Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
File:                     1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft (raw, json)
Hash identifier:          RUAivguAWlA4ean3APRml3u0N03swjln25a/ElwoNIc=
Subject key identifier:   90:2B:EE:9F:A4:34:E3:D3:EF:2F:CC:0C:D2:36:CB:05:80:8B:A2:8E
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       21BED16259C266C4216E10CA1898B9AAADCFF72D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
Manifest number:          02CF
Signing time:             Wed 14 Oct 2026 00:05:47 +0000
Manifest this update:     Wed 14 Oct 2026 00:00:47 +0000
Manifest next update:     Thu 15 Oct 2026 04:00:47 +0000
Files and hashes:         1: 323830343a326231303a3a2f33382d3338203d3e203532393136.roa (hash: 9Yw+mX6QhIFgXtbfJbDMoqmS8YuJDWR6CgINnqw8648=)
                          2: 323830343a326231303a3a2f33372d3337203d3e203532393136.roa (hash: xBW2n7MA5JJaKIHDgj7ib2yYgr1MKAn+k/9Vj9ASNcs=)
                          3: 323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa (hash: jfYpBujcF9BZTeO1XIZOkZ7yJ+tTjTNSqLYCao2XPI0=)
                          4: 1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl (hash: iPMyHT4CR8pizzoTeJmwoHJizUhtWjeiSEcOd2GHjYU=)
                          5: 3134332e3235352e31362e302f32322d3232203d3e203532393136.roa (hash: 7GzhRRv+3GRUk16KqccgdZ1yoAxgpPuiRCaE52IPHqY=)
                          6: 323830343a326231303a3a2f33392d3339203d3e203532393136.roa (hash: 8b/hCraUx/MusoZST5SuEyQ1+MU1+TV1clEr5j5vdog=)
                          7: 3137372e31302e32302e302f32322d3232203d3e203532393136.roa (hash: Ml3I4qzKe6T8WDZeJmLBKCwdzvrj84LixQTRc8VaVQw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:be:d1:62:59:c2:66:c4:21:6e:10:ca:18:98:b9:aa:ad:cf:f7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Oct 14 00:00:47 2026 GMT
            Not After : Oct 15 04:00:47 2026 GMT
        Subject: CN=902BEE9FA434E3D3EF2FCC0CD236CB05808BA28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:cc:a1:e3:6a:f1:e6:dd:e3:74:ef:0b:82:
                    9d:21:e1:af:3d:5d:a0:01:bc:89:1d:33:b4:a1:d6:
                    28:5f:27:33:ca:0e:9b:d7:1a:0f:59:a4:b3:0d:88:
                    38:2e:1c:17:7f:f3:04:9c:75:d6:de:f3:6a:45:e8:
                    d7:1e:e6:26:11:61:cf:05:d5:81:19:6b:86:e8:fc:
                    45:b6:21:31:c2:92:c5:25:79:b7:24:1d:f8:bb:d2:
                    9d:50:0f:e0:6a:bd:14:66:48:3f:49:20:a3:71:89:
                    6e:f3:09:b6:fd:44:3b:20:c1:7c:83:ca:a1:0c:e7:
                    fa:9a:20:19:d6:63:b0:6e:43:35:31:6c:d7:fe:5f:
                    21:7b:66:ac:10:84:c5:cc:77:a3:91:07:eb:ef:03:
                    c1:b5:d4:b0:97:b7:6f:98:b9:6d:17:6e:db:6c:95:
                    52:8d:cc:16:65:3a:30:c7:48:fa:af:d4:b9:34:3b:
                    23:d1:de:83:f6:89:fe:d9:4d:46:ee:3b:91:d6:10:
                    97:ba:59:bb:ac:c7:46:56:ba:0d:5d:fd:05:78:c4:
