Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
File:                     8F7C897DFF70774947A63DAC93567C79586D1B6C.mft (raw, json)
Hash identifier:          kwXK2kWkDHFEshcxnTaWP0hw0eLRQJkS6/GfPTJHFF0=
Subject key identifier:   7B:88:31:ED:AF:DC:06:DC:98:A9:84:FD:0B:1E:1E:04:2C:DA:6E:21
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       21B2C13B5D21C04DBD34CBAA717468EC86C9681A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
Manifest number:          04D0
Signing time:             Wed 14 Oct 2026 06:13:53 +0000
Manifest this update:     Wed 14 Oct 2026 06:08:53 +0000
Manifest next update:     Thu 15 Oct 2026 06:44:53 +0000
Files and hashes:         1: 3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (hash: GqN5IX+bmxqmm+8/1bjCat4WBG3v7hsNsZkjjn96TaQ=)
                          2: 8F7C897DFF70774947A63DAC93567C79586D1B6C.crl (hash: zDRcc2+oj5MxaFYr9L1gBKRUD26VIydfO4lUCaqHAUU=)
                          3: 323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (hash: UjzRcYc/0vB4I0K2cDjkR6rb7/AVeHCSES4Q4zPEgPE=)
                          4: 3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa (hash: OS68o1TGNwneKN/uHeQ3QEUgEwYru5Aj5p0IxB/BEwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
                          rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b2:c1:3b:5d:21:c0:4d:bd:34:cb:aa:71:74:68:ec:86:c9:68:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Oct 14 06:08:53 2026 GMT
            Not After : Oct 15 06:44:53 2026 GMT
        Subject: CN=7B8831EDAFDC06DC98A984FD0B1E1E042CDA6E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:e5:bd:a9:c1:8f:9a:5e:ad:d2:d5:04:d2:
                    80:75:2e:ba:22:e8:84:13:f2:10:34:14:ac:4b:be:
                    29:1a:c4:49:33:88:51:fc:2f:09:00:45:0e:9f:c5:
                    af:6b:3f:f2:2d:5e:62:a7:4a:5c:a8:bd:7c:92:34:
                    78:3d:72:1b:3c:33:b5:7c:3c:2a:b7:5e:39:18:3a:
                    a2:27:d8:70:57:9b:7b:80:17:89:8e:55:b0:d6:5a:
                    f0:5c:d5:38:59:0e:ad:e3:d6:26:c9:4b:f7:6f:62:
                    1f:3f:b5:84:8e:e2:85:92:e4:43:bc:72:c2:c5:62:
                    f8:4c:fa:03:e4:33:0b:47:a8:50:56:20:d5:e6:1b:
                    f5:33:5b:97:54:31:f4:ad:bc:38:4b:fe:5f:1e:4f:
                    33:70:ef:de:62:bc:4d:5f:40:8d:6b:37:f6:93:23:
                    5f:03:9e:ee:35:5b:33:46:fc:88:84:e8:64:ee:aa:
                    73:14:0e:20:1f:12:b1:7e:00:7d:c0:87:23:91:0e:
                    6a:bb:90:ba:da:8e:b6:3a:5b:21:d0:8e:de:93:51:
                    e9:66:5c:e0:e5:6e:02:b2:76:ca:50:04:1a:b2:57:
                    29:31:86:7e:d9:04:e6:83:55:f8:fa:79:7d:30:df:
                    ff:51:5a:c2:bb:5e:f7:fd:4d:6f:03:fc:38:ac:54:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:88:31:ED:AF:DC:06:DC:98:A9:84:FD:0B:1E:1E:04:2C:DA:6E:21
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:11:46:86:ff:2c:b3:a0:20:26:bd:a0:f1:3f:34:22:1f:
         14:2b:65:42:2c:91:79:b1:a8:49:e7:06:69:c5:3f:16:68:d2:
         77:c9:58:64:4e:e6:f2:e1:e2:b8:ec:49:92:88:d9:ef:09:d8:
         d8:cb:8e:db:f7:46:c4:b6:07:a7:a0:ed:67:f0:af:8e:29:9c:
         93:5e:f3:ae:c4:4f:75:b2:18:cc:09:10:3c:d8:80:9f:f7:20:
         ba:a9:b5:6d:04:df:19:84:6f:f2:ed:8f:be:3b:37:c4:bd:b2:
         6e:92:3c:71:cb:91:94:a3:02:40:55:ef:f3:0c:d9:f9:44:c5:
         f3:0a:ce:4a:8d:07:6e:04:3b:cc:75:59:be:41:a5:74:67:7e:
         5e:97:b3:e8:e2:b1:09:92:d3:b1:2e:38:29:5d:03:9d:1d:aa:
         d9:1a:60:5d:d6:5e:62:af:97:54:6c:53:33:14:c9:96:9b:b1:
         21:6a:f4:83:99:69:5c:03:36:e1:c2:bf:a2:56:50:dd:0a:b1:
         39:3f:b2:ec:8a:56:77:aa:09:aa:7f:35:12:d3:bf:d9:24:59:
         26:2f:7a:ed:c5:46:b4:af:34:b1:1d:5c:2d:cd:5e:35:f8:40:
         95:7b:aa:44:3b:18:d0:0a:e2:72:56:43:47:4e:c3:3f:fc:f5:
         10:95:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----