Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          3z84WbkpGcCNJXJeD+hmjilQcycOcGot27+12n89GpU=
Subject key identifier:   8A:20:A3:8B:1E:05:72:D0:DA:1E:8A:EB:E7:0C:D9:9F:96:1E:2D:73
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       681EF4CB8ADC7F979C3E5EE02399A623AB6C8C73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          04CE
Signing time:             Wed 14 Oct 2026 08:11:47 +0000
Manifest this update:     Wed 14 Oct 2026 08:06:47 +0000
Manifest next update:     Thu 15 Oct 2026 10:49:47 +0000
Files and hashes:         1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=)
                          2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: 0O2/5WRGZ6xbrHRE95qPLndaYfFp4PxA8/mmhEIANnc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:f4:cb:8a:dc:7f:97:9c:3e:5e:e0:23:99:a6:23:ab:6c:8c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Oct 14 08:06:47 2026 GMT
            Not After : Oct 15 10:49:47 2026 GMT
        Subject: CN=8A20A38B1E0572D0DA1E8AEBE70CD99F961E2D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:bc:61:bd:19:ce:c7:a2:6c:38:c1:cc:62:
                    1f:b4:a3:99:e8:f5:3c:62:d3:6e:81:91:5e:c5:ff:
                    a2:06:5e:02:82:4a:e2:02:62:8b:b4:22:10:9c:84:
                    fc:f4:2b:49:90:09:b6:17:19:42:90:17:24:62:33:
                    4b:4e:0b:14:0d:52:84:8e:70:17:8f:ce:b5:32:35:
                    eb:ff:5a:96:c3:ef:aa:f8:64:ee:37:eb:4a:66:a4:
                    89:c5:91:36:c0:fc:6d:37:db:f5:38:c9:49:4d:70:
                    f4:4e:f5:d7:c1:62:d0:03:06:57:b3:97:38:62:d2:
                    2a:1f:cf:c6:4d:cb:0e:4c:93:0b:c0:be:e7:4d:d1:
                    4a:12:1b:29:34:5f:55:87:f3:43:23:fd:dc:2c:a2:
                    4e:31:89:4d:67:62:5a:c2:43:c6:0a:4d:0c:ba:ce:
                    cb:04:43:48:f6:31:4a:c4:7d:33:cf:c2:ae:bb:fb:
                    51:a4:ad:cd:40:ca:78:42:7e:e7:79:ff:64:c5:90:
                    d0:7e:3a:f2:56:19:17:76:09:e2:02:dc:09:d4:ea:
                    84:1b:bb:b0:dd:02:a4:11:7a:72:58:de:1e:17:fb:
                    cb:7f:c8:4c:d3:2f:83:bd:9d:87:1a:2f:07:8f:65:
                    ba:dd:09:4e:a0:6a:cb:6a:63:ff:2b:20:29:35:ad:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:20:A3:8B:1E:05:72:D0:DA:1E:8A:EB:E7:0C:D9:9F:96:1E:2D:73
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:08:26:07:c7:be:0a:d5:d4:d8:51:47:14:36:cf:68:4a:44:
         bb:f5:1f:19:fa:78:93:b2:6a:aa:c7:8e:8b:bd:3c:a8:68:4a:
         dd:76:83:ac:75:91:e4:b8:d1:43:2a:f2:02:0d:b2:56:5d:47:
         d9:0e:d4:7f:d2:92:c1:b8:6a:bb:8d:59:d4:c4:08:ec:31:f8:
         43:e1:ff:09:24:97:36:a0:a1:69:54:ec:21:ba:bb:10:a5:18:
         c5:3c:eb:a1:a7:d6:bf:a9:42:c8:44:f5:d6:b7:fe:6a:a9:76:
         1e:28:d5:c7:5a:1d:ab:ab:b9:6b:a8:b0:a2:90:d0:ea:7e:fb:
         e0:a7:d8:88:23:58:6b:42:f9:e5:9e:5d:d2:31:fc:78:68:ef:
         ed:f2:57:3b:56:b2:65:87:d6:83:60:38:23:f2:e8:b6:8e:0c:
         b7:c3:1f:8e:0f:f3:18:2f:53:de:51:1f:35:f7:5f:94:74:ed:
         09:9c:98:88:ee:3f:0d:4a:50:00:31:1d:14:b9:76:71:83:cb:
         01:b5:11:ec:83:7b:12:ec:fc:d4:d9:82:43:6c:0d:c1:41:83:
         6b:e0:ba:2d:f8:c2:b6:56:02:7e:2e:ac:56:ef:55:cb:1c:26:
         48:58:41:d1:d1:1c:00:13:a3:38:ea:72:3e:e5:3d:3f:65:b6:
         51:d3:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----