Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
File:                     91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft (raw, json)
Hash identifier:          uXSR49BWHPle0jbn/+woa21q537yCUyUwGbrV3/RbOA=
Subject key identifier:   91:6A:D0:66:A5:9B:25:76:0B:15:B9:85:DD:A2:58:93:09:DA:83:83
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       6307EBFC4406621D4ECECC8207C8C77CA5C44D22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
Manifest number:          04D1
Signing time:             Thu 15 Oct 2026 06:28:43 +0000
Manifest this update:     Thu 15 Oct 2026 06:23:43 +0000
Manifest next update:     Fri 16 Oct 2026 08:35:43 +0000
Files and hashes:         1: 3137302e38332e3136342e302f32322d3234203d3e20323634333831.roa (hash: iibGNRH7OcErS01Z8opi3HtnXaeDth04jKs4hfjbzJk=)
                          2: 3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa (hash: G756CFtDIz+lsIWUfjw9nhdX7dfnpHBSSBJsRUWPMf4=)
                          3: 3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa (hash: 1Z4GgDP0MCVzcPLNIfwVTA3+dMA6idKTOthHvHis3VY=)
                          4: 323830343a316439633a3a2f33322d3438203d3e20323634333831.roa (hash: Tjtb0yrKneu1g0oGHk0jUU1tNE1Xt2bqWlrqk5iCF9o=)
                          5: 3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (hash: 5A0Q+absa8vl2uFm9Nmgq1uHnxA2kTjMaqGCP0EfVco=)
                          6: 3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (hash: FTgIarqenyYsFIevmdjI0/xlBryzwd3uALHwH4vmTc0=)
                          7: 3133312e3136312e3137322e302f32322d3234203d3e20323634333831.roa (hash: GGyDSii6/+pO2rX90nnIJtjNr8fv0eemKt8Y5d/6M4M=)
                          8: 91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl (hash: 6H+6AM5SczoVN4B19NBwgB8KR0gOqhtEIu1KgwKIQFc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:07:eb:fc:44:06:62:1d:4e:ce:cc:82:07:c8:c7:7c:a5:c4:4d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Oct 15 06:23:43 2026 GMT
            Not After : Oct 16 08:35:43 2026 GMT
        Subject: CN=916AD066A59B25760B15B985DDA2589309DA8383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:c7:5c:cf:d5:a1:95:b4:3e:a5:01:43:ba:
                    3b:32:eb:be:7b:63:1c:0b:f6:ad:94:de:7c:3c:ea:
                    fa:ee:62:34:6f:9b:19:f7:11:82:99:c3:0b:21:e0:
                    ad:9d:fe:02:95:8b:db:83:c7:d2:06:90:fd:42:d7:
                    09:fa:7a:2b:a7:5a:d6:4c:21:50:43:8c:57:2c:7c:
                    74:2e:25:30:de:a6:4c:1d:58:49:9b:f8:5f:62:12:
                    2d:52:63:fc:0d:d2:c8:a6:26:97:b1:4a:e5:38:ec:
                    a2:68:e9:8f:cc:61:e5:f9:7f:1c:db:7b:2b:6e:42:
                    39:20:a9:09:16:6a:ad:74:68:65:84:a8:c9:ee:8c:
                    b9:b9:15:8f:9b:66:4b:3c:50:7a:78:60:6c:05:3f:
                    8b:2c:e1:a6:bc:0a:dd:cf:ed:4a:81:d4:37:fc:d3:
                    50:75:1d:ea:ff:4c:69:45:2f:9a:67:2f:42:5f:cf:
                    01:4c:e2:56:fb:71:5d:eb:82:29:2d:e3:cd:a9:c1:
                    9e:e4:cc:72:43:23:a8:14:1d:af:29:62:22:96:e2:
                    72:67:73:5e:04:f7:ea:7c:88:54:48:d7:02:16:ef:
                    ba:79:0f:bb:bb:cb:b9:89:87:99:52:dd:d0:06:a5:
                    e2:6c:29:fe:17:10:8a:64:65:42:d2:86:c7:72:c3:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:D0:66:A5:9B:25:76:0B:15:B9:85:DD:A2:58:93:09:DA:83:83
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:10:81:03:4e:96:43:d1:17:c7:7a:5b:41:af:50:8b:55:95:
         7f:a1:64:fd:be:30:dc:dc:dc:f7:fb:6c:75:bc:35:1d:d0:12:
         46:dd:89:7d:d8:fb:52:d8:a6:16:c5:31:2d:ec:92:55:43:e4:
         fd:7f:48:b7:5a:e3:3e:51:e3:dc:ae:03:a7:8e:2f:83:1b:05:
         f3:96:2c:5d:ab:28:ce:91:8a:d6:aa:48:a3:bd:0b:98:fa:7a:
         05:a8:91:c1:34:25:9f:da:97:fa:22:ce:ed:9e:15:93:69:e3:
         34:32:e1:aa:ac:5e:51:ce:2f:b9:78:0e:dc:15:b3:d1:ca:ac:
         90:4a:0d:9b:32:1c:87:42:66:b6:d9:48:4a:dc:8d:25:88:36:
         98:c8:3b:f9:cb:04:a5:b0:ec:e0:80:95:4b:a9:56:27:1f:ea:
         fd:51:85:ce:76:95:b7:b1:3b:63:86:f1:4e:f2:24:6f:c6:38:
         f0:a9:ac:a8:c4:19:8e:06:58:76:9a:b9:de:be:f5:05:c2:91:
         b9:4d:18:85:d0:db:ca:e8:b5:ef:cc:6d:48:9a:f8:44:a8:21:
         1c:6a:5e:ba:ea:13:f5:f6:5f:e4:e3:0b:90:65:b6:fd:65:7c:
         59:51:d4:c5:df:dd:d9:28:fe:44:3e:3d:c8:97:ff:1a:df:71:
         5d:c6:ef:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----