Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
File:                     D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft (raw, json)
Hash identifier:          RY8t/ZnbaeRlGrev+uavUR1RTBBNjwX7Gabqs/9CcYQ=
Subject key identifier:   32:2D:67:8A:76:AD:64:BF:E9:7B:1D:F3:DF:9D:B9:31:23:CB:B7:F2
Authority key identifier: D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB
Certificate issuer:       /CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
Certificate serial:       15A1AFBFDD7718CAE458F050ABEDBCB3288FBB71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
Manifest number:          02CD
Signing time:             Fri 30 Oct 2026 18:36:16 +0000
Manifest this update:     Fri 30 Oct 2026 18:31:16 +0000
Manifest next update:     Sat 31 Oct 2026 21:19:16 +0000
Files and hashes:         1: AS28343.roa (hash: BUol5Wy6k7WwMOETjTJDoJ3IeJ3P+pZxyBV4+6E8gwE=)
                          2: D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl (hash: 8H3DNXig1gJtzLxNEloGCNTWAs8Y4PAqE23jQYaUKgw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl
                          rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 21:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a1:af:bf:dd:77:18:ca:e4:58:f0:50:ab:ed:bc:b3:28:8f:bb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB
        Validity
            Not Before: Oct 30 18:31:16 2026 GMT
            Not After : Oct 31 21:19:16 2026 GMT
        Subject: CN=322D678A76AD64BFE97B1DF3DF9DB93123CBB7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:0c:32:74:5e:5a:c3:4e:60:aa:6e:d4:8a:
                    06:83:92:7f:0b:b0:ae:b2:6e:2b:80:b1:d9:fe:1c:
                    eb:98:b2:63:fe:56:32:5f:c0:60:8a:36:31:64:16:
                    e1:f8:fe:51:5b:4a:55:b1:20:b0:f6:9b:55:31:f8:
                    3c:66:03:35:32:15:d3:b7:3b:ca:6a:5d:b3:e4:84:
                    f7:57:22:6a:cd:c0:1e:c2:f7:7f:42:53:25:8d:83:
                    ef:ee:58:11:b3:f6:c3:56:aa:a9:84:4e:f2:bd:2a:
                    b7:f3:b1:d2:b9:1c:49:a6:39:42:13:7a:31:91:87:
                    36:6c:bf:24:42:0c:af:de:6b:4a:f4:41:a4:a0:b2:
                    f0:c9:cc:1f:f8:21:cd:75:85:36:30:d0:cd:a6:59:
                    96:fc:9e:e6:25:72:21:6d:d8:29:3f:ac:2c:27:ef:
                    4f:07:cf:12:ec:57:15:6b:81:d2:32:2b:45:42:08:
                    4a:7d:bb:14:aa:06:c1:cd:44:c1:1c:e4:4b:95:cb:
                    bf:00:f8:a5:c4:88:f0:5d:9f:0a:1b:36:ee:d8:69:
                    d9:cb:9c:dc:30:c3:08:84:7b:20:1e:66:91:cb:9c:
                    01:ce:8a:81:68:c8:eb:90:89:a5:4d:36:77:bd:0a:
                    b2:70:72:eb:2f:a5:f9:8d:e6:1e:aa:19:a9:4c:79:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:67:8A:76:AD:64:BF:E9:7B:1D:F3:DF:9D:B9:31:23:CB:B7:F2
            X509v3 Authority Key Identifier:
                keyid:D7:96:87:8B:38:80:1E:1B:A9:BC:F0:FF:2E:29:FB:87:A5:CC:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/D796878B38801E1BA9BCF0FF2E29FB87A5CC72AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:0a:c4:bb:21:98:f3:a5:6f:99:a4:47:45:21:12:69:b4:
         82:01:39:5b:e6:c6:0b:73:54:02:ea:9e:99:f1:5d:45:b8:4e:
         48:1a:0f:e4:d1:20:ff:50:e9:54:b6:2b:e0:aa:bc:d8:f0:d8:
         fe:49:8d:1a:3e:66:ea:cb:2c:a2:4a:3c:a5:f0:14:47:fb:ba:
         d5:e0:ce:ba:21:52:a2:63:00:0a:0e:01:d6:66:2a:38:f5:8d:
         4c:8c:45:fc:c1:c9:7f:55:48:9b:99:c4:f5:99:4d:30:bb:54:
         62:81:50:f3:4f:fe:47:00:91:04:dd:6c:21:6b:95:10:0f:8d:
         23:3a:49:5f:9e:bf:7a:82:46:00:00:4d:d8:44:9f:cc:80:fa:
         f4:20:3f:06:9e:f3:f9:45:df:c3:6d:15:01:9b:37:a7:df:1f:
         2c:4c:98:86:62:97:1e:19:53:66:6f:6c:ba:40:b6:ff:87:5f:
         01:f7:a3:cf:b7:7d:6d:b2:fc:be:eb:3d:5f:b5:c3:dc:88:86:
         e8:10:5c:d5:bd:9b:5d:65:df:65:b7:ae:e0:e4:eb:47:1e:7d:
         bd:fe:b6:ca:26:37:8e:21:aa:c7:2b:e7:e2:93:ca:38:5a:02:
         a1:fc:a2:58:dd:b8:c6:06:ac:8c:36:04:d2:37:13:01:d2:b5:
         79:12:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:58:36 2026 by rpki-client