Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft
File:                     D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft (raw, json)
Hash identifier:          5+dvj/eJpmzDyOVgt8SZaDpEA5vkfAaQs5qcW0iZw4s=
Subject key identifier:   C7:3E:3C:55:9E:FA:F7:C2:5A:6B:57:EC:6C:EF:D9:B5:51:74:9F:B1
Authority key identifier: D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB
Certificate issuer:       /CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB
Certificate serial:       6FBFC214555D2EBF11F43028BF38AE4F7F79A5DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft
Manifest number:          08
Signing time:             Fri 30 Oct 2026 05:12:13 +0000
Manifest this update:     Fri 30 Oct 2026 05:07:13 +0000
Manifest next update:     Sat 31 Oct 2026 08:27:13 +0000
Files and hashes:         1: 34352e3136392e38302e302f32322d3332203d3e20323638313033.roa (hash: enF5SyWo0/PSG0sb53j355Y/4MLLeIEHS/kxc94z8Rk=)
                          2: 323830343a353830633a383030303a3a2f33332d3333203d3e20323638313033.roa (hash: giLI0ZwUyUKA7vAObcEEWQW8lqpsZjwGK1CDYdTvQHc=)
                          3: 323830343a353830633a376630303a3a2f34302d3430203d3e20323638313033.roa (hash: ebHyZExtNqKcLCDyEx7c1AK/lzU7qKbwcgVWIoIEwoM=)
                          4: 323830343a353830633a3a2f33342d3334203d3e20323638313033.roa (hash: zmSN3nEZyfXs297lwf9fbC+ammEbK084cA1vY2dT4Eg=)
                          5: D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl (hash: C77OSuvF5XXxU8kCUY6qHK/xMF3jFyHk3Lg91G9T7jI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl
                          rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 08:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bf:c2:14:55:5d:2e:bf:11:f4:30:28:bf:38:ae:4f:7f:79:a5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB
        Validity
            Not Before: Oct 30 05:07:13 2026 GMT
            Not After : Oct 31 08:27:13 2026 GMT
        Subject: CN=C73E3C559EFAF7C25A6B57EC6CEFD9B551749FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:7f:62:9e:ff:fa:10:80:f1:90:c5:ae:01:
                    a7:8d:21:ee:6d:ca:09:90:9e:55:8f:01:03:89:98:
                    b5:ea:ff:26:36:32:34:8e:f8:6d:6d:d1:a9:85:ff:
                    83:5b:f1:5f:22:62:7e:04:da:b4:c1:82:11:eb:08:
                    70:05:6c:7d:d7:54:5c:f2:0b:dc:4a:07:1d:2f:a7:
                    70:31:b5:48:d1:fe:d0:e7:82:4c:15:7e:51:93:56:
                    8b:55:8e:3e:91:05:a9:68:07:e6:94:94:6b:25:e1:
                    d1:3a:cc:bc:82:6d:10:8b:4d:21:6c:ff:91:d2:d5:
                    cc:ae:30:fe:a5:f0:88:ce:98:74:59:02:1f:ea:85:
                    ba:d1:32:41:05:85:67:08:9a:0b:f4:a2:ac:92:ad:
                    c2:0c:2c:66:13:4d:10:dc:fb:21:d2:a4:0c:f8:d7:
                    00:02:5b:08:10:27:07:82:5a:01:d2:90:53:cf:ef:
                    fe:ca:8d:b7:25:d5:54:97:f1:2b:0a:0a:55:d0:88:
                    39:8e:b9:c0:e9:2c:fe:cd:4e:0b:5d:b4:a0:9a:7b:
                    8f:44:b9:46:f0:78:1c:d1:0f:b0:65:b6:41:fb:58:
                    2c:5b:da:97:50:1f:0d:fc:ff:7d:46:92:85:a7:7f:
                    e3:53:7f:d4:5f:0f:1b:72:82:65:a8:e9:0f:e9:d3:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3E:3C:55:9E:FA:F7:C2:5A:6B:57:EC:6C:EF:D9:B5:51:74:9F:B1
            X509v3 Authority Key Identifier:
                keyid:D9:AA:E9:D9:DA:06:BB:1F:2A:65:27:2E:17:58:B4:0F:DE:7F:D9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/D9AAE9D9DA06BB1F2A65272E1758B40FDE7FD9FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:ea:77:59:4e:d6:63:ac:0f:09:c9:9e:26:a3:d8:5e:e4:
         12:3b:84:f8:bb:04:58:2b:04:b6:ad:eb:bd:e2:11:e9:ba:0b:
         d6:6b:2e:f4:a1:3e:f6:df:96:d5:b0:67:36:c3:92:cb:04:d6:
         e6:88:5b:b5:0c:ca:93:9c:6b:c9:5f:7f:66:46:d8:62:c8:c3:
         c6:88:99:d8:7f:e4:03:63:8d:a6:4f:b2:eb:8a:f3:57:12:38:
         6c:6a:16:01:c7:9d:db:b8:9c:8a:9b:f7:76:cf:84:4e:87:2a:
         f4:de:12:a5:40:32:2a:4a:f5:c7:39:e7:94:bf:24:41:10:22:
         cf:51:eb:56:60:7a:17:d6:81:33:16:22:00:95:69:3a:9d:e5:
         ae:41:ff:8a:31:49:1e:0a:1d:f5:36:39:93:a2:83:cb:8f:b7:
         32:45:2c:fa:69:12:cd:24:5b:76:48:77:c1:d4:ba:40:e0:97:
         d3:a7:98:49:02:91:06:15:94:ea:f4:8a:9a:46:84:f0:e5:05:
         47:d8:99:00:92:b7:d7:0e:90:91:83:1d:05:db:eb:6c:1e:fb:
         7e:31:fd:d4:85:71:df:01:2f:be:af:26:e0:6b:a0:c2:aa:4d:
         4b:1a:99:71:8c:fd:d4:a7:23:de:41:cd:d2:34:58:3e:c5:a8:
         50:3d:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:23:42 2026 by rpki-client