Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
File:                     60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft (raw, json)
Hash identifier:          qFik5VEs3pCySZvYyFd632KGDtnihjwgX3Moi+fQvW8=
Subject key identifier:   37:9A:48:2F:AA:93:2A:58:FD:A3:0D:B5:06:28:F4:9E:B7:11:7E:55
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       5E0AD9D5B8AD50040E7B8E5D01AA661D387D13E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
Manifest number:          02A9
Signing time:             Tue 27 Oct 2026 18:02:57 +0000
Manifest this update:     Tue 27 Oct 2026 17:57:57 +0000
Manifest next update:     Wed 28 Oct 2026 21:55:57 +0000
Files and hashes:         1: AS52706.roa (hash: tMRYhct67qQqjFg94jjsAmhPxnKOiqpZnzjl66FKEQg=)
                          2: 60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl (hash: s+M0/VcavG1LOzLJFGXYcOdNwDHKVs0Y+QsVxdHEzJI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 21:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0a:d9:d5:b8:ad:50:04:0e:7b:8e:5d:01:aa:66:1d:38:7d:13:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Oct 27 17:57:57 2026 GMT
            Not After : Oct 28 21:55:57 2026 GMT
        Subject: CN=379A482FAA932A58FDA30DB50628F49EB7117E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:00:34:74:99:ef:9a:16:0e:55:86:75:74:
                    6d:be:b8:72:62:7a:5c:1c:7d:e6:92:bf:39:a4:ef:
                    e4:db:f4:25:ee:80:34:6f:8d:8c:bf:7e:27:a8:9f:
                    e6:bf:70:8e:c6:e9:f4:2a:93:6b:b1:8a:b0:5a:ac:
                    9d:d6:41:4c:cd:ab:33:88:89:45:e6:6f:23:10:b1:
                    d4:1d:03:09:08:11:c5:da:08:03:6a:fb:cd:73:19:
                    86:fa:6d:26:19:d0:4b:56:66:08:cc:c3:49:8e:2a:
                    3d:9a:b6:e6:13:8f:87:58:75:f1:e2:44:99:30:16:
                    21:18:85:fa:66:02:bd:b0:22:f3:b9:ff:79:ed:38:
                    09:02:8e:55:83:f9:89:e7:30:08:3c:a5:77:36:39:
                    a3:09:40:be:65:a1:f6:4a:e2:e3:c0:05:01:5a:40:
                    fa:87:fd:75:f4:6c:e5:51:b3:06:5a:1f:4c:21:24:
                    da:82:7d:f7:81:db:90:fc:4a:08:5c:e6:1c:a1:58:
                    b8:ef:dc:43:0d:39:c3:22:aa:dc:fe:98:eb:81:10:
                    fb:79:5c:b3:63:4e:66:98:03:ae:b5:35:e5:a6:e3:
                    62:51:40:14:cc:65:fa:da:5b:c0:97:20:8c:cc:ff:
                    66:57:8c:14:ff:04:38:e6:fd:7a:b9:5e:74:d6:a3:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:48:2F:AA:93:2A:58:FD:A3:0D:B5:06:28:F4:9E:B7:11:7E:55
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:0f:d6:a8:28:bc:ab:c4:86:c2:cc:aa:9a:fb:f2:ca:ac:
         43:b2:b8:17:73:21:e2:23:55:45:3b:f9:72:cf:c3:6a:2e:4d:
         9d:b8:7e:f0:96:f2:e1:97:31:a4:11:c8:a1:10:64:61:7a:f4:
         a3:51:94:69:78:8b:2d:32:60:26:0a:36:80:96:e9:6c:b6:df:
         9b:8c:7e:09:fb:01:59:ef:d2:bc:42:68:a5:89:01:8a:5a:b7:
         75:63:35:c1:10:36:7e:c8:06:c9:e8:f5:bd:14:14:3e:e9:4d:
         85:cf:8a:19:fe:a6:2e:20:89:70:da:39:8e:61:69:0d:f6:88:
         03:20:63:8a:d3:94:69:c3:8e:80:bb:af:34:5e:0c:d0:f1:1a:
         d3:01:93:c7:84:fe:a5:6e:14:11:a5:89:4f:0c:22:a6:1e:e6:
         3a:9a:4d:f2:d8:29:53:93:eb:cf:60:12:0d:15:96:fb:04:02:
         37:eb:1a:42:82:cc:7a:04:c2:c0:c1:86:73:0e:95:27:b6:bb:
         32:4c:42:7c:03:76:9d:e3:1b:c6:aa:52:be:db:be:c5:ef:d5:
         61:30:9e:8b:b0:19:06:c8:96:1d:61:bc:14:6d:a1:64:39:85:
         13:db:d9:00:e3:e0:8c:4c:1a:0f:d1:1c:76:8c:f3:90:ef:1c:
         a8:aa:27:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXgrZ1bitUAQOe45dAapmHTh9E+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNjEwMjcxNzU3NTdaFw0yNjEwMjgyMTU1NTdaMDMxMTAvBgNV
BAMTKDM3OUE0ODJGQUE5MzJBNThGREEzMERCNTA2MjhGNDlFQjcxMTdFNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQgA0dJnvmhYOVYZ1dG2+uHJi
elwcfeaSvzmk7+Tb9CXugDRvjYy/fieon+a/cI7G6fQqk2uxirBarJ3WQUzNqzOI
iUXmbyMQsdQdAwkIEcXaCANq+81zGYb6bSYZ0EtWZgjMw0mOKj2atuYTj4dYdfHi
RJkwFiEYhfpmAr2wIvO5/3ntOAkCjlWD+YnnMAg8pXc2OaMJQL5lofZK4uPABQFa
QPqH/XX0bOVRswZaH0whJNqCffeB25D8Sghc5hyhWLjv3EMNOcMiqtz+mOuBEPt5
XLNjTmaYA661NeWm42JRQBTMZfraW8CXIIzM/2ZXjBT/BDjm/Xq5XnTWo1tvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUN5pIL6qTKlj9ow21Bij0nrcRflUwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhXMUcvMC82
MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL8UP1qgovKvEhsLMqpr78sqsQ7K4F3Mh4iNVRTv5cs/Dai5Nnbh+8Jby4Zcx
pBHIoRBkYXr0o1GUaXiLLTJgJgo2gJbpbLbfm4x+CfsBWe/SvEJopYkBilq3dWM1
wRA2fsgGyej1vRQUPulNhc+KGf6mLiCJcNo5jmFpDfaIAyBjitOUacOOgLuvNF4M
0PEa0wGTx4T+pW4UEaWJTwwiph7mOppN8tgpU5Prz2ASDRWW+wQCN+saQoLMegTC
wMGGcw6VJ7a7MkxCfAN2neMbxqpSvtu+xe/VYTCei7AZBsiWHWG8FG2hZDmFE9vZ
AOPgjEwaD9EcdozzkO8cqKonmg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 08:26:10 2026 by rpki-client