Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft
File:                     26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft (raw, json)
Hash identifier:          K9REFqbYU21cl/hhpvNQ8xKTOgDCmtXdKiYQFLnEC7w=
Subject key identifier:   BB:FE:52:9B:60:93:FC:75:1C:1C:48:63:8C:5F:9C:06:BD:A6:27:E9
Authority key identifier: 26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02
Certificate issuer:       /CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802
Certificate serial:       0F5D6901E21C81DDC19579D698E2E8D5AA3EC016
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft
Manifest number:          021A
Signing time:             Sun 01 Nov 2026 22:14:55 +0000
Manifest this update:     Sun 01 Nov 2026 22:09:55 +0000
Manifest next update:     Tue 03 Nov 2026 00:58:55 +0000
Files and hashes:         1: 3132382e3230312e3135322e302f32322d3332203d3e20323636363333.roa (hash: BCER9vceTLRBuVU5yloigOk/t9Jd9Trd5spEfBbGScY=)
                          2: 323830343a336566633a3a2f33322d313238203d3e20323636363333.roa (hash: tOGcDd6mjwyktXSDNCFVdcpPhN4wpdRr7ikTXH+68k8=)
                          3: 26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl (hash: zLa0ogfg4aDhwvk3UnHofjtln1YAJbtkSP2ZOKx3K1s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl
                          rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5d:69:01:e2:1c:81:dd:c1:95:79:d6:98:e2:e8:d5:aa:3e:c0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802
        Validity
            Not Before: Nov  1 22:09:55 2026 GMT
            Not After : Nov  3 00:58:55 2026 GMT
        Subject: CN=BBFE529B6093FC751C1C48638C5F9C06BDA627E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:51:13:f7:22:6a:68:6c:70:2d:0b:39:c9:
                    ab:5d:6f:f0:5c:21:d0:9c:63:65:ae:ad:9f:07:e2:
                    7d:d4:9d:42:bb:f9:52:8a:f7:c7:d3:88:58:e9:f8:
                    c3:8b:83:40:87:99:8a:67:21:34:08:3e:9a:b6:85:
                    57:b1:c3:99:10:b3:b1:73:79:4f:72:e0:68:bc:d0:
                    cf:d5:5b:c0:db:50:3f:ae:e1:1e:d3:c3:78:d0:a0:
                    54:94:ae:df:7f:8d:fd:8c:e9:07:61:1b:60:e4:22:
                    c7:2b:ab:e3:62:08:aa:ad:fe:67:64:70:05:2a:b8:
                    81:6a:14:36:73:d1:86:69:74:ff:76:9a:6c:3f:75:
                    0c:4e:c8:48:dc:e5:9c:55:e0:7e:9b:aa:db:0d:c0:
                    31:bf:7b:0c:c9:18:3a:84:35:31:8f:21:4d:d3:f2:
                    f5:7d:dd:e8:76:fc:bd:4b:a7:19:48:41:7b:dd:1e:
                    e3:12:28:84:8b:da:c5:8d:a5:18:50:b0:8a:40:2f:
                    fc:1f:7a:c0:d1:de:f8:d9:c0:f0:b5:c6:35:d4:dc:
                    cd:66:d6:25:7d:3d:80:79:69:89:e1:72:12:e7:a0:
                    e6:5c:f5:e2:63:83:55:6b:63:24:5c:55:c4:83:f5:
                    e0:1a:8e:74:8f:50:0c:b9:e7:bd:94:fc:5b:f9:b7:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:52:9B:60:93:FC:75:1C:1C:48:63:8C:5F:9C:06:BD:A6:27:E9
