Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
File:                     8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json)
Hash identifier:          eTXkBvfGkrWNUSD/AD4GWDPkEQ72SBUfR0Aq+yESxK4=
Subject key identifier:   05:E9:99:4E:C2:A6:7A:F5:BF:C3:0C:E1:EB:58:B3:46:57:87:60:97
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       4A04023C29FA8E59C205B07CA8CB3256943A69F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
Manifest number:          03F9
Signing time:             Mon 02 Nov 2026 02:41:57 +0000
Manifest this update:     Mon 02 Nov 2026 02:36:57 +0000
Manifest next update:     Tue 03 Nov 2026 03:28:57 +0000
Files and hashes:         1: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: DZUKJT58QNvDzjKeLYED3eYPaCQV0SjeRB5gzfW7e7I=)
                          2: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: bHkaMgsQI+wNREFKFuJNbcR0Pr4FXc5yHzm39e6iE2U=)
                          3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: K40N9mXvvtMqpcq2iu0ReTw4XP+cUep5UNV2t5F0hm4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 03:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:04:02:3c:29:fa:8e:59:c2:05:b0:7c:a8:cb:32:56:94:3a:69:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Nov  2 02:36:57 2026 GMT
            Not After : Nov  3 03:28:57 2026 GMT
        Subject: CN=05E9994EC2A67AF5BFC30CE1EB58B34657876097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:b0:fd:e7:48:f6:04:23:a2:64:18:da:21:
                    3c:71:92:5c:72:de:8e:cd:a1:43:22:ea:0d:a7:b7:
                    8c:d0:2f:15:a1:a1:7d:cc:54:ab:eb:df:6b:35:ac:
                    13:d9:7f:6f:9d:5c:6a:c1:ce:0e:95:3c:05:51:5f:
                    b9:a6:84:c3:8d:76:b5:98:e4:95:a2:f5:b0:96:8c:
                    6c:53:f4:a6:71:7d:4e:12:1e:8f:76:44:91:61:8f:
                    03:13:7f:bf:14:06:84:a1:43:c8:36:39:ba:17:60:
                    ce:17:93:bd:cd:3d:91:0d:f8:48:ce:8c:8e:b7:a5:
                    64:ee:a3:44:ec:90:9d:64:12:ca:03:04:78:50:67:
                    7d:ef:3e:e2:17:ea:8f:a9:5d:53:c5:53:dd:60:77:
                    69:0f:93:9f:7b:fd:f1:04:ff:6b:4d:01:00:ce:42:
                    84:fd:47:ee:14:04:29:a9:11:87:8c:22:fd:c6:8c:
                    cd:11:b3:ce:32:57:68:77:9d:c1:b6:1b:1e:a5:0b:
                    d6:1b:59:c2:ac:f7:cd:3f:cf:e4:a3:fa:c4:da:6f:
                    01:ac:f9:af:84:f0:be:8e:b6:c3:66:9a:53:a8:27:
                    3f:39:1f:33:87:da:e5:d0:c0:01:89:f2:e9:c5:e6:
                    03:b8:e7:cb:e0:72:6f:6c:3c:d3:2f:12:0b:d0:1f:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:99:4E:C2:A6:7A:F5:BF:C3:0C:E1:EB:58:B3:46:57:87:60:97
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:76:b1:19:90:70:ec:02:37:59:f7:db:55:bb:21:e9:db:67:
         50:f0:1e:2d:6d:7e:a4:1d:ef:f3:7e:e5:35:46:68:5f:98:16:
         a8:55:f1:f0:e1:d4:8d:e0:a1:4a:73:bc:c3:58:3f:50:03:36:
         25:12:fa:2a:28:07:a8:a9:c3:ce:96:dc:04:ac:f3:24:d7:d4:
         92:ca:35:4c:4d:d2:0f:94:81:12:f4:8f:47:00:db:97:dc:6a:
         4b:c0:39:ce:34:62:be:9b:c6:6a:7a:6c:6c:ab:0c:4e:a3:1c:
         65:5e:78:5d:bf:04:5e:13:b1:2b:61:2c:87:a0:02:49:55:bb:
         f6:2a:aa:7b:14:d8:5a:02:e5:c6:57:52:47:35:2a:78:54:75:
         be:4f:fb:61:ed:68:7b:ed:a2:63:12:99:77:37:2e:f1:ce:8a:
         3b:bc:b5:e5:5d:50:c0:6b:ae:d9:92:fa:39:b1:27:2b:65:93:
         3e:dc:56:b7:18:c4:32:ab:64:76:57:95:f1:c3:97:4e:a9:ea:
         31:37:6e:3a:52:05:33:35:b7:aa:57:f2:41:67:9d:f4:7f:a4:
         86:d1:a3:f2:33:7a:c0:e5:34:a7:6d:b0:79:02:d0:14:5b:97:
         0e:8b:62:58:c9:05:ec:5c:b5:69:7a:51:70:7b:9d:e3:92:c9:
         98:a6:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:19:14 2026 by rpki-client