Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
File:                     2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json)
Hash identifier:          /EK/Vd66SfEL0MfXkMYXSxwAjmT3JyE/EKj4AKrd+G4=
Subject key identifier:   4C:4C:D5:20:32:F3:56:5A:80:65:B4:E4:5C:FA:85:58:E2:AB:7A:36
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       1E9EAE5F57D5FAEABA1CCED571DA189E75802C30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
Manifest number:          03AE
Signing time:             Wed 14 Oct 2026 14:21:04 +0000
Manifest this update:     Wed 14 Oct 2026 14:16:04 +0000
Manifest next update:     Thu 15 Oct 2026 17:59:04 +0000
Files and hashes:         1: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: vhbTm1vcO49uWFtqu1F9q50sOEakNJvZgWxdQlfhTB8=)
                          2: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: mkSIP5M0JqClQWq+kpE7/ygXjNlC1MvEhaW/U9qUdgM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9e:ae:5f:57:d5:fa:ea:ba:1c:ce:d5:71:da:18:9e:75:80:2c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Oct 14 14:16:04 2026 GMT
            Not After : Oct 15 17:59:04 2026 GMT
        Subject: CN=4C4CD52032F3565A8065B4E45CFA8558E2AB7A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:ee:8d:f7:a9:fa:0d:ad:d3:3c:56:b7:12:
                    49:f2:99:94:8c:73:4a:a1:20:23:f8:54:9e:06:6c:
                    ab:94:17:29:11:5c:a8:c9:63:f0:ec:dc:82:ab:19:
                    db:85:1d:bf:f3:0b:cf:f1:24:5b:6b:28:59:b4:44:
                    b5:d2:18:db:fa:ab:dd:0a:82:76:72:85:e5:fc:8e:
                    f1:b9:9b:a3:64:05:25:86:2f:e6:5d:7e:48:c7:a8:
                    1b:3d:ef:3f:e9:21:af:e4:4c:ec:0d:44:5a:2e:77:
                    26:b0:af:e2:18:20:f5:78:e1:9d:40:79:82:49:7d:
                    00:db:d2:2c:6c:9e:d6:03:8e:44:dd:01:55:f0:49:
                    e8:9b:bc:0a:61:45:5b:77:03:fd:b0:75:04:02:df:
                    37:48:cd:b4:65:9e:a7:ec:0b:4e:d4:9c:2c:a0:16:
                    82:c5:f9:e0:48:7c:1a:e5:bc:c2:78:71:5a:37:71:
                    64:b1:c2:8a:d0:05:7e:2e:d3:74:62:83:f0:34:b2:
                    2a:36:ab:0a:56:d0:4a:d3:8a:e5:08:4c:4d:58:e3:
                    ab:1e:73:f8:16:9c:99:66:24:19:bd:d5:45:35:5f:
                    cf:a3:00:f0:07:c5:21:8a:d1:7d:c9:f1:52:74:ba:
                    d6:e7:34:dd:e5:0d:a2:fd:b9:a9:6d:0a:3a:54:76:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:D5:20:32:F3:56:5A:80:65:B4:E4:5C:FA:85:58:E2:AB:7A:36
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:72:94:58:c9:49:c5:da:6e:83:1c:d1:b3:cb:f4:15:b2:4d:
