Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
File:                     C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft (raw, json)
Hash identifier:          /B4jsvXBgU1nF7vPwWw0HJwaMhgzS3U2i9v4YGIo8JI=
Subject key identifier:   62:D4:55:0D:3D:5C:0B:DD:F2:4A:31:85:F4:99:C4:04:75:80:3F:1D
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       7B5C2D225DFA0303401C223B3B5A508B68D0B07C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
Manifest number:          04DA
Signing time:             Sun 01 Nov 2026 06:06:10 +0000
Manifest this update:     Sun 01 Nov 2026 06:01:10 +0000
Manifest next update:     Mon 02 Nov 2026 06:48:10 +0000
Files and hashes:         1: 3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (hash: Ms6q71FgHyV6cKM7CqMhlx7mYZDItYR/IsK7KBpXQjY=)
                          2: 323830343a366166633a3a2f34372d3437203d3e20323730333730.roa (hash: fRc2pRZ64iJ4J2JwD8MnyMRLYZH9sPqZYJ7fQAvVvHo=)
                          3: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl (hash: Sjl0RtoZWK2Gax3icFB2TPxeQ5/vrNd2ndR08g8zGYc=)
                          4: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (hash: 50oZQRSfkhIS7ifIBxYMg3fGMovPtLqRL1sxLyU68EM=)
                          5: 323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (hash: c+SP46RP2q0blQfp0k65+ly1SArA+VF+Y7cHpRdo+3M=)
                          6: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (hash: 3hqFeovOwv2/2sphyOHHFjUSMFS2dvI+u3ZCAf3BXFw=)
                          7: 3139302e38392e3134382e302f32342d3234203d3e20323730333730.roa (hash: 1LIz3EMkOFeMTBOA0NGLVvfcTo0mjGf6dVCfGISNKY4=)
                          8: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (hash: eltPjLsdeEd5MJ8Kuit+kGA7Z6cz0/Y4hxY6GVuFy1Y=)
                          9: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (hash: Nd+Yn1Fd25bfj40Hel/RcRLSShFFbt8NoGWOuxrfI9I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 06:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5c:2d:22:5d:fa:03:03:40:1c:22:3b:3b:5a:50:8b:68:d0:b0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Nov  1 06:01:10 2026 GMT
            Not After : Nov  2 06:48:10 2026 GMT
        Subject: CN=62D4550D3D5C0BDDF24A3185F499C40475803F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:3a:85:d0:d8:ec:d1:6b:4b:53:85:ef:39:
                    5e:7e:82:46:1d:2e:cd:cf:a0:d3:79:8c:ce:8a:18:
                    91:5f:62:19:0f:31:69:0e:8d:a4:13:22:bb:c0:49:
                    55:46:64:b7:39:ca:c3:c5:95:de:15:5c:23:fb:41:
                    ed:1e:ba:0e:47:db:f7:e2:ee:23:d6:78:77:85:bb:
                    ca:4e:f3:8c:52:b4:cb:79:03:b7:07:e5:70:b1:6a:
                    8b:d7:a7:de:f5:e4:f7:f7:3c:21:90:17:bb:5a:69:
                    26:79:96:5d:54:68:4f:e6:b7:fb:6c:1a:08:1e:87:
                    cc:b2:8b:52:4c:ea:32:73:bc:c2:40:5e:6f:a9:55:
