Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
File:                     D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft (raw, json)
Hash identifier:          ZEbgOejy2wLv7ioDK96deCSnsf5kYg2W7xJDO4GD7rQ=
Subject key identifier:   23:FD:B1:77:1D:42:CB:5B:0E:73:6D:34:80:AB:0C:68:F6:A4:68:EB
Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Certificate issuer:       /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
Certificate serial:       75C2AE6C477198AFFA416E5421951E713CE1D735
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
Manifest number:          043A
Signing time:             Mon 02 Nov 2026 02:00:00 +0000
Manifest this update:     Mon 02 Nov 2026 01:55:00 +0000
Manifest next update:     Tue 03 Nov 2026 02:00:00 +0000
Files and hashes:         1: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl (hash: R5/OUKjqKChb6cIRwCK910nzRLTk1EXGUrcXxFiz1es=)
                          2: 323830343a393134633a3a2f33322d3438203d3e20323734363332.roa (hash: 2nyuFXTDn0E8FyISKRSKe1AApc0vSU3sCrA7FSphsP4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl
                          rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c2:ae:6c:47:71:98:af:fa:41:6e:54:21:95:1e:71:3c:e1:d7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Validity
            Not Before: Nov  2 01:55:00 2026 GMT
            Not After : Nov  9 02:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:79:cd:f7:92:3b:d6:45:f3:74:4c:42:67:
                    50:c2:af:43:3b:90:3d:cf:55:df:21:94:2e:8f:07:
                    8a:dd:28:16:ff:e0:f7:4f:2e:72:60:9a:6b:9f:ac:
                    7f:9e:c3:bd:7b:1a:cc:60:d9:7c:76:73:73:1f:bf:
                    cb:cd:f9:ae:2b:14:48:0d:7e:fd:06:75:34:82:e2:
                    c9:65:74:4a:b9:dd:81:6f:5e:a2:88:8c:ed:c3:6b:
                    03:39:97:e0:24:56:34:9c:d5:26:e0:ae:2b:72:48:
                    fb:a1:46:73:66:90:93:0c:3b:fc:9e:05:8d:9f:31:
                    b0:5a:71:27:3c:71:6b:29:a0:d6:b4:ad:a0:f3:bc:
                    1f:9e:cb:79:18:b0:c2:4e:b7:de:ae:0c:4c:ec:8f:
                    b4:de:5c:11:b5:59:83:77:a1:bf:b0:0c:25:2a:42:
                    d6:24:fd:3a:cf:37:14:4c:86:74:76:2f:f1:37:cc:
                    ff:b3:8e:f3:c8:2d:7d:0e:ad:1a:40:02:49:29:da:
                    06:93:80:5a:21:c3:fb:1f:0b:d8:ca:8a:95:bd:75:
                    ab:3e:68:f3:2a:66:e0:ef:5f:9c:26:6d:b1:fa:b6:
                    87:43:75:03:7b:76:11:bf:d4:c5:a7:7d:05:18:02:
                    a5:73:46:07:d5:38:3d:17:a6:88:9a:28:26:7c:c6:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:B1:77:1D:42:CB:5B:0E:73:6D:34:80:AB:0C:68:F6:A4:68:EB
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:fc:73:62:30:97:f1:fa:55:ab:5a:aa:01:a8:5f:7a:5e:
         81:28:97:cf:11:f4:94:72:4c:68:69:02:11:56:34:3e:fd:73:
         d5:71:1b:06:54:33:d4:32:9a:ab:87:5b:b9:26:9b:1d:22:2d:
         2c:53:f2:09:ad:b1:a3:7a:68:a4:6a:94:9a:ee:1d:41:b5:f4:
         49:9b:da:25:c0:3f:b4:69:90:02:ca:81:02:3a:23:58:58:d0:
