Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File:                     2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier:          4IlTxjgvIZD0eog7ckIlpIVagxbYLuSo8nC+5ykklh8=
Subject key identifier:   42:96:AF:34:EF:D9:A4:4D:B5:5A:83:18:97:14:F1:E6:89:73:67:AC
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       6ACC2BC8492DDE4B7D9831572899C6B47232C62A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number:          03B5
Signing time:             Wed 28 Oct 2026 15:03:17 +0000
Manifest this update:     Wed 28 Oct 2026 14:58:17 +0000
Manifest next update:     Thu 29 Oct 2026 16:14:17 +0000
Files and hashes:         1: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: 3Jx/ydpDgAIaYBfX4HzoCu53GKmkKQIYK6x4cFgIeXo=)
                          2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: Wi6QpMQ/X66f95Sijtg4nC/1zQgyY0bNty9hR8GpomI=)
                          3: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: XITAdmb++yUINuYFtHA6APKEALxh7PgOTyzyaA/fr4U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 16:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cc:2b:c8:49:2d:de:4b:7d:98:31:57:28:99:c6:b4:72:32:c6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Oct 28 14:58:17 2026 GMT
            Not After : Oct 29 16:14:17 2026 GMT
        Subject: CN=4296AF34EFD9A44DB55A83189714F1E6897367AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:1b:59:20:3b:d1:40:9e:bd:dc:be:16:04:
                    ca:00:be:e3:a5:88:32:8c:f5:69:6a:16:24:66:20:
                    4f:0b:63:44:5b:82:3f:6e:f0:fc:cd:b5:c9:98:2a:
                    54:d3:b0:ce:39:12:96:9e:67:e5:5f:25:4e:0f:22:
                    09:ee:f7:74:92:9d:0d:5a:66:84:50:e3:4d:e6:cb:
                    f3:7b:61:37:e2:ed:68:13:02:b0:77:1e:6b:fd:ca:
                    88:a6:3f:89:0d:f9:a6:32:5b:f3:e5:25:89:a5:df:
                    95:09:5e:20:d4:d7:07:eb:08:55:9a:4b:2f:79:2f:
                    e5:74:8a:f3:ce:46:3c:fa:e0:b9:0d:ef:a6:81:91:
                    d7:60:10:0e:a0:6d:dc:a6:9a:55:a6:03:56:67:c9:
                    b0:ba:d1:3a:05:0a:fd:0b:dd:4c:a3:5c:78:49:33:
                    35:07:8d:9e:d5:24:37:bd:01:6a:41:43:08:33:e4:
                    9e:f0:a3:92:04:48:97:d4:ad:2b:a4:e2:8c:93:19:
                    52:30:47:ba:df:89:9d:fb:40:e4:c1:0b:70:c6:3d:
                    69:c3:a4:d2:07:53:ba:12:95:dd:c5:e7:00:45:80:
                    ef:f1:dd:d8:2c:10:3a:9c:9b:be:a3:f1:37:4c:5f:
                    af:da:a1:27:63:f5:59:c4:9f:d9:a1:4e:f3:ab:60:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:AF:34:EF:D9:A4:4D:B5:5A:83:18:97:14:F1:E6:89:73:67:AC
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:14:85:93:95:46:4e:2e:bd:44:ce:1f:4c:ec:78:66:9f:81:
         cb:20:0f:9f:43:87:d5:63:56:f7:eb:21:db:67:44:e1:33:2f:
         5d:f9:76:2b:e7:60:3c:3c:a7:3a:c4:33:c6:fe:e9:9c:8c:29:
         a3:9f:51:e3:a7:5e:cd:d4:39:b0:89:cc:2f:44:7f:8c:3f:37:
         cb:75:03:9a:c9:d8:91:e6:38:65:14:b0:cf:04:56:76:52:c9:
         a1:43:ae:c2:7a:0e:1e:f4:05:c3:d1:1e:dd:65:1a:39:6e:dd:
         ce:0d:f2:12:c8:a7:5b:e6:c7:d0:90:39:1c:1d:e3:a9:94:59:
         45:68:dd:6f:e6:81:4a:47:1c:32:ce:ca:0f:a4:7f:b5:8a:69:
         37:66:90:a5:e0:d0:26:75:fe:fe:71:73:e3:0b:43:a7:5a:29:
         be:61:17:50:a2:53:fa:db:30:c4:2a:9f:01:51:2c:d2:75:19:
         42:75:c0:9c:40:3f:49:26:0d:3d:47:00:db:b0:14:dc:bf:2a:
         22:79:4e:16:07:a0:4d:7e:9b:14:e7:3b:63:ba:95:2e:8b:f1:
         57:b1:4c:8e:4f:d5:c0:ff:5c:41:8f:4f:6b:57:f5:d8:c8:1f:
         2a:e2:91:87:a7:c9:6e:9e:dc:26:69:e9:94:64:3b:dd:ca:19:
         cd:50:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----