                    aa:7a:c8:8e:3b:10:19:7d:14:8b:e8:60:a3:38:7e:
                    72:4f:48:73:0e:71:72:61:19:20:76:79:ea:53:52:
                    e1:8c:17:64:15:3c:45:fc:28:15:66:50:b2:80:36:
                    9f:67:29:4f:44:a7:20:af:0d:d0:bb:7f:d6:a2:58:
                    56:f5:ea:25:50:44:44:28:ba:f8:00:2d:9c:ee:d4:
                    da:7b:56:2d:45:48:38:cc:c9:66:a9:0e:0d:08:4f:
                    0d:bf:83:74:6c:6f:89:84:40:43:39:e7:5f:00:dc:
                    47:c2:a4:e9:05:f0:23:69:e0:d6:d5:cb:6e:ee:24:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:55:0D:3D:5C:0B:DD:F2:4A:31:85:F4:99:C4:04:75:80:3F:1D
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:40:f6:04:d0:0b:ee:2c:9a:0c:fc:d6:7e:4d:e8:c2:8e:
         d2:a6:9d:16:6c:ba:00:e0:44:27:4e:d2:a5:01:0e:3d:5b:ef:
         e7:6a:4e:17:49:9e:7b:2a:bf:ea:b9:aa:4a:0c:9f:61:75:4f:
         6b:7c:f3:7f:ab:2f:c3:e1:d0:f8:13:f4:27:5b:0f:1e:89:fa:
         21:86:d8:dd:b1:44:90:20:ac:f3:aa:d7:c9:2e:23:1a:d4:20:
         26:d7:5d:ff:b8:b7:ce:89:b6:7b:1e:0c:d5:92:f5:79:5c:da:
         97:0d:b0:9b:16:56:9b:6c:db:8f:18:77:2f:6c:8e:c6:4e:fb:
         59:8d:d3:fb:ea:fd:33:69:2f:68:a2:a5:a1:2e:0c:59:5a:14:
         09:63:dc:5d:9c:bd:9d:c6:7d:93:10:79:db:b1:6f:dd:24:c9:
         21:ab:37:ae:90:36:39:1e:3f:fe:5c:c9:5a:08:be:af:32:7b:
         b2:bd:ce:b1:24:0c:cc:b5:de:54:9d:9c:ba:7f:ce:cb:7d:e1:
         16:b8:32:9f:6c:c4:1b:ed:6d:91:4b:65:63:d3:ed:8f:6c:3d:
         86:35:a0:2a:ba:26:16:fc:d9:fd:f4:38:4e:56:df:e8:00:2f:
         cc:c6:3a:95:64:9f:a1:ff:67:91:b1:6d:d6:23:c0:3d:a6:7a:
         20:3c:61:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe1wtIl36AwNAHCI7O1pQi2jQsHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNjExMDEwNjAxMTBaFw0yNjExMDIwNjQ4MTBaMDMxMTAvBgNV
BAMTKDYyRDQ1NTBEM0Q1QzBCRERGMjRBMzE4NUY0OTlDNDA0NzU4MDNGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7DqF0Njs0WtLU4XvOV5+gkYd
Ls3PoNN5jM6KGJFfYhkPMWkOjaQTIrvASVVGZLc5ysPFld4VXCP7Qe0eug5H2/fi
7iPWeHeFu8pO84xStMt5A7cH5XCxaovXp9715Pf3PCGQF7taaSZ5ll1UaE/mt/ts
Gggeh8yyi1JM6jJzvMJAXm+pVap6yI47EBl9FIvoYKM4fnJPSHMOcXJhGSB2eepT
UuGMF2QVPEX8KBVmULKANp9nKU9EpyCvDdC7f9aiWFb16iVQREQouvgALZzu1Np7
Vi1FSDjMyWapDg0ITw2/g3Rsb4mEQEM5518A3EfCpOkF8CNp4NbVy27uJOsnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUYtRVDT1cC93ySjGF9JnEBHWAPx0wHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhvUU0vMS9D
NTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJVtA9gTQC+4smgz81n5N6MKO0qadFmy6AOBEJ07SpQEOPVvv52pOF0meeyq/
6rmqSgyfYXVPa3zzf6svw+HQ+BP0J1sPHon6IYbY3bFEkCCs86rXyS4jGtQgJtdd
/7i3zom2ex4M1ZL1eVzalw2wmxZWm2zbjxh3L2yOxk77WY3T++r9M2kvaKKloS4M
WVoUCWPcXZy9ncZ9kxB527Fv3STJIas3rpA2OR4//lzJWgi+rzJ7sr3OsSQMzLXe
VJ2cun/Oy33hFrgyn2zEG+1tkUtlY9Ptj2w9hjWgKromFvzZ/fQ4Tlbf6AAvzMY6
lWSfof9nkbFt1iPAPaZ6IDxhAQ==
-----END CERTIFICATE-----