Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
File:                     7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft (raw, json)
Hash identifier:          gA+8B7TlhrR6Cw9UhnBaE6t+AX/Ol89aYhd7oROjD08=
Subject key identifier:   7E:0C:A0:C9:66:30:A8:36:BB:4F:37:56:DA:24:2A:97:62:94:89:B9
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       1AB4327910E79DEC5A0BA4BBE9975EBCF83BFC0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
Manifest number:          04B3
Signing time:             Sun 01 Nov 2026 06:33:33 +0000
Manifest this update:     Sun 01 Nov 2026 06:28:33 +0000
Manifest next update:     Mon 02 Nov 2026 10:01:33 +0000
Files and hashes:         1: 3137372e39332e3232342e302f32302d3234203d3e203238363633.roa (hash: dUnxz4uJaIOiRg8cH1OjUwRfQfCjMGfGXHbYRG7DN88=)
                          2: 7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl (hash: Fz+L72FWvGDu0wYy31JGEMTnGGhGf6DeC5BcCWX42ew=)
                          3: 3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa (hash: 7H7a2MqgLPA+GdFePEcBu4SHlmBs9hGYUTw9FBYJnf8=)
                          4: 3138392e312e33322e302f32302d3234203d3e203238363633.roa (hash: W/8Z1uJtbPnbJDQOnyNaPZTCLiQ0puOTMdbpWOarnT4=)
                          5: 323830343a376139633a3a2f33322d3438203d3e203533313431.roa (hash: u0RPimMprQ7AHQzCDx9QiJ27HdwZkxxPyYq1ha3yJeE=)
                          6: 323830343a3365383a3a2f33322d3438203d3e203238363633.roa (hash: 2uLFZVG9GtJ8j6pYa17qcdQphjR0P01jjV9bJTohA4Y=)
                          7: 3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa (hash: OMlRhQtwUw6sJqDiwTrPSwPXTVOutcNG3kqrWgTlzFQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b4:32:79:10:e7:9d:ec:5a:0b:a4:bb:e9:97:5e:bc:f8:3b:fc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Nov  1 06:28:33 2026 GMT
            Not After : Nov  2 10:01:33 2026 GMT
        Subject: CN=7E0CA0C96630A836BB4F3756DA242A97629489B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:21:7d:23:11:c2:10:e8:c5:1a:44:85:9d:
                    3c:ac:7b:c3:2f:1e:8a:b2:f0:83:58:ee:4e:8d:60:
                    bb:a4:22:8a:4a:6e:37:b0:96:1b:f6:98:ed:ed:20:
                    a8:67:86:a9:a3:22:45:fb:54:b6:e3:f5:a4:a7:be:
                    4c:93:b5:a9:e8:35:2d:b1:ff:6f:7d:67:07:d3:4c:
                    5a:c9:e3:3b:82:59:a7:64:23:e4:7b:b1:f2:87:bd:
                    c5:79:ec:ad:36:da:75:4a:5f:d5:bd:af:6b:9e:a1:
                    35:16:11:5d:58:63:20:9f:57:91:b5:8c:e1:8e:33:
                    3b:1d:0d:9e:54:5b:1b:0f:5e:e2:b0:c4:da:5d:ee:
                    18:df:a1:af:a6:fb:e6:3c:23:74:59:fd:94:e9:52:
                    76:cc:78:9d:eb:df:94:1f:7f:57:97:f9:0d:97:90:
                    33:8f:eb:81:78:f3:93:a3:f2:32:5f:7f:d1:26:8d:
                    e0:41:d0:01:33:41:f3:f2:b5:f9:c6:b1:d4:d7:40:
                    b0:11:51:f1:2a:87:52:e0:88:32:c6:bd:81:b1:ea:
                    74:10:d5:20:f9:dc:7b:bd:fa:c6:3e:73:fa:0d:10:
                    a6:a9:8c:26:8e:d5:f8:48:3c:9b:c3:0e:a3:77:bb:
                    d3:0f:12:93:0e:a4:01:4e:a1:93:e5:e1:3d:cd:b9:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:A0:C9:66:30:A8:36:BB:4F:37:56:DA:24:2A:97:62:94:89:B9
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:94:c7:1d:45:3a:27:a3:0b:b5:80:c8:47:69:93:a5:72:d4:
         08:e2:72:f4:da:dc:71:4a:14:7f:78:da:7c:b9:b8:29:0e:21:
         d1:0d:80:df:a9:ac:89:3c:60:41:e4:3d:c9:2b:de:4f:d5:ca:
         bf:fc:77:8c:48:cb:8a:26:ae:11:39:0c:2a:3f:e9:37:22:1e:
         2d:51:8a:95:75:19:06:5e:ec:26:c4:e8:f5:85:34:b1:a7:ad:
         b8:fe:79:4a:f3:62:21:f5:39:e2:74:d8:67:6e:3c:88:c1:13:
         51:fa:e0:83:88:6e:ff:bb:58:10:83:84:7d:b5:be:cf:81:34:
         76:4b:14:d0:a9:e7:c6:b5:9a:b6:d4:a4:f9:f4:03:d0:f2:18:
         ba:86:3f:18:3e:b5:a7:3f:23:0b:3c:e9:6e:e3:9a:8c:32:9f:
         9f:48:fa:7f:21:c5:de:33:3a:a9:8c:52:dc:d9:9d:16:61:54:
         13:e2:a4:68:cf:61:70:d9:70:5d:aa:ae:1c:be:8e:dd:fe:c3:
         dd:55:88:fa:df:8f:49:f8:a5:32:3d:31:fd:64:b9:78:27:06:
         02:77:f3:35:60:c0:35:7d:31:03:15:84:f1:0e:3e:02:17:00:
         84:31:57:0f:9c:08:b5:38:72:e4:55:84:d5:a7:49:4c:6d:a7:
         f8:88:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----