         79:3c:71:49:94:4e:45:2c:c4:3d:08:13:8b:a2:80:39:74:d2:
         18:6c:56:5d:97:c0:9b:51:6f:33:ce:fb:ed:eb:27:28:3e:e5:
         dc:a2:37:b1:86:92:d2:e4:37:1d:b9:ee:39:ac:7c:fd:23:17:
         46:e7:a9:6c:60:54:84:f6:4d:15:3b:17:77:a9:45:62:af:c1:
         b7:25:87:a1:b8:2c:82:9b:c6:71:04:d0:0a:78:ab:ab:2a:51:
         41:2d:7d:31:b5:9b:05:f6:01:83:4b:59:e2:2e:eb:8a:58:18:
         dd:cb:95:c5:6f:8e:1a:22:2c:f4:af:d1:78:96:4e:5e:44:d3:
         67:d6:f8:d2:bd:fd:d7:65:62:07:b5:b5:f6:d5:aa:2e:f7:c0:
         05:e3:f2:ff:d3:6f:6a:d5:c9:28:7c:b7:ad:6c:69:5e:98:c0:
         f9:f3:83:b4
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUdcKubEdxmK/6QW5UIZUecTzh1zUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhDNjRDNjFBOTMy
QTE0QkQwMjAeFw0yNjExMDIwMTU1MDBaFw0yNjExMDkwMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY3NTc5Q0RGNzkyM0JENjQ1
RjM3NDRDNDI2NzUwQzJBRjQzM0I5MDNEQ0Y1NURGMjE5NDJFOEYwNzhBREQyODE2
RkZFMEY3NEYyRTcyNjA5QTZCOUZBQzdGOUVDM0JEN0IxQUNDNjBEOTdDNzY3Mzcz
MUZCRkNCQ0RGOUFFMkIxNDQ4MEQ3RUZEMDY3NTM0ODJFMkM5NjU3NDRBQjlERDgx
NkY1RUEyODg4Q0VEQzM2QjAzMzk5N0UwMjQ1NjM0OUNENTI2RTBBRTJCNzI0OEZC
QTE0NjczNjY5MDkzMEMzQkZDOUUwNThEOUYzMUIwNUE3MTI3M0M3MTZCMjlBMEQ2
QjRBREEwRjNCQzFGOUVDQjc5MThCMEMyNEVCN0RFQUUwQzRDRUM4RkI0REU1QzEx
QjU1OTgzNzdBMUJGQjAwQzI1MkE0MkQ2MjRGRDNBQ0YzNzE0NEM4Njc0NzYyRkYx
MzdDQ0ZGQjM4RUYzQzgyRDdEMEVBRDFBNDAwMjQ5MjlEQTA2OTM4MDVBMjFDM0ZC
MUYwQkQ4Q0E4QTk1QkQ3NUFCM0U2OEYzMkE2NkUwRUY1RjlDMjY2REIxRkFCNjg3
NDM3NTAzN0I3NjExQkZENEM1QTc3RDA1MTgwMkE1NzM0NjA3RDUzODNEMTdBNjg4
OUEyODI2N0NDNkQyQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA33V5zfeSO9ZF83RMQmdQwq9DO5A9z1XfIZQujweK3SgW/+D3Ty5y
YJprn6x/nsO9exrMYNl8dnNzH7/LzfmuKxRIDX79BnU0guLJZXRKud2Bb16iiIzt
w2sDOZfgJFY0nNUm4K4rckj7oUZzZpCTDDv8ngWNnzGwWnEnPHFrKaDWtK2g87wf
nst5GLDCTrfergxM7I+03lwRtVmDd6G/sAwlKkLWJP06zzcUTIZ0di/xN8z/s47z
yC19Dq0aQAJJKdoGk4BaIcP7HwvYyoqVvXWrPmjzKmbg71+cJm2x+raHQ3UDe3YR
v9TFp30FGAKlc0YH1Tg9F6aImigmfMbSwQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FCP9sXcdQstbDnNtNICrDGj2pGjrMB8GA1UdIwQYMBaAFNLq+73SdRXC5kKijGTG
GpMqFL0CMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJZSDlweEZOZTNuRGRT
alpqenA3NEptdERWZHgzb2lmV0VraEd6TkJGZi8wL0QyRUFGQkJERDI3NTE1QzJF
NjQyQTI4QzY0QzYxQTkzMkExNEJEMDIuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhDNjRDNjFBOTMyQTE0QkQw
Mi5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y
cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UllIOXB4Rk5lM25EZFNqWmp6cDc0
Sm10RFZkeDNvaWZXRWtoR3pOQkZmLzAvRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhD
NjRDNjFBOTMyQTE0QkQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEfR/HNiMJfx+lWrWqoBqF96XoEo
l88R9JRyTGhpAhFWND79c9VxGwZUM9QymquHW7kmmx0iLSxT8gmtsaN6aKRqlJru
HUG19Emb2iXAP7RpkALKgQI6I1hY0Hk8cUmUTkUsxD0IE4uigDl00hhsVl2XwJtR
bzPO++3rJyg+5dyiN7GGktLkNx257jmsfP0jF0bnqWxgVIT2TRU7F3epRWKvwbcl
h6G4LIKbxnEE0Ap4q6sqUUEtfTG1mwX2AYNLWeIu64pYGN3LlcVvjhoiLPSv0XiW
Tl5E02fW+NK9/ddlYge1tfbVqi73wAXj8v/Tb2rVySh8t61saV6YwPnzg7Q=
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:33 2026 by rpki-client