Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
File:                     8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json)
Hash identifier:          E/lEuXBQ/VhOJEQFtgC8+bV9izki2ut5eXpOUXkbHB8=
Subject key identifier:   D6:86:61:80:52:A6:63:AA:55:98:31:D3:6C:FC:26:D8:E8:2B:5A:A7
Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE
Certificate issuer:       /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
Certificate serial:       3BE4CB19EA2FE54942C15B14D16145E5699A5BD5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
Manifest number:          0347
Signing time:             Tue 27 Oct 2026 02:50:44 +0000
Manifest this update:     Tue 27 Oct 2026 02:45:44 +0000
Manifest next update:     Wed 28 Oct 2026 05:43:44 +0000
Files and hashes:         1: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: xrBw+tyD5bElOqfetil1V/FMPu3k1B6V57Df9jInyxM=)
                          2: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: FLZ8fyl4hLDeOOwiNJ2sSlo/oYG4F3erVtCy7XC64KY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl
                          rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 05:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e4:cb:19:ea:2f:e5:49:42:c1:5b:14:d1:61:45:e5:69:9a:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE
        Validity
            Not Before: Oct 27 02:45:44 2026 GMT
            Not After : Oct 28 05:43:44 2026 GMT
        Subject: CN=D686618052A663AA559831D36CFC26D8E82B5AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:66:59:1f:2c:e0:44:b6:59:a4:32:42:0e:
                    36:4c:b4:1d:b1:52:0a:1c:e0:e0:d8:d7:06:e2:f9:
                    27:67:a8:89:38:52:49:93:af:33:a2:0c:ae:39:5d:
                    26:d6:98:56:7f:5b:85:a7:5c:7a:02:3d:80:1d:d8:
                    56:f4:f2:82:25:6c:93:7e:fe:82:1d:32:86:dd:12:
                    64:31:8b:60:df:6d:8a:88:62:2b:aa:4f:cf:69:69:
                    a6:b6:f2:84:13:26:c9:d7:e3:e8:23:0c:ba:2a:c9:
                    90:cf:70:97:f8:4a:a4:e0:29:9e:bf:2f:c8:3e:ce:
                    8f:70:e0:55:00:8c:a9:92:a1:8b:82:bb:28:21:d7:
                    9f:a2:34:fb:f5:f7:8d:77:69:d8:2e:37:ba:14:e4:
                    b7:e3:c2:8a:38:a6:a8:be:76:a9:28:ec:73:25:51:
                    3f:1b:a1:da:43:22:1e:bc:12:90:c8:32:b9:b0:a8:
                    82:14:3a:30:3b:4b:30:38:be:d4:4c:71:77:0e:9c:
                    b0:be:d2:a6:70:a0:64:17:8a:06:a4:13:6e:59:ac:
                    c5:ec:d5:3d:e7:49:74:8e:64:55:71:d1:68:80:c6:
                    35:fe:30:e1:d0:0a:1b:f1:cd:83:46:51:d2:33:28:
                    47:c7:a6:ce:84:77:d1:96:c8:2d:05:ea:e0:90:df:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:61:80:52:A6:63:AA:55:98:31:D3:6C:FC:26:D8:E8:2B:5A:A7
            X509v3 Authority Key Identifier:
                keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6d:81:9d:b2:e5:fa:ff:ea:d3:77:7d:c1:55:f7:3b:fd:ef:
         cb:3c:95:fe:4c:a9:a6:32:e0:fd:a0:92:dd:be:d5:28:21:74:
         52:ec:fd:9c:db:33:e3:bf:13:c3:a1:06:15:97:4c:c0:a9:e6:
         18:c2:26:01:01:d4:93:a1:56:c8:d9:62:ff:e7:37:b1:3a:36:
         c5:14:e7:ea:f6:e0:56:4c:fd:a6:34:58:ae:59:81:e0:e6:a0:
         6a:85:f1:db:bf:a3:9e:22:87:c1:92:27:af:b1:73:b2:6d:5a:
         b1:4d:6d:51:3b:5a:de:0c:a7:fb:76:0f:5e:79:ab:1d:7e:5a:
         fc:51:11:01:fe:84:4c:e5:c9:f9:38:15:b3:05:7c:8c:51:57:
         3d:10:ac:0a:2e:74:b3:0e:ea:50:53:41:6d:5e:68:13:fb:8d:
         a6:2a:d6:9a:2f:f1:b2:92:07:1a:47:cc:cd:37:5c:45:6d:c3:
         1c:40:8f:ee:5c:30:2a:10:c4:80:3e:ab:06:16:47:c9:cd:02:
         d9:9f:2f:65:4b:73:0a:7f:8f:6c:33:36:a3:2a:a6:ec:c8:ec:
         d3:37:e2:61:84:8c:25:fd:e6:22:ac:92:1d:93:dc:29:b5:5c:
         a8:6e:2b:31:31:38:ab:0b:36:2f:fd:91:ac:07:9c:92:82:9c:
         03:0a:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:43:59 2026 by rpki-client