Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
File:                     542883AF217B55CA895036F0F5CDBCE406386E83.mft (raw, json)
Hash identifier:          6ecGp5u8uJnnmON8lKB7AZ1Hjjs3EMhDk7GxVJMwTZM=
Subject key identifier:   AD:47:7C:7D:8D:BC:20:D2:54:C3:E0:55:51:83:68:D7:95:60:CE:89
Authority key identifier: 54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
Certificate issuer:       /CN=542883AF217B55CA895036F0F5CDBCE406386E83
Certificate serial:       78E1B7B706C56CE6D121183AA1ABFF2C606C6188
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
Manifest number:          03BB
Signing time:             Mon 26 Oct 2026 17:59:26 +0000
Manifest this update:     Mon 26 Oct 2026 17:54:26 +0000
Manifest next update:     Tue 27 Oct 2026 21:30:26 +0000
Files and hashes:         1: 3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (hash: cRyL9/yQJWQDAu6hxXFetBFG32vLQBh1nwcUWNSafDc=)
                          2: 542883AF217B55CA895036F0F5CDBCE406386E83.crl (hash: 6WIAN9tYH4gYMUE7eZoRwrjgOxMsFlXke+4II7CpjFQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl
                          rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 21:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e1:b7:b7:06:c5:6c:e6:d1:21:18:3a:a1:ab:ff:2c:60:6c:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542883AF217B55CA895036F0F5CDBCE406386E83
        Validity
            Not Before: Oct 26 17:54:26 2026 GMT
            Not After : Oct 27 21:30:26 2026 GMT
        Subject: CN=AD477C7D8DBC20D254C3E055518368D79560CE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:6f:1e:42:1b:a0:85:c1:a8:d3:ad:e6:33:
                    fe:38:bb:ce:53:f9:a9:6a:e0:23:d3:76:12:9d:e2:
                    e6:97:a4:03:67:92:93:de:10:bf:80:dc:d9:f7:51:
                    50:41:82:5f:f0:25:33:06:c8:0a:c4:1c:42:10:a6:
                    9e:7b:b9:3d:0a:a0:35:97:11:ba:7e:42:5a:b8:de:
                    ac:af:8e:ae:2c:23:06:9a:ac:9c:14:63:51:3c:44:
                    d8:cc:d6:2b:4f:cd:11:72:03:38:76:2a:dd:8e:45:
                    13:b3:73:2d:a8:d4:12:4d:d8:55:37:71:42:50:f9:
                    e8:10:01:7e:c6:fa:00:49:d8:d9:96:26:4e:32:55:
                    57:cf:f4:e2:38:4e:2b:fa:42:22:0a:1c:d8:ed:c2:
                    72:2f:33:12:ab:7b:9d:e0:ea:b3:ee:ca:36:f4:d4:
                    55:32:1a:23:ee:48:9e:63:26:a2:80:0a:14:5d:f4:
                    ef:af:e8:0d:13:49:64:38:4e:ab:a4:30:d4:85:d2:
                    80:b8:19:ce:35:5c:36:c1:61:8a:d3:75:15:05:e3:
                    4c:bd:66:1a:ae:0f:de:b4:d9:77:5e:f5:d9:f2:e0:
                    fe:72:58:72:64:67:10:29:e2:5f:a0:59:88:8e:2e:
                    71:4c:73:a4:7c:9a:59:e9:45:1a:c9:0a:7a:64:e7:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:47:7C:7D:8D:BC:20:D2:54:C3:E0:55:51:83:68:D7:95:60:CE:89
            X509v3 Authority Key Identifier:
                keyid:54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:91:11:0a:64:7a:cb:8e:56:c9:19:10:18:97:10:5c:21:84:
         85:ca:9f:8c:28:7c:25:c6:2c:23:90:a5:f2:c7:dd:85:0c:43:
         ea:8d:30:9d:8b:cb:31:b5:f9:e6:c1:a4:4e:38:7e:3d:2a:a6:
         ce:9b:b8:5f:ae:59:e9:a6:84:a6:8b:9d:fa:96:83:6a:0d:6b:
         b5:bc:69:58:f7:80:63:67:81:00:1f:e1:ad:eb:66:67:1b:a2:
         50:27:2e:48:15:fa:f3:45:2e:ff:53:9c:b5:b6:0f:e8:d7:4d:
         85:cd:bf:f1:27:8c:4e:a3:a1:5a:5e:97:fb:12:fe:18:4e:e2:
         0b:59:77:0e:df:b1:b9:ab:6e:b0:09:fd:53:b1:71:84:f4:d6:
         1c:e7:ce:21:44:25:df:c0:3e:74:7c:b8:6a:fb:44:d4:72:4b:
         15:9f:e8:63:f9:c2:da:d9:4a:da:a4:c9:ad:0f:75:32:a4:36:
         f5:32:e5:79:4d:15:9f:88:b7:49:0c:81:26:c0:e9:fd:76:80:
         8d:da:12:72:2d:30:34:70:46:99:87:49:4b:d8:dd:f4:2e:d5:
         00:2a:2a:ef:6c:28:54:f4:3d:42:c2:f0:ca:22:e0:8b:61:1b:
         0d:1a:67:d0:b0:fd:7b:27:f3:52:b7:e6:34:a9:0a:b0:e2:17:
         26:e8:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:16:05 2026 by rpki-client