Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.mft
File:                     2AA55D9F660358994534C0B5C412474014767770.mft (raw, json)
Hash identifier:          Gn9iJwrMNZM9eicrpYyewcDgh5S0RoXYdhdLYhYLk/w=
Subject key identifier:   89:F6:3F:5E:DB:07:3D:CB:14:B8:0C:A0:D7:78:23:15:52:69:91:42
Authority key identifier: 2A:A5:5D:9F:66:03:58:99:45:34:C0:B5:C4:12:47:40:14:76:77:70
Certificate issuer:       /CN=2AA55D9F660358994534C0B5C412474014767770
Certificate serial:       3EACB00180CCEB0847D5725EFB8A42ABC12EA802
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA55D9F660358994534C0B5C412474014767770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.mft
Manifest number:          A0
Signing time:             Sat 31 Oct 2026 07:27:21 +0000
Manifest this update:     Sat 31 Oct 2026 07:22:21 +0000
Manifest next update:     Sun 01 Nov 2026 10:05:21 +0000
Files and hashes:         1: AS274610.asa (hash: jYR53+c3QQzfGBnl5vOqMPobK25QFkARrs1J9ISX73w=)
                          2: 323830343a393066383a3a2f33322d3634203d3e20323734363130.roa (hash: LTpq4l+cYa65uYW9Ekh5GgbC0UpN9Qy3BnoX57NX438=)
                          3: 2AA55D9F660358994534C0B5C412474014767770.crl (hash: /amyFkmUZvClU6jL0AG+q+lbVopLciy6REGlzAWiOH8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.crl
                          rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA55D9F660358994534C0B5C412474014767770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 10:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ac:b0:01:80:cc:eb:08:47:d5:72:5e:fb:8a:42:ab:c1:2e:a8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA55D9F660358994534C0B5C412474014767770
        Validity
            Not Before: Oct 31 07:22:21 2026 GMT
            Not After : Nov  1 10:05:21 2026 GMT
        Subject: CN=89F63F5EDB073DCB14B80CA0D778231552699142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:40:ad:1d:08:e7:3e:4c:ba:bf:45:6a:97:
                    d0:7d:2f:8e:39:17:27:b9:ac:2a:ea:16:72:e9:b6:
                    c7:8f:63:20:d8:35:0f:ff:a0:79:7a:1c:43:23:00:
                    34:d4:91:e0:df:17:55:80:86:40:18:57:68:7b:d5:
                    a9:10:e6:28:0d:80:aa:f8:2d:b3:37:f8:9f:e1:7f:
                    ba:31:e4:5c:cb:8c:92:fd:aa:00:6b:59:77:63:f4:
                    75:08:e8:ce:e5:e0:28:6f:03:9e:e6:09:61:d8:b2:
                    06:5d:81:56:34:fb:28:ea:a4:e9:ca:5b:da:e2:12:
                    6d:75:62:cb:4b:6c:62:0d:a7:63:fc:8f:b9:b4:51:
                    15:24:4c:bb:0a:b6:6d:de:d7:85:3d:00:22:88:57:
                    d2:66:4b:9f:60:a5:89:5d:bb:e6:11:b8:87:3c:d1:
                    2f:3a:71:5d:10:35:31:93:01:7e:23:54:4b:08:c8:
                    87:69:49:43:69:84:26:8f:d8:31:a9:62:26:b6:30:
                    ab:87:48:6e:8a:cd:68:a9:8b:68:1c:0c:a6:c2:77:
                    3e:64:5d:35:a1:4a:04:6b:7a:c6:26:73:b1:d4:6c:
                    f9:e7:a5:ed:a9:b8:f2:c9:f0:d6:7a:c6:9d:e1:71:
                    7d:19:02:5b:80:14:59:5a:6a:a3:7f:41:20:29:5f:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F6:3F:5E:DB:07:3D:CB:14:B8:0C:A0:D7:78:23:15:52:69:91:42
            X509v3 Authority Key Identifier:
                keyid:2A:A5:5D:9F:66:03:58:99:45:34:C0:B5:C4:12:47:40:14:76:77:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA55D9F660358994534C0B5C412474014767770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:0e:9f:6b:aa:f9:2b:48:1c:af:e4:45:6e:f0:d2:f4:c0:
         d3:30:d4:95:ea:ef:5d:81:94:59:e1:58:8f:81:3f:39:ee:71:
         42:17:40:08:27:a8:fc:1d:47:61:80:1a:60:10:1a:08:37:be:
         e6:44:3a:a5:f4:5f:64:70:cb:ad:e6:1f:16:1f:58:73:fb:f7:
         b4:47:5d:4b:30:4b:81:49:3d:9e:ed:1b:ba:73:2c:0b:22:e3:
         f7:25:52:80:50:26:41:0b:85:2e:4b:f8:ef:2f:d6:e2:df:d1:
         25:22:86:86:81:fe:99:f7:e1:a8:ce:6a:70:af:57:e1:cf:24:
         d1:57:cc:e9:27:df:67:31:8b:da:13:93:44:23:7a:1b:52:ca:
         44:d6:79:6d:82:78:05:1f:d5:a6:48:95:cd:c9:c7:41:28:27:
         a8:fd:d3:4c:26:0e:76:16:83:02:76:69:63:d5:aa:dd:e5:d0:
         88:6b:7c:ff:ed:d3:0e:7d:a7:a3:aa:5b:72:8c:ab:af:eb:69:
         14:ec:a2:7b:3b:57:85:9e:7b:9b:87:38:25:b6:a2:9d:c6:2c:
         55:92:e4:e4:fc:ca:72:3b:57:5e:a9:18:58:9e:2b:db:09:d0:
         40:fd:84:e7:41:c6:c9:b1:fb:9c:37:59:90:b8:80:57:3f:7b:
         06:bc:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:56:06 2026 by rpki-client