Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
File:                     C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft (raw, json)
Hash identifier:          FxUuSfVf0syMVvMmrtgANmZG9OvhBUqdbaya2Ay+90o=
Subject key identifier:   36:34:CC:05:5A:39:5B:A9:7E:9D:83:EE:2C:DF:67:41:51:B0:AB:1C
Authority key identifier: C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69
Certificate issuer:       /CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
Certificate serial:       3DE6C1C78F982F6F680CA9C7F8AA6181CCE68232
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
Manifest number:          0133
Signing time:             Sun 25 Oct 2026 12:17:24 +0000
Manifest this update:     Sun 25 Oct 2026 12:12:24 +0000
Manifest next update:     Mon 26 Oct 2026 13:21:24 +0000
Files and hashes:         1: 3230302e342e3131342e302f32342d3234203d3e20323731333332.roa (hash: Fi1adxzVSDydSMEsPld3pJ2pSeet0X3aZtRxvN+PT8g=)
                          2: 323830343a373964633a3a2f33322d3332203d3e20323731333332.roa (hash: SAFT+N+rNHh+iObkyZm9fu631KeRVOtBjTBnWBAq3ow=)
                          3: 3230302e342e3131332e302f32342d3234203d3e20323731333332.roa (hash: ebP6g11nfp+jENozSIjo20CNAySLwV/9emqOCw4hFFc=)
                          4: 3230302e342e3131322e302f32342d3234203d3e20323731333332.roa (hash: SclR7jTY5+hknjjOMHHp/801rwcJ7Y9KwjLE0V1noIk=)
                          5: 3230302e342e3131352e302f32342d3234203d3e20323731333332.roa (hash: 0t9bojsvU/HLVT3hLi4c7UaDaxo4OQAGSGuaYTMsRD0=)
                          6: C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl (hash: EGdAdACuNJ6oI14WUB2HxZ69vTHAZSAwO1zq6nKkZT4=)
                          7: 3230302e342e3131332e302f32342d3332203d3e20323731333332.roa (hash: QkzMBD31USaF+OnUuAfg3IZu/L6GJ6HSc3VBge36gf8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl
                          rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 13:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e6:c1:c7:8f:98:2f:6f:68:0c:a9:c7:f8:aa:61:81:cc:e6:82:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
        Validity
            Not Before: Oct 25 12:12:24 2026 GMT
            Not After : Oct 26 13:21:24 2026 GMT
        Subject: CN=3634CC055A395BA97E9D83EE2CDF674151B0AB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:4f:4a:aa:87:bb:31:46:bb:89:03:f0:19:
                    36:0a:58:07:3a:cf:ee:5e:bb:e3:a7:08:0e:ce:88:
                    86:6f:f8:4a:4c:6a:20:ef:7c:47:f3:b5:e3:60:1b:
                    bb:1a:5c:ed:fe:c3:69:3b:d6:fc:2b:ab:9e:49:4a:
                    90:30:c9:ce:bd:de:c5:bc:de:28:2c:20:3a:44:ae:
                    a5:04:a8:e4:f8:8b:9f:04:15:bb:66:88:fa:34:6b:
                    9e:0a:17:52:3f:4e:f2:fb:ec:ec:1e:64:7c:5e:06:
                    35:68:05:19:09:5b:a0:8a:f5:4f:46:78:ef:34:5e:
                    58:8b:06:a0:25:81:b3:3c:8f:07:f2:f3:4a:08:22:
                    95:fb:72:84:ac:c2:3b:c0:4d:73:46:90:f7:f2:a0:
                    da:67:87:01:5d:b9:cd:6d:78:a2:f8:0c:11:95:c5:
                    6f:5c:33:31:f5:46:4b:f2:2b:1d:fa:27:4c:62:19:
                    ff:ff:63:b2:96:5c:83:f0:5a:1c:3c:18:78:45:1e:
                    b6:99:3b:02:3e:9f:e6:a0:78:aa:e8:4b:46:e7:d0:
                    e7:64:c9:db:a3:8d:81:96:22:47:13:74:5d:ab:55:
                    23:42:84:3f:7a:c6:81:68:9f:a5:c9:a0:26:1f:45:
                    75:d3:a5:d2:58:1d:46:50:09:86:8d:d8:8f:5d:5e:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:CC:05:5A:39:5B:A9:7E:9D:83:EE:2C:DF:67:41:51:B0:AB:1C
            X509v3 Authority Key Identifier:
                keyid:C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:46:ae:62:8d:d6:01:6a:26:c6:61:b1:e6:5e:37:99:6a:e6:
         17:e6:fa:dd:d3:26:99:0a:e3:53:93:8d:89:5d:e2:35:1c:0e:
         e5:09:4a:6f:4f:e3:e5:b6:1f:65:21:01:e3:4e:23:3f:b2:10:
         27:c1:ed:6c:2e:79:f2:e9:a9:a3:66:6f:58:cb:eb:e6:31:19:
         9a:94:e9:db:1c:c2:cb:8c:bd:72:36:90:3d:4a:2b:5c:ca:2f:
         8c:59:57:c7:db:a1:df:19:06:6b:9c:83:5d:55:02:88:b7:8b:
         13:4b:00:d5:7a:b7:9e:14:0b:4e:0e:b4:bb:81:b1:2b:c3:86:
         6a:e6:24:c5:4d:bb:45:ac:74:7c:2e:17:41:38:7c:9f:e1:0e:
         92:c8:b5:40:ec:17:4f:05:9a:b9:dd:06:58:f5:8f:8a:f8:64:
         81:38:eb:f2:33:85:79:d2:9c:3f:9e:c8:d3:c8:63:92:b9:44:
         62:6b:f1:1d:74:11:53:ba:ec:ee:98:5c:4b:99:01:8e:61:27:
         05:bf:99:6d:4d:51:cd:a0:e3:75:d4:72:53:8c:d0:7f:87:eb:
         b3:73:7b:76:4f:01:d7:94:ba:59:ea:b5:bb:39:05:78:c6:2a:
         38:75:ab:3c:45:23:10:cd:a5:ca:8a:40:25:c5:79:53:92:09:
         ff:5e:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----