         c4:aa:d6:ac:63:ba:b9:85:15:9e:c3:82:bd:a6:3e:2d:c7:93:
         9b:aa:47:f2:f6:d5:a0:e1:c2:25:83:77:eb:de:11:a4:be:92:
         90:c4:69:d0:ea:bb:38:43:e5:02:00:40:87:f7:2d:0f:9b:3e:
         35:52:94:ef:3a:a6:56:6d:c6:60:f5:2c:fd:ce:cf:80:7c:ec:
         ab:b6:d6:e0:08:60:2a:43:4d:b8:5a:9f:dc:35:6d:72:42:b8:
         32:6b:3a:7a:3c:3a:08:17:b3:57:e6:f1:14:75:42:c0:af:dc:
         d5:82:a9:b3:ea:bd:74:aa:bc:22:11:b8:00:d0:0f:52:98:f2:
         96:f7:3a:66:91:83:bb:bd:85:93:98:ac:6a:91:ae:9a:27:a4:
         13:05:f2:a2:4e:4f:9e:d4:2c:0c:2f:e5:b5:9e:ac:f9:6f:fe:
         c3:76:01:43:c7:5f:d7:67:62:1c:eb:8a:06:35:6d:79:ca:23:
         20:c6:6f:6f:e8:44:5f:07:82:7a:8f:76:7f:9b:f3:24:8a:b2:
         1a:29:c1:0f:e9:29:c0:ad:d1:57:77:c4:bb:c6:3c:3a:b5:ea:
         aa:35:df:5c:f1:a9:a9:c0:d1:67:83:bb:60:bc:15:ba:49:cf:
         a0:6e:b3:7c
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUHp6uX1fV+uq6HM7VcdoYnnWALDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3
QTQyNEQ4OTAeFw0yNjEwMTQxNDE2MDRaFw0yNjEwMTUxNzU5MDRaMDMxMTAvBgNV
BAMTKDRDNENENTIwMzJGMzU2NUE4MDY1QjRFNDVDRkE4NTU4RTJBQjdBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ee6N96n6Da3TPFa3EknymZSM
c0qhICP4VJ4GbKuUFykRXKjJY/Ds3IKrGduFHb/zC8/xJFtrKFm0RLXSGNv6q90K
gnZyheX8jvG5m6NkBSWGL+ZdfkjHqBs97z/pIa/kTOwNRFoudyawr+IYIPV44Z1A
eYJJfQDb0ixsntYDjkTdAVXwSeibvAphRVt3A/2wdQQC3zdIzbRlnqfsC07UnCyg
FoLF+eBIfBrlvMJ4cVo3cWSxworQBX4u03Rig/A0sio2qwpW0ErTiuUITE1Y46se
c/gWnJlmJBm91UU1X8+jAPAHxSGK0X3J8VJ0utbnNN3lDaL9ualtCjpUdmn/AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUTEzVIDLzVlqAZbTkXPqFWOKrejYwHwYDVR0j
BBgwFoAULCJ75t77S56wBcCsn8KEcnpCTYkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9idWs2UnBaSk55YUQ3ek1RN1cyTVlvc3ZRckZCQVpMcENwdnV6Wk4xZUhu
LzAvMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3QTQyNEQ4OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzIyN0JFNkRFRkI0QjlFQjAw
NUMwQUM5RkMyODQ3MjdBNDI0RDg5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2J1
azZScFpKTnlhRDd6TVE3VzJNWW9zdlFyRkJBWkxwQ3B2dXpaTjFlSG4vMC8yQzIy
N0JFNkRFRkI0QjlFQjAwNUMwQUM5RkMyODQ3MjdBNDI0RDg5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
CnKUWMlJxdpugxzRs8v0FbJNxKrWrGO6uYUVnsOCvaY+LceTm6pH8vbVoOHCJYN3
694RpL6SkMRp0Oq7OEPlAgBAh/ctD5s+NVKU7zqmVm3GYPUs/c7PgHzsq7bW4Ahg
KkNNuFqf3DVtckK4Mms6ejw6CBezV+bxFHVCwK/c1YKps+q9dKq8IhG4ANAPUpjy
lvc6ZpGDu72Fk5isapGumiekEwXyok5PntQsDC/ltZ6s+W/+w3YBQ8df12diHOuK
BjVtecojIMZvb+hEXweCeo92f5vzJIqyGinBD+kpwK3RV3fEu8Y8OrXqqjXfXPGp
qcDRZ4O7YLwVuknPoG6zfA==
-----END CERTIFICATE-----