Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FXK5p9aQhbw5TKGg2EioAVyuM8kyg1nvrm9okvMCmMND/0/CA765DEA8044E80FDB1414361A0CD09E358177C6.mft
File:                     CA765DEA8044E80FDB1414361A0CD09E358177C6.mft (raw, json)
Hash identifier:          yoENGJ31IFQESshu34z7V/2tQYNvl0sF40j4baQG4Ys=
Subject key identifier:   44:FD:75:3C:BA:D0:E7:AA:9F:1B:7F:53:26:D1:25:EB:46:12:B5:05
Authority key identifier: CA:76:5D:EA:80:44:E8:0F:DB:14:14:36:1A:0C:D0:9E:35:81:77:C6
Certificate issuer:       /CN=CA765DEA8044E80FDB1414361A0CD09E358177C6
Certificate serial:       283C27F1A00810F7C4BF1431660B2982BC57F443
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA765DEA8044E80FDB1414361A0CD09E358177C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXK5p9aQhbw5TKGg2EioAVyuM8kyg1nvrm9okvMCmMND/0/CA765DEA8044E80FDB1414361A0CD09E358177C6.mft
Manifest number:          2A
Signing time:             Sun 11 Oct 2026 21:50:09 +0000
Manifest this update:     Sun 11 Oct 2026 21:45:09 +0000
Manifest next update:     Mon 12 Oct 2026 23:11:09 +0000
Files and hashes:         1: 323830343a393734383a3a2f33322d3332203d3e20323735363133.roa (hash: hlA8t5phoHqokJu32TH44AbqU1e6EkgZcyYTaiP4DNs=)
                          2: CA765DEA8044E80FDB1414361A0CD09E358177C6.crl (hash: 2hdfdyu83mO7oMIDIHg0ZEPDcdQEPHZ3DoafL2VNWH8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXK5p9aQhbw5TKGg2EioAVyuM8kyg1nvrm9okvMCmMND/0/CA765DEA8044E80FDB1414361A0CD09E358177C6.crl
                          rsync://rpki-repo.registro.br/repo/FXK5p9aQhbw5TKGg2EioAVyuM8kyg1nvrm9okvMCmMND/0/CA765DEA8044E80FDB1414361A0CD09E358177C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA765DEA8044E80FDB1414361A0CD09E358177C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 23:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3c:27:f1:a0:08:10:f7:c4:bf:14:31:66:0b:29:82:bc:57:f4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA765DEA8044E80FDB1414361A0CD09E358177C6
        Validity
            Not Before: Oct 11 21:45:09 2026 GMT
            Not After : Oct 12 23:11:09 2026 GMT
        Subject: CN=44FD753CBAD0E7AA9F1B7F5326D125EB4612B505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:c0:13:f9:d7:67:ec:f9:7d:81:41:02:ef:
                    2c:65:4b:79:d4:40:07:44:87:80:06:22:65:fa:3c:
                    f1:8b:53:11:12:7f:3c:6f:36:90:53:be:a4:9c:ff:
                    b3:60:5c:94:fa:e0:3e:c3:b2:df:ca:f5:e3:38:73:
                    e6:28:11:83:3f:00:61:f1:da:e0:6e:3d:33:8c:d5:
                    56:f3:9c:bf:9c:79:d6:d2:51:8b:4c:f6:ae:6c:6f:
                    98:3e:84:db:3d:50:d5:a1:28:2b:82:2f:ed:9c:37:
                    84:d5:d6:e5:2d:c2:42:9f:7a:59:cc:01:4b:b2:24:
                    8a:52:a4:e3:de:a8:6a:cb:16:d8:42:72:5c:4e:a4:
                    50:d6:ef:33:37:79:70:6c:d5:79:b7:9d:6b:e9:80:
                    f3:8e:ee:4d:45:54:12:07:4a:87:0d:7e:2b:e0:2d:
                    bc:cc:9f:cb:e7:4b:f4:54:90:2b:3c:d3:33:d0:d2:
                    a6:d2:60:33:80:0f:58:25:cd:02:c8:44:5a:b9:b4:
                    0e:da:bf:6a:d2:8a:38:e0:2a:a3:e0:6e:d7:5e:c7:
                    87:23:29:4f:25:7a:50:7e:24:21:6f:4a:42:17:79:
                    57:d0:98:f4:cc:e2:c3:97:40:ff:ae:72:e9:53:c7:
                    86:7d:33:10:d5:b0:66:94:83:51:85:4b:cf:a9:ee:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FD:75:3C:BA:D0:E7:AA:9F:1B:7F:53:26:D1:25:EB:46:12:B5:05
            X509v3 Authority Key Identifier:
                keyid:CA:76:5D:EA:80:44:E8:0F:DB:14:14:36:1A:0C:D0:9E:35:81:77:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXK5p9aQhbw5TKGg2EioAVyuM8kyg1nvrm9okvMCmMND/0/CA765DEA8044E80FDB1414361A0CD09E358177C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA765DEA8044E80FDB1414361A0CD09E358177C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXK5p9aQhbw5TKGg2EioAVyuM8kyg1nvrm9okvMCmMND/0/CA765DEA8044E80FDB1414361A0CD09E358177C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:05:a3:78:6b:bd:b8:01:02:43:32:37:29:db:0b:a1:b2:95:
         dc:91:59:81:c6:51:85:aa:37:00:32:cb:e1:fa:85:8b:be:f0:
         ca:e9:fa:b5:34:5e:3d:a6:e9:72:64:a1:19:50:6a:d0:bc:0f:
         1a:a4:d0:5f:d9:d9:54:91:d4:76:6b:35:21:1f:c3:ef:9b:d0:
         f2:9a:76:69:6a:9c:0a:62:97:e9:e9:05:6c:ff:f6:a6:1d:fc:
         09:dc:ae:74:3e:3e:84:4e:42:c7:93:fc:ed:11:4e:57:f3:07:
         b1:ee:e5:5d:f6:39:e7:ce:c7:9d:99:d7:ae:61:8f:67:db:57:
         c4:68:c9:0c:df:1d:ef:32:bd:61:8a:7f:94:5c:c4:a9:02:c5:
         c3:ac:66:87:e8:91:e4:fa:bb:c2:11:cc:57:5a:90:31:9e:36:
         7e:14:b2:61:ac:8b:07:dd:bf:48:39:29:74:6f:72:2d:6a:e1:
         01:d2:4d:27:8e:e6:4e:90:03:c5:86:3f:10:63:36:af:5e:e5:
         08:37:5f:78:76:0c:66:05:4b:b2:43:e0:cc:58:36:e3:6e:ad:
         c3:33:ad:2d:f0:dc:be:a8:ef:25:78:5b:bc:7c:f8:62:f1:18:
         6e:7b:6e:dd:47:e6:9c:62:b0:c0:e3:d3:d0:67:13:bb:9f:f0:
         01:5c:51:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:57:14 2026 by rpki-client