                    02:ed:32:1f:54:30:66:b8:a8:b4:95:f1:a5:7a:76:
                    ac:87:57:b5:fd:78:f8:a6:a4:a7:ea:3e:ee:50:af:
                    c6:a1:a7:c1:59:06:e1:32:50:1b:be:95:c4:b9:1a:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2B:EE:9F:A4:34:E3:D3:EF:2F:CC:0C:D2:36:CB:05:80:8B:A2:8E
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0d:03:16:ac:42:2e:44:29:93:29:4c:a8:8c:78:72:b6:76:
         15:b3:92:a8:26:c0:d4:35:32:00:28:5a:8f:53:1b:67:5c:6c:
         79:7c:5c:8f:ab:14:97:e4:54:2d:27:21:49:79:e7:81:7d:ab:
         a5:b7:51:9e:fd:61:45:cf:21:35:7a:fd:b3:60:9d:69:9a:f4:
         b7:b6:4e:40:39:87:9e:13:2c:44:1f:8c:d6:0a:fb:90:a4:c9:
         08:a3:a1:7b:ff:15:a4:6a:4f:4f:8e:2d:60:38:15:02:8c:46:
         00:0e:35:bf:72:d5:73:77:65:77:98:5b:1b:dd:00:2b:2b:2f:
         21:c1:de:7a:19:ba:53:e8:53:b9:1b:36:65:37:c4:ab:07:25:
         b5:83:c0:49:a8:8e:f2:7b:c7:4d:b6:91:7c:ca:ef:42:2d:13:
         69:43:c9:8a:80:2a:b3:1f:d2:d3:c9:91:88:f0:9c:e1:45:0e:
         83:2d:6d:da:14:25:e6:b6:56:94:9d:3f:ed:50:d1:c2:92:3e:
         02:cf:c1:4c:af:ac:b2:5d:90:88:13:c3:2b:d9:78:f5:27:e1:
         4e:66:be:23:ed:67:66:e9:ca:ea:65:50:39:43:57:1d:53:b6:
         10:77:cd:df:e0:f3:a1:c7:f3:83:4b:b0:3e:f3:6f:dd:bc:22:
         06:a9:16:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIb7RYlnCZsQhbhDKGJi5qq3P9y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyOEY5M0RCNzMwRDkxREMwMDkxREY5OEM2RjAyMjlF
REE2OUNFRTAeFw0yNjEwMTQwMDAwNDdaFw0yNjEwMTUwNDAwNDdaMDMxMTAvBgNV
BAMTKDkwMkJFRTlGQTQzNEUzRDNFRjJGQ0MwQ0QyMzZDQjA1ODA4QkEyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vcyh42rx5t3jdO8Lgp0h4a89
XaABvIkdM7Sh1ihfJzPKDpvXGg9ZpLMNiDguHBd/8wScddbe82pF6Nce5iYRYc8F
1YEZa4bo/EW2ITHCksUlebckHfi70p1QD+BqvRRmSD9JIKNxiW7zCbb9RDsgwXyD
yqEM5/qaIBnWY7BuQzUxbNf+XyF7ZqwQhMXMd6ORB+vvA8G11LCXt2+YuW0Xbtts
lVKNzBZlOjDHSPqv1Lk0OyPR3oP2if7ZTUbuO5HWEJe6Wbusx0ZWug1d/QV4xALt
Mh9UMGa4qLSV8aV6dqyHV7X9ePimpKfqPu5Qr8ahp8FZBuEyUBu+lcS5GgTPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkCvun6Q049PvL8wM0jbLBYCLoo4wHwYDVR0j
BBgwFoAUECj5Pbcw2R3ACR35jG8CKe2mnO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMS8xMDI4RjkzREI3MzBEOTFEQzAwOTFERjk4QzZGMDIyOUVEQTY5Q0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMjhGOTNEQjczMEQ5MURD
MDA5MURGOThDNkYwMjI5RURBNjlDRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMS8x
MDI4RjkzREI3MzBEOTFEQzAwOTFERjk4QzZGMDIyOUVEQTY5Q0VFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUA0DFqxCLkQpkylMqIx4crZ2FbOSqCbA1DUyAChaj1MbZ1xseXxcj6sUl+RU
LSchSXnngX2rpbdRnv1hRc8hNXr9s2CdaZr0t7ZOQDmHnhMsRB+M1gr7kKTJCKOh
e/8VpGpPT44tYDgVAoxGAA41v3LVc3dld5hbG90AKysvIcHeehm6U+hTuRs2ZTfE
qwcltYPASaiO8nvHTbaRfMrvQi0TaUPJioAqsx/S08mRiPCc4UUOgy1t2hQl5rZW
lJ0/7VDRwpI+As/BTK+ssl2QiBPDK9l49SfhTma+I+1nZunK6mVQOUNXHVO2EHfN
3+Dzocfzg0uwPvNv3bwiBqkWDw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:59:53 2026 by rpki-client