            X509v3 Authority Key Identifier:
                keyid:26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:73:c7:9f:d9:6f:2f:0c:f9:4d:f3:72:d3:a2:47:a1:06:e7:
         47:d2:8d:8e:88:cc:be:b2:c9:a1:eb:db:95:5c:93:b0:e3:1f:
         96:30:87:2f:08:db:fb:3d:1d:d5:ec:c4:d5:1f:52:5c:2b:77:
         de:c5:cf:10:90:2f:2c:69:77:c2:78:e8:07:1b:e8:01:69:92:
         cd:f7:15:36:01:ca:02:9a:74:0b:c3:dc:26:a7:50:49:5e:ad:
         4f:42:d8:64:82:cf:1d:71:98:df:15:0d:34:9d:68:e8:f5:82:
         90:3c:e3:92:d8:33:3b:89:62:c2:ae:ab:a3:78:71:6b:b3:2a:
         50:34:e6:a4:f2:1e:0b:bc:61:13:04:82:0b:2b:e4:3d:b9:a5:
         b2:4c:1c:8f:72:45:05:a2:81:02:b6:c6:a2:22:d8:35:65:67:
         c6:a3:aa:c0:50:30:d1:34:3c:23:1c:73:ac:79:dc:90:fe:27:
         4f:2a:40:ef:27:b8:9a:70:66:41:bd:fc:e2:d5:0c:16:1c:ad:
         b0:b1:c9:6f:0f:82:1c:ed:98:0f:0f:e2:48:dc:fd:ef:24:25:
         94:0f:47:d0:37:7f:9c:59:9d:44:67:27:93:c3:02:9f:f0:65:
         a8:db:ef:ed:9f:bb:d0:70:17:5d:9b:8c:7f:ee:ec:fc:fb:e7:
         00:64:29:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD11pAeIcgd3BlXnWmOLo1ao+wBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZCQjBBOURFRUIxREUyN0Q2QjM3MTA3OUY4MUNBQkRC
Q0Q2QjgwMjAeFw0yNjExMDEyMjA5NTVaFw0yNjExMDMwMDU4NTVaMDMxMTAvBgNV
BAMTKEJCRkU1MjlCNjA5M0ZDNzUxQzFDNDg2MzhDNUY5QzA2QkRBNjI3RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaFET9yJqaGxwLQs5yatdb/Bc
IdCcY2WurZ8H4n3UnUK7+VKK98fTiFjp+MOLg0CHmYpnITQIPpq2hVexw5kQs7Fz
eU9y4Gi80M/VW8DbUD+u4R7Tw3jQoFSUrt9/jf2M6QdhG2DkIscrq+NiCKqt/mdk
cAUquIFqFDZz0YZpdP92mmw/dQxOyEjc5ZxV4H6bqtsNwDG/ewzJGDqENTGPIU3T
8vV93eh2/L1LpxlIQXvdHuMSKISL2sWNpRhQsIpAL/wfesDR3vjZwPC1xjXU3M1m
1iV9PYB5aYnhchLnoOZc9eJjg1VrYyRcVcSD9eAajnSPUAy5572U/Fv5t9UvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUu/5Sm2CT/HUcHEhjjF+cBr2mJ+kwHwYDVR0j
BBgwFoAUJrsKne6x3ifWs3EHn4HKvbzWuAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkQySEo2R0N2cFNIMnh5VWlMb0NQd2VONVZzQW0xMUxZSEFQazUxVkhk
aEgvMC8yNkJCMEE5REVFQjFERTI3RDZCMzcxMDc5RjgxQ0FCREJDRDZCODAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QkIwQTlERUVCMURFMjdE
NkIzNzEwNzlGODFDQUJEQkNENkI4MDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkQySEo2R0N2cFNIMnh5VWlMb0NQd2VONVZzQW0xMUxZSEFQazUxVkhkaEgvMC8y
NkJCMEE5REVFQjFERTI3RDZCMzcxMDc5RjgxQ0FCREJDRDZCODAyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUnPHn9lvLwz5TfNy06JHoQbnR9KNjojMvrLJoevblVyTsOMfljCHLwjb+z0d
1ezE1R9SXCt33sXPEJAvLGl3wnjoBxvoAWmSzfcVNgHKApp0C8PcJqdQSV6tT0LY
ZILPHXGY3xUNNJ1o6PWCkDzjktgzO4liwq6ro3hxa7MqUDTmpPIeC7xhEwSCCyvk
Pbmlskwcj3JFBaKBArbGoiLYNWVnxqOqwFAw0TQ8IxxzrHnckP4nTypA7ye4mnBm
Qb384tUMFhytsLHJbw+CHO2YDw/iSNz97yQllA9H0Dd/nFmdRGcnk8MCn/BlqNvv
7Z+70HAXXZuMf+7s/PvnAGQpEg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 23:56:15 2026 by rpki-client