Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.mft
File:                     08B572D43EF9C7244018590FAD979C3EF6A3801E.mft (raw, json)
Hash identifier:          PUx41B7lghfEyunnt83Fxwfv7uUVRjYrK3PkL27HJMo=
Subject key identifier:   86:12:73:31:59:40:F7:99:2A:EB:A1:93:20:58:35:38:02:6E:43:4C
Authority key identifier: 08:B5:72:D4:3E:F9:C7:24:40:18:59:0F:AD:97:9C:3E:F6:A3:80:1E
Certificate issuer:       /CN=08B572D43EF9C7244018590FAD979C3EF6A3801E
Certificate serial:       395AE9DB3B10E20B18B4A48DC3EC20580969018E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B572D43EF9C7244018590FAD979C3EF6A3801E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.mft
Manifest number:          9B
Signing time:             Thu 29 Oct 2026 16:02:41 +0000
Manifest this update:     Thu 29 Oct 2026 15:57:41 +0000
Manifest next update:     Fri 30 Oct 2026 19:41:41 +0000
Files and hashes:         1: 323830343a386536633a3a2f33322d313238203d3e20323733343234.roa (hash: zqpfFPJ/9nzgHybgToUKjlZIBb1DcNoFTaBptmtS8uM=)
                          2: 08B572D43EF9C7244018590FAD979C3EF6A3801E.crl (hash: ghpNcpgHsjx67LQWoOdH4dPmrMH/ocVCw0tWUOPOSKs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.crl
                          rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B572D43EF9C7244018590FAD979C3EF6A3801E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 19:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5a:e9:db:3b:10:e2:0b:18:b4:a4:8d:c3:ec:20:58:09:69:01:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B572D43EF9C7244018590FAD979C3EF6A3801E
        Validity
            Not Before: Oct 29 15:57:41 2026 GMT
            Not After : Oct 30 19:41:41 2026 GMT
        Subject: CN=861273315940F7992AEBA19320583538026E434C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:e4:65:5d:a6:8b:4a:97:1b:7a:b5:43:ec:
                    ea:b7:22:df:3e:42:dd:49:6c:cc:fa:f0:08:3b:01:
                    94:0d:5e:04:94:7c:8a:6b:7c:d3:91:85:a3:ff:9d:
                    a2:0a:4f:aa:ed:ad:c4:7e:34:c0:55:cf:15:1f:ed:
                    58:09:f5:e4:ce:78:f3:82:3a:48:b8:e5:18:78:93:
                    9d:82:dc:33:b0:da:13:b8:18:1e:e8:21:b6:41:59:
                    e0:3a:a6:de:55:9e:68:0c:e2:d7:f7:46:cb:6f:b7:
                    a7:a7:2e:55:38:cc:94:fc:3a:f6:5c:ee:bd:09:0d:
                    24:c1:3d:93:b2:48:66:55:6b:2d:40:a6:2f:88:4e:
                    fc:96:74:4b:09:cd:a1:93:8f:d1:3c:7f:61:2c:14:
                    00:b1:51:fa:e9:68:71:cd:b9:b5:75:21:bd:70:68:
                    b7:55:e6:6b:13:0a:47:ad:5d:59:4a:46:36:40:e0:
                    d9:b7:39:05:c4:bb:00:d2:a1:07:8f:23:5a:32:b0:
                    ca:a4:4e:f2:0f:88:d7:2d:98:b7:18:da:ee:4e:a6:
                    68:c7:b5:0b:5d:f4:3c:4f:25:02:b7:58:16:9e:25:
                    58:19:b0:4b:06:eb:4b:23:02:9b:ae:f1:e2:6b:70:
                    97:b6:d5:af:62:2f:cf:8c:d4:55:b2:f6:09:6b:f9:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:12:73:31:59:40:F7:99:2A:EB:A1:93:20:58:35:38:02:6E:43:4C
            X509v3 Authority Key Identifier:
