Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
File:                     CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft (raw, json)
Hash identifier:          t0Lx5YW9xlRoelwazjBPw0DWuWXnz8GXttEq4zmTVs8=
Subject key identifier:   64:95:60:27:30:1F:67:A1:5D:01:8F:FE:A5:21:6E:54:0B:62:2B:83
Authority key identifier: CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E
Certificate issuer:       /CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
Certificate serial:       1FF5D92E418362240310168868853B6C724D3928
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
Manifest number:          A2
Signing time:             Sat 31 Oct 2026 08:41:05 +0000
Manifest this update:     Sat 31 Oct 2026 08:36:05 +0000
Manifest next update:     Sun 01 Nov 2026 09:00:05 +0000
Files and hashes:         1: 3230302e35302e3232312e302f32342d3234203d3e20323730343630.roa (hash: SMH5o9n1CaOMHF5Y9beGOeviiTT2vMf2uIf9n2Rb53o=)
                          2: 323830343a366335343a323030303a3a2f33352d3335203d3e20323730343630.roa (hash: gpgh2xrfm88adNbTLqZF/FxrwU7ox0xyD+CH97e+f9E=)
                          3: 323830343a366335343a3a2f33322d3332203d3e20323730343630.roa (hash: 8q/6yDbYiVWgtiIym0QLoY1wo86ISPzLjrR9/UvlbfY=)
                          4: CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl (hash: FddMpy2aY2eYmRczRYqpYPSXL1TLLLZqFdM9XvKqvFg=)
                          5: 3230302e35302e3232332e302f32342d3234203d3e20323730343630.roa (hash: G4XnYpdlTUxrWG7e8WOWG4NcX4N4Gz1WzA1CBIh4LvM=)
                          6: 323830343a366335343a3a2f33332d3333203d3e20323730343630.roa (hash: ZBH9g9Sc/Z3YSkVkNlNFqSkD7UL3dK+tLdYmHOI48/Q=)
                          7: 3230302e35302e3232322e302f32342d3234203d3e20323730343630.roa (hash: kaiRmg3cuVPiYECjXpAJrhkreok4VX9St4UOdFai7j8=)
                          8: 3230302e35302e3232302e302f32342d3234203d3e20323730343630.roa (hash: tH26EoC8V2q1Ampd2pDJYsXR8qok65GAeIMnOio7CmQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f5:d9:2e:41:83:62:24:03:10:16:88:68:85:3b:6c:72:4d:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
        Validity
            Not Before: Oct 31 08:36:05 2026 GMT
            Not After : Nov  1 09:00:05 2026 GMT
        Subject: CN=64956027301F67A15D018FFEA5216E540B622B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:45:7b:f7:5a:03:77:aa:36:20:29:bd:0a:
                    8c:97:b7:b2:f1:91:aa:b5:d5:67:22:ab:52:7b:e3:
                    b8:1d:ba:5b:12:7c:3c:31:73:80:8c:3b:3e:d2:f7:
                    1f:dd:e8:cd:ff:74:a9:b3:7a:98:67:b1:07:ca:65:
                    4c:90:92:76:1c:10:60:f3:8c:4d:f4:ec:6a:7e:45:
                    31:40:22:03:7a:b7:44:03:31:c2:7c:f2:57:d9:7d:
                    33:0c:15:a0:92:99:d6:27:5e:49:b0:7e:18:4a:ed:
                    d6:bf:d0:e7:da:d9:77:39:46:60:6c:e5:eb:81:1a:
                    7f:68:ab:f5:dc:44:03:e4:81:36:98:c3:f9:c5:3e:
                    3d:43:6a:2c:44:4d:32:eb:b7:cd:89:18:d6:b4:76:
                    75:db:1a:fc:05:77:14:bf:c7:7a:ff:55:87:02:50:
                    00:85:a9:81:af:33:87:34:ab:67:62:02:d2:8f:e8:
                    b4:4f:d6:c3:b0:7e:4b:8b:a3:94:65:12:84:04:32:
                    61:b8:a9:5e:2f:8d:67:83:b5:1c:d3:9b:28:fc:da:
                    4e:38:d4:c4:5c:5b:c9:ec:7f:b7:dc:ce:02:79:28:
                    a0:16:f6:31:8e:7a:7e:eb:a2:95:79:68:3c:5d:47:
                    98:a1:5d:b2:e6:55:5f:dd:54:f8:18:44:48:e0:44:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:60:27:30:1F:67:A1:5D:01:8F:FE:A5:21:6E:54:0B:62:2B:83
            X509v3 Authority Key Identifier:
                keyid:CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:ed:e5:05:48:6c:ff:a9:75:01:06:db:f7:ee:72:dc:85:
         49:e7:69:77:bd:e6:19:57:e4:a8:40:da:43:de:be:ed:ec:14:
         a3:10:2b:4d:e9:88:3d:a2:05:7b:99:91:e3:b6:1a:b1:8a:c1:
         cb:f3:20:88:b0:6b:7b:64:c7:44:fe:68:8d:63:b1:81:7a:90:
         22:a1:f9:80:5b:45:7c:87:02:b3:37:e7:7a:54:46:ab:9c:03:
         41:df:bc:e8:4c:85:4a:2f:85:c3:2d:81:3d:1b:7c:f7:39:e9:
         49:ef:4a:62:15:08:a9:7d:66:03:be:9e:a2:c4:b7:d4:6f:26:
         ce:d0:a0:a2:57:65:b6:ba:43:bb:02:0f:00:29:cb:ab:74:dd:
         cb:15:1e:10:d2:df:69:fc:3f:71:7a:ce:66:54:1e:97:75:30:
         3b:b8:24:ef:cf:7c:b0:b2:87:2a:55:f2:25:b3:4a:4a:56:13:
         b3:12:36:af:d0:28:81:58:e0:44:2d:87:89:55:d4:37:0d:8d:
         c3:9d:3c:ae:1e:3e:2d:c7:b2:48:bb:64:14:8a:22:03:6e:4d:
         2c:11:c8:55:06:d8:6e:70:46:0c:c1:ee:16:9f:f5:61:22:5e:
         66:b6:7c:0b:9f:44:68:a7:43:6d:5f:af:e1:21:08:56:7e:1c:
         e7:6f:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:23:27 2026 by rpki-client