsqXwUxCoiBNIPNcP4zImfDoiqau9X81+o4/LUpo9z2v
agmN3Hk5JT5drPepIRP6FOAcb0KRweXgrrXwZ+0SeA/cr8Soh93/KksuHcnUjCpf
vvGSLWDfXr0tLJ1m7/iIoDRnaA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:56:50 2026 by rpki-client