Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft
File:                     27A8979B6F02B01140ACE2AF10E4E54944037A11.mft (raw, json)
Hash identifier:          yUh3dQe2hckGGvtdfxlwEK4Vd5OPVqttyBrMu0cTe50=
Subject key identifier:   13:17:3B:BA:14:85:F8:8B:4B:D8:FE:58:44:96:CA:68:AA:05:B3:00
Authority key identifier: 27:A8:97:9B:6F:02:B0:11:40:AC:E2:AF:10:E4:E5:49:44:03:7A:11
Certificate issuer:       /CN=27A8979B6F02B01140ACE2AF10E4E54944037A11
Certificate serial:       185E327D56D5346FE94E8FCCA2306D3D2AEC37AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A8979B6F02B01140ACE2AF10E4E54944037A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft
Manifest number:          C2
Signing time:             Thu 15 Oct 2026 11:14:04 +0000
Manifest this update:     Thu 15 Oct 2026 11:09:04 +0000
Manifest next update:     Fri 16 Oct 2026 13:04:04 +0000
Files and hashes:         1: 27A8979B6F02B01140ACE2AF10E4E54944037A11.crl (hash: mmqopunzz0kuHtD2g4EaRkWdkzAuGL/r9QZU2Je0cLU=)
                          2: 34352e3136332e36382e302f32322d3232203d3e20323638353539.roa (hash: Q4QAQKiu5797hUeZcAXzK+BQ7iADHiSZWeQtd9pzeWM=)
                          3: 34352e3136332e37302e302f32342d3234203d3e20323638353539.roa (hash: y0kMK9Myblk0g7ASvVR1e96IY5nQPKfZAXvCP+jFeu4=)
                          4: 34352e3136332e37312e302f32342d3234203d3e20323638353539.roa (hash: h61eg6nvXQTDjDgc2niICDkg+/s6f8lnuEsccTzmYiY=)
                          5: 34352e3136332e37302e302f32332d3233203d3e20323638353539.roa (hash: kp5+QSxWNEELAq5NoZt3EOl16e1kSwt1vFa0SfVy7Kc=)
                          6: 323830343a353330383a3a2f33322d3332203d3e20323638353539.roa (hash: vxW4vftRE0JQbJDrkFdNc5VjHh/N2eeYz2GoW5r7XKc=)
                          7: 34352e3136332e36382e302f32342d3234203d3e20323638353539.roa (hash: 281OEi9GugpqYJ2j7+Fs/BY1+O9L/hNXHKg8ZeaBbB4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.crl
                          rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A8979B6F02B01140ACE2AF10E4E54944037A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5e:32:7d:56:d5:34:6f:e9:4e:8f:cc:a2:30:6d:3d:2a:ec:37:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A8979B6F02B01140ACE2AF10E4E54944037A11
        Validity
            Not Before: Oct 15 11:09:04 2026 GMT
            Not After : Oct 16 13:04:04 2026 GMT
        Subject: CN=13173BBA1485F88B4BD8FE584496CA68AA05B300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:c3:ea:a1:39:dd:95:c8:32:a0:8f:30:fd:
                    71:40:4c:0a:88:97:48:3e:98:87:07:5b:51:b9:00:
                    f5:df:72:7d:99:0d:88:3a:91:ee:f7:8b:b0:67:e9:
                    33:2d:e9:67:aa:55:08:f4:b9:aa:2d:a8:f5:21:54:
                    fc:56:e9:26:d5:93:78:08:d8:54:af:52:be:6f:83:
                    eb:f2:36:ad:17:33:f9:ce:13:bc:18:73:9a:32:b8:
                    5f:03:5c:68:6e:3b:53:fb:87:89:53:99:df:55:a5:
                    ee:ce:8f:ce:6d:e4:41:4d:86:39:80:22:5b:3a:4f:
                    ad:68:4f:c1:37:5c:95:7f:41:af:9b:cb:59:86:c5:
                    2b:1a:0f:1f:12:6d:fc:aa:9c:27:8a:26:a7:c0:58:
                    d0:5e:2f:2a:18:63:3c:b3:3b:ad:f2:40:b0:fc:b9:
                    b1:69:c0:4e:78:48:58:b7:d7:7b:9c:8e:5a:c2:b6:
                    23:4b:e7:42:97:52:85:e0:a7:4b:26:3b:e6:19:18:
                    fe:e8:7a:bd:25:cc:7d:93:9b:43:94:bc:c5:c3:5a:
                    2e:31:7c:77:c8:72:29:88:00:c8:04:0d:90:07:a7:
                    58:83:74:7a:b1:b0:80:f4:d8:cc:3c:ba:3a:f9:2c:
                    55:21:a2:1e:94:fe:54:cd:7e:9f:84:89:1e:cd:96:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:17:3B:BA:14:85:F8:8B:4B:D8:FE:58:44:96:CA:68:AA:05:B3:00
            X509v3 Authority Key Identifier:
                keyid:27:A8:97:9B:6F:02:B0:11:40:AC:E2:AF:10:E4:E5:49:44:03:7A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27A8979B6F02B01140ACE2AF10E4E54944037A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbewdKtLDUG83Me9CpHcjrW3RcdDxwPXo8S6y3Ewe5uv/0/27A8979B6F02B01140ACE2AF10E4E54944037A11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:60:e6:04:2c:63:2c:16:9d:38:fb:20:78:94:e6:4f:be:ae:
         58:80:30:f8:a2:09:f5:db:ef:07:d2:db:66:c7:fa:ab:a5:a7:
         27:61:c0:2a:0f:32:87:c6:04:c2:a4:9d:87:68:17:23:6d:99:
         15:32:25:30:8b:a1:41:82:93:04:eb:8d:14:71:f4:83:c0:a0:
         5e:46:1a:b8:17:8f:ae:b8:27:45:24:8a:83:76:40:d3:0b:48:
         a6:f3:98:0d:28:24:c2:96:19:af:80:6c:36:34:20:05:d7:84:
         b6:41:ed:b7:49:1f:b2:25:18:37:18:c4:38:39:18:64:51:d5:
         f1:ce:06:a8:36:04:1b:60:d7:1c:c2:a4:a8:57:e1:0d:9a:52:
         db:06:d2:c8:ea:0f:c9:f6:c1:7f:71:88:f0:49:2c:5b:fd:ba:
         a4:44:d8:0a:6b:d1:9f:dc:b2:47:64:73:b2:e6:ab:af:68:60:
         d0:6f:00:83:86:ed:f5:45:c7:fc:7b:0c:47:61:ed:53:76:85:
         2b:08:65:45:74:71:d6:4f:0a:7a:cd:e7:c0:32:79:cc:44:fe:
         5d:d6:22:3f:cb:38:95:80:4d:42:58:65:5e:5d:25:93:2e:e4:
         2a:6d:1a:ec:0c:00:3a:3c:52:6a:16:8f:ba:c3:f1:d9:46:58:
         45:12:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:30:14 2026 by rpki-client