Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
File:                     A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft (raw, json)
Hash identifier:          I7NFvJgH8Yx0Mm+SVaxmm2vZb7uFc/cfHvaw1EkrG38=
Subject key identifier:   CC:1A:B2:40:E8:A4:CF:69:6C:F8:63:3D:96:41:AF:D1:A5:D7:D4:47
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       1F8756D2F02F2CF27E68B1BEEA758976C15F8CDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
Manifest number:          04DE
Signing time:             Thu 29 Oct 2026 12:40:00 +0000
Manifest this update:     Thu 29 Oct 2026 12:35:00 +0000
Manifest next update:     Fri 30 Oct 2026 15:18:00 +0000
Files and hashes:         1: 323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (hash: 0M2Qmku/P4ch3SVgyF0g/In25swbwLnR2bejNIuxIqM=)
                          2: 34352e3233322e38302e302f32322d3234203d3e20323637323537.roa (hash: k4K7+hzmTEHQFtnq/XNsZ1hu3zUZKKOrdUrtEvD/CFU=)
                          3: A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl (hash: ial7v0+rMyHY3MBs+s4qhaxN7gZemhH26puNIZMYDlE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 15:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:87:56:d2:f0:2f:2c:f2:7e:68:b1:be:ea:75:89:76:c1:5f:8c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Oct 29 12:35:00 2026 GMT
            Not After : Oct 30 15:18:00 2026 GMT
        Subject: CN=CC1AB240E8A4CF696CF8633D9641AFD1A5D7D447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:52:cc:5c:0a:f9:ce:07:b0:af:65:e2:1e:
                    7f:f5:a6:ae:d5:50:9c:bd:c6:34:59:9f:cc:21:09:
                    83:96:80:b1:9d:4c:3c:8e:2c:39:9a:a1:da:01:28:
                    86:d1:53:46:c5:70:26:ae:6c:5c:68:8e:a3:ac:50:
                    39:e0:6f:16:71:a3:54:93:ef:56:2e:b1:ea:dc:ea:
                    21:9f:6b:fb:c2:69:d5:06:71:9f:18:08:12:d7:e1:
                    d4:42:08:ff:4c:43:b6:67:e1:cf:2f:1c:04:de:ae:
                    b5:b2:95:b9:30:86:c3:88:15:e4:15:9c:60:0d:dd:
                    73:e2:88:4d:e3:02:a3:38:c8:a0:94:b3:e6:5f:ab:
                    bb:9c:34:92:d6:93:86:bb:86:51:32:fa:9d:e2:4a:
                    76:1c:75:09:1c:fe:0c:28:d5:7e:f1:40:2d:55:2f:
                    02:08:59:1f:4d:e1:23:cc:37:e2:c9:6a:8c:be:60:
                    b8:bb:e4:36:88:f0:10:e9:f7:ab:b4:57:85:d9:15:
                    29:91:17:d4:14:0e:3c:d4:e7:f4:85:e8:0a:43:df:
                    68:a8:08:cb:49:4a:db:02:f2:51:c8:7d:5e:99:a5:
                    fa:89:5e:c3:14:0d:93:ac:0c:20:7e:9b:78:f1:b2:
                    65:48:a8:f4:ef:ee:64:0e:05:e4:2d:59:b1:df:18:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:B2:40:E8:A4:CF:69:6C:F8:63:3D:96:41:AF:D1:A5:D7:D4:47
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:24:70:c0:4e:22:78:82:a7:84:98:88:1b:e7:95:84:90:a7:
         e7:06:c7:bb:fd:80:3a:b0:d4:3b:77:26:a0:a8:50:f6:1e:ff:
         a5:58:5b:20:cf:05:6a:4d:e0:5e:a7:b2:7b:3e:e9:bf:97:0e:
         e3:03:63:2d:6d:86:ba:4c:e2:d9:fb:1b:56:91:05:72:a9:1a:
         b3:72:ae:c4:bc:35:9b:ab:93:e3:51:78:3d:d8:1c:35:14:0a:
         a2:10:a4:40:73:77:b7:fa:a2:07:5c:68:56:28:fe:0a:79:a2:
         e4:9c:94:ef:90:d4:c4:c6:17:53:8a:da:09:74:7f:6f:b1:1d:
         f9:4b:62:a9:03:f5:48:8a:cb:52:93:08:6f:ff:a5:e6:53:e1:
         43:c7:11:c2:0c:a3:27:b1:f5:8e:7b:fc:60:9d:57:77:cf:36:
         19:b6:12:1c:16:43:6c:60:cf:12:8c:3f:e2:48:70:f6:8a:70:
         34:02:b1:a9:a8:87:1a:52:a1:5e:bc:63:7d:22:e2:6d:3e:3b:
         98:c8:6b:37:8d:fb:0c:80:00:6c:06:da:be:50:5d:a6:7c:88:
         23:3c:09:53:8d:85:20:21:58:45:f5:94:77:95:64:d1:b1:6b:
         e3:03:18:60:a8:6a:7e:86:86:48:a8:1e:9e:12:93:2d:bf:3d:
         86:95:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----