Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
File:                     9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json)
Hash identifier:          vq80ywd/cL7zFZxAdit7kEhsh9cZtJmq0KfkGwL03JI=
Subject key identifier:   F0:A1:DD:76:11:48:A6:C3:16:4C:61:DF:8A:5C:48:09:C6:90:21:48
Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1
Certificate issuer:       /CN=9A8CDCA9443D140D02860AA0070928656A172CE1
Certificate serial:       6AE16696207D647A53D78FC9CE72A3B25C35EF36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
Manifest number:          04CF
Signing time:             Thu 15 Oct 2026 06:00:56 +0000
Manifest this update:     Thu 15 Oct 2026 05:55:56 +0000
Manifest next update:     Fri 16 Oct 2026 08:47:56 +0000
Files and hashes:         1: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: BMHX+1+NGBzIiFYfB+rioYYbYvCXPqn4RJAYIjRAYoc=)
                          2: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: MjuNHtrm5Qth4ZUS/Ld8ttKpgsyiawGn6ZJfQUUl2Sg=)
                          3: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: ZQOJTRVfOPr0X1FcCrWFyhzRVfTuLoy1DsPF2IoO7/I=)
                          4: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: sR6YJGe08L+glJF639g017bb7dsjDyjPuC5rBsOOOSA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl
                          rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e1:66:96:20:7d:64:7a:53:d7:8f:c9:ce:72:a3:b2:5c:35:ef:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1
        Validity
            Not Before: Oct 15 05:55:56 2026 GMT
            Not After : Oct 16 08:47:56 2026 GMT
        Subject: CN=F0A1DD761148A6C3164C61DF8A5C4809C6902148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1d:0f:6a:95:8c:54:c3:2a:bf:a4:63:98:48:
                    49:b7:ab:da:c6:47:b6:c9:d1:ad:8c:14:33:5e:78:
                    ed:4c:4d:89:03:ec:a5:1e:58:1c:e0:30:66:0b:88:
                    9d:90:b1:2f:1f:cd:e7:d8:09:1b:90:ba:89:31:aa:
                    e1:32:f3:20:4b:62:61:f1:34:00:af:8f:09:53:56:
                    2e:8f:00:34:b3:2c:5b:3f:ca:ae:24:3d:e4:1a:a2:
                    e5:03:cd:65:79:0f:4a:4b:2f:9e:94:b0:58:15:ea:
                    6f:14:25:f7:7b:86:ea:c4:79:57:d1:12:d5:9b:a8:
                    63:8c:e8:42:13:24:8e:33:53:7d:54:6a:e1:63:45:
                    2a:33:b9:c0:6a:16:fb:e9:ce:b8:ec:a5:7d:5c:c5:
                    ae:b2:33:c2:81:46:5a:09:55:03:c6:c6:5e:f7:ef:
                    e1:d0:ec:7a:d6:6f:d0:38:e8:1b:af:1a:b3:53:a5:
                    21:65:07:15:27:f6:b5:2a:6b:ef:4a:77:f9:2a:be:
                    a5:31:12:b2:5e:da:48:1c:cf:51:26:74:37:48:12:
                    a7:ae:02:f7:28:c8:35:cc:f8:f2:b6:ed:9a:e7:aa:
                    d1:22:40:2c:e4:87:55:f4:c1:d5:a2:1d:20:15:99:
                    fe:4e:27:f1:e0:c4:dc:ba:42:36:81:ce:64:7d:62:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A1:DD:76:11:48:A6:C3:16:4C:61:DF:8A:5C:48:09:C6:90:21:48
            X509v3 Authority Key Identifier:
                keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:ec:61:c3:1a:ef:43:41:e1:d2:c4:1d:11:f9:d1:5a:be:
         6d:dc:91:59:2e:03:76:f1:9c:31:4a:52:0c:b3:d4:8d:e8:98:
         c8:fc:8c:de:52:93:01:e3:b1:f7:81:9c:ad:1e:36:e1:cf:a0:
         17:46:ad:2a:cd:01:9e:52:4f:7a:d4:21:87:91:98:03:e2:4b:
         e6:63:5a:a0:9f:07:34:5e:1d:a5:6f:96:16:1f:e2:e1:1a:79:
         f4:51:f5:bc:2b:e1:c6:b5:f2:a6:c9:6e:97:95:0a:8e:67:6f:
         c1:7e:4f:d0:3a:1e:ae:95:53:21:54:32:04:16:45:ff:e3:34:
         d4:c7:a9:db:13:cd:c4:f7:d9:41:af:d3:e5:9c:26:99:8e:5b:
         00:af:e8:ad:f5:1c:aa:0a:b8:e0:8b:51:f7:dd:89:3c:52:6d:
         12:8d:56:a2:c7:e7:2a:63:02:c9:74:cd:92:f2:04:27:e9:c5:
         bc:77:15:5b:3d:80:96:4b:75:ba:82:9d:dc:c4:61:3b:2e:00:
         e5:86:ef:ab:8f:ca:8d:ab:0e:6c:f9:79:15:90:44:16:65:32:
         be:98:3f:0c:e2:0e:11:89:33:59:81:06:1d:da:89:a8:c6:c3:
         56:d4:02:15:97:1a:69:12:7f:95:75:c1:2f:91:fd:2d:8d:01:
         1f:64:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----