Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft
File:                     99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft (raw, json)
Hash identifier:          HskFcZqh71ZXuBiNyfDnVfvicm/lngWmLHVJg8YNnpA=
Subject key identifier:   0F:14:A6:34:A3:C4:0D:55:42:FA:E0:C8:1C:A5:3F:3D:99:6C:DD:CF
Authority key identifier: 99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD
Certificate issuer:       /CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD
Certificate serial:       14C75F0088822BAECB5002DB7CB68523D7BDDC57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft
Manifest number:          022D
Signing time:             Wed 28 Oct 2026 04:13:09 +0000
Manifest this update:     Wed 28 Oct 2026 04:08:09 +0000
Manifest next update:     Thu 29 Oct 2026 05:41:09 +0000
Files and hashes:         1: 3139322e3134312e3233382e302f32332d3233203d3e20323637343833.roa (hash: B1Lh3J8cKt0N+PzO27Co9RIoVyKs7v3XWs1jL5eI6i4=)
                          2: 99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl (hash: n8w7CFkn+QUnviEiSKQWMx6Zz7quvL+uv39mcUDDwvI=)
                          3: 3139322e3134312e3233382e302f32342d3234203d3e20323637343833.roa (hash: pDKFuLxcxlZXPez4W3GIKfU1xFBu69D2fadFgMEZPE8=)
                          4: 3139322e3134312e3233392e302f32342d3234203d3e20323637343833.roa (hash: fRup30GLCEb0f9KL0S4k0m2dJ5op8zCuHrHNavQDdcI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl
                          rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 05:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c7:5f:00:88:82:2b:ae:cb:50:02:db:7c:b6:85:23:d7:bd:dc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD
        Validity
            Not Before: Oct 28 04:08:09 2026 GMT
            Not After : Oct 29 05:41:09 2026 GMT
        Subject: CN=0F14A634A3C40D5542FAE0C81CA53F3D996CDDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:e8:22:f6:df:08:fd:42:81:33:a8:78:f6:
                    7c:d1:51:76:14:25:cb:fe:fe:d5:2a:2b:f4:9f:68:
                    b9:8b:2f:34:de:67:ed:89:9d:fe:68:2b:66:24:e7:
                    92:e4:fc:36:41:ec:78:9a:dc:a0:4f:2b:36:94:64:
                    08:12:9b:67:8b:96:35:f1:c9:d0:f0:fd:c7:6a:03:
                    2f:cc:47:40:f9:fd:2d:f5:d6:98:c6:6a:ee:20:0c:
                    b6:e3:20:59:75:98:4f:5e:1b:81:0c:06:67:de:bb:
                    17:27:95:3c:b7:95:0a:79:8d:f3:b6:11:52:17:af:
                    bc:1b:60:3d:7a:5d:72:67:64:cd:4f:5c:a8:93:b1:
                    71:26:71:56:55:14:cf:31:83:a1:8f:66:86:85:d4:
                    5b:4b:22:48:42:c2:6f:51:99:8b:6d:af:91:7e:f0:
                    e5:28:ba:9d:57:e6:38:ec:86:f9:41:bf:32:e3:d5:
                    6a:88:9b:d9:3e:4a:e3:c5:be:a1:4e:a4:75:cf:84:
                    df:59:5c:5e:a6:9c:2f:78:d4:75:95:e9:42:ed:71:
                    90:a1:3c:41:f8:c4:52:a3:b6:eb:c3:72:8c:c3:6f:
                    39:ad:af:56:38:f3:91:e8:06:78:15:0f:11:c0:f4:
                    97:82:f5:d7:92:43:5f:96:ff:40:0f:bf:22:ab:c1:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:14:A6:34:A3:C4:0D:55:42:FA:E0:C8:1C:A5:3F:3D:99:6C:DD:CF
            X509v3 Authority Key Identifier:
                keyid:99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:0f:4c:8f:0c:29:dc:9a:d1:13:1b:cb:83:95:a7:bd:23:
         73:6f:3d:b4:c0:00:a0:a0:fb:84:98:b4:d6:e7:e0:2d:89:38:
         f5:85:45:b7:66:cb:b0:ff:89:fc:f8:a4:70:58:eb:61:d8:06:
         42:63:c3:17:24:ce:43:9e:fd:a3:0a:6c:ec:11:18:18:7f:fa:
         3f:01:55:5b:1d:35:69:2b:79:21:a2:44:73:e5:a8:71:c3:5f:
         20:4b:09:c6:f6:74:64:f7:a9:62:f3:bb:b0:90:dc:44:d9:58:
         7c:2b:15:91:db:99:53:86:1f:fe:87:ac:c9:4b:cb:fd:b2:0e:
         74:48:5f:18:83:91:d9:87:65:83:95:fc:60:ee:80:da:db:c5:
         85:ab:bf:60:02:ec:1c:63:f4:73:b6:4b:45:f4:b7:6b:31:76:
         65:08:64:5d:43:3c:1b:70:81:68:8c:49:7c:04:b3:d1:6e:07:
         63:c5:f2:f2:60:ea:6d:67:12:4b:9e:30:7d:66:db:44:9d:51:
         e3:8e:a1:27:06:b8:0d:63:50:52:04:b1:c0:61:21:b1:5c:4c:
         a2:bd:17:3f:70:bb:c5:e6:12:3f:c7:9b:ad:9c:a6:5a:6b:46:
         8e:1b:b7:b5:52:fe:53:da:d8:ee:0e:12:29:f2:48:11:ab:12:
         60:f1:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:20:57 2026 by rpki-client