                keyid:08:B5:72:D4:3E:F9:C7:24:40:18:59:0F:AD:97:9C:3E:F6:A3:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B572D43EF9C7244018590FAD979C3EF6A3801E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FqJSE2RyojP3kMjFSK41MLmEfBLHPjdduj4Pyv1FEp9/0/08B572D43EF9C7244018590FAD979C3EF6A3801E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:42:62:ac:fd:3c:69:fe:e8:d4:9b:40:24:fd:58:4b:6e:
         75:de:e4:6e:90:fa:e5:9b:3a:ee:b1:8c:43:f9:1c:47:7b:7f:
         32:3b:1d:6c:c9:df:08:4a:8f:d3:6a:f2:ac:eb:db:f3:4f:9c:
         c2:9f:a6:90:d1:8f:5e:fa:4e:29:ef:55:58:ea:1d:90:90:66:
         61:f5:27:78:0f:f1:30:2d:e3:07:90:da:e2:c0:cc:3e:d5:b6:
         04:3d:80:80:98:39:4d:37:6b:f7:c5:9a:ca:79:e7:ed:71:aa:
         73:a1:79:fb:09:83:1c:c3:e2:70:c7:92:43:eb:24:63:7b:48:
         51:30:01:44:ba:5d:49:db:4b:cc:5b:6a:cb:36:8f:74:26:bd:
         39:40:e0:e1:61:54:ce:f6:15:46:da:22:dd:53:dd:d5:1e:44:
         92:fd:51:b3:c4:46:fa:95:db:d8:10:09:2a:03:a9:69:75:ec:
         ed:55:eb:33:38:80:f7:e4:3b:13:1a:7d:29:82:3b:f1:41:95:
         1e:0e:fa:e8:0d:3e:fe:51:3f:f9:35:95:c3:48:56:90:37:06:
         da:6b:51:bf:59:4a:2a:fe:74:62:4a:31:35:7f:fa:e2:3f:00:
         f9:17:2a:25:31:c7:3b:16:3f:5a:4c:58:aa:06:4c:a8:fa:47:
         ee:ba:86:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOVrp2zsQ4gsYtKSNw+wgWAlpAY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhCNTcyRDQzRUY5QzcyNDQwMTg1OTBGQUQ5NzlDM0VG
NkEzODAxRTAeFw0yNjEwMjkxNTU3NDFaFw0yNjEwMzAxOTQxNDFaMDMxMTAvBgNV
BAMTKDg2MTI3MzMxNTk0MEY3OTkyQUVCQTE5MzIwNTgzNTM4MDI2RTQzNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFORlXaaLSpcberVD7Oq3It8+
Qt1JbMz68Ag7AZQNXgSUfIprfNORhaP/naIKT6rtrcR+NMBVzxUf7VgJ9eTOePOC
Oki45Rh4k52C3DOw2hO4GB7oIbZBWeA6pt5VnmgM4tf3Rstvt6enLlU4zJT8OvZc
7r0JDSTBPZOySGZVay1Api+ITvyWdEsJzaGTj9E8f2EsFACxUfrpaHHNubV1Ib1w
aLdV5msTCketXVlKRjZA4Nm3OQXEuwDSoQePI1oysMqkTvIPiNctmLcY2u5OpmjH
tQtd9DxPJQK3WBaeJVgZsEsG60sjApuu8eJrcJe21a9iL8+M1FWy9glr+bmDAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhhJzMVlA95kq66GTIFg1OAJuQ0wwHwYDVR0j
BBgwFoAUCLVy1D75xyRAGFkPrZecPvajgB4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEZxSlNFMlJ5b2pQM2tNakZTSzQxTUxtRWZCTEhQamRkdWo0UHl2MUZF
cDkvMC8wOEI1NzJENDNFRjlDNzI0NDAxODU5MEZBRDk3OUMzRUY2QTM4MDFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4QjU3MkQ0M0VGOUM3MjQ0
MDE4NTkwRkFEOTc5QzNFRjZBMzgwMUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEZxSlNFMlJ5b2pQM2tNakZTSzQxTUxtRWZCTEhQamRkdWo0UHl2MUZFcDkvMC8w
OEI1NzJENDNFRjlDNzI0NDAxODU5MEZBRDk3OUMzRUY2QTM4MDFFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbR1CYqz9PGn+6NSbQCT9WEtudd7kbpD65Zs67rGMQ/kcR3t/MjsdbMnfCEqP
02ryrOvb80+cwp+mkNGPXvpOKe9VWOodkJBmYfUneA/xMC3jB5Da4sDMPtW2BD2A
gJg5TTdr98Waynnn7XGqc6F5+wmDHMPicMeSQ+skY3tIUTABRLpdSdtLzFtqyzaP
dCa9OUDg4WFUzvYVRtoi3VPd1R5Ekv1Rs8RG+pXb2BAJKgOpaXXs7VXrMziA9+Q7
Exp9KYI78UGVHg766A0+/lE/+TWVw0hWkDcG2mtRv1lKKv50YkoxNX/64j8A+Rcq
JTHHOxY/WkxYqgZMqPpH7rqGPA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 00:31:54 2026 by rpki-client