Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
File:                     C952C93A676BA611AEC114DD4983F2B03168FE10.mft (raw, json)
Hash identifier:          ZzEN/jbD5L2bIVsFcChPevHGjq+RFwrtJ5FmTg83fPQ=
Subject key identifier:   74:2B:96:4C:B2:7A:1C:32:FB:E6:79:62:53:2A:DC:E7:D6:1B:22:01
Authority key identifier: C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10
Certificate issuer:       /CN=C952C93A676BA611AEC114DD4983F2B03168FE10
Certificate serial:       51E2BB0A68867447B40C4977E8066EF42FBFFA68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
Manifest number:          025E
Signing time:             Wed 28 Oct 2026 00:35:41 +0000
Manifest this update:     Wed 28 Oct 2026 00:30:41 +0000
Manifest next update:     Thu 29 Oct 2026 04:25:41 +0000
Files and hashes:         1: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: imj7LsVHyqAiX/UYq3j4D64tJQWq6iQObTNkI6LXPB4=)
                          2: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: MNOIp/MtCxhxklXoGMBT0l+F7DSWEAMDjaS7QWGgvvk=)
                          3: C952C93A676BA611AEC114DD4983F2B03168FE10.crl (hash: AkkaFUyg2TywN5t9T+Rly3THIzwlGIcF/OlTWzF6EnU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl
                          rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e2:bb:0a:68:86:74:47:b4:0c:49:77:e8:06:6e:f4:2f:bf:fa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C952C93A676BA611AEC114DD4983F2B03168FE10
        Validity
            Not Before: Oct 28 00:30:41 2026 GMT
            Not After : Oct 29 04:25:41 2026 GMT
        Subject: CN=742B964CB27A1C32FBE67962532ADCE7D61B2201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:25:1d:02:f6:2a:73:81:ab:ad:14:7a:f3:
                    9e:11:36:20:a2:d7:64:e5:71:b6:a7:c3:e0:68:de:
                    eb:b9:d6:6d:d9:da:50:a6:f5:ba:46:9d:45:79:9c:
                    e4:ec:ac:de:b4:e3:ed:43:9e:83:69:45:5e:a3:1d:
                    20:28:03:e5:cb:d6:39:41:7c:65:46:bf:5e:cb:36:
                    36:7f:c6:97:9f:2b:cc:20:83:f2:bc:bc:13:73:0c:
                    46:c7:2f:c9:a0:78:12:6e:bc:b4:2b:ca:0e:87:d8:
                    6a:9f:19:c3:18:b7:8e:2e:e5:db:bb:07:bb:46:81:
                    9c:a2:5d:ce:25:bb:87:a4:0f:60:9c:6b:bc:31:98:
                    16:32:e8:64:42:8d:8b:11:5a:0b:91:da:9a:d0:4e:
                    29:14:5d:ea:14:03:28:a5:af:53:5d:3b:20:de:e6:
                    bf:ec:8d:97:fe:21:bd:6e:e6:a7:37:44:6d:c1:c8:
                    2d:8e:61:9d:b4:c0:0b:dc:87:8f:d8:1a:c6:74:60:
                    af:43:95:3c:7c:78:d7:b1:7e:d8:6d:69:af:2d:c0:
                    3c:d4:33:90:57:1a:0b:61:ab:33:d0:56:a3:5a:1d:
                    fa:4b:0a:80:20:88:fa:03:bd:2b:22:a6:33:9d:6c:
                    a0:31:4d:bf:de:4a:08:1a:8f:95:04:48:d9:39:4b:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2B:96:4C:B2:7A:1C:32:FB:E6:79:62:53:2A:DC:E7:D6:1B:22:01
            X509v3 Authority Key Identifier:
                keyid:C9:52:C9:3A:67:6B:A6:11:AE:C1:14:DD:49:83:F2:B0:31:68:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C952C93A676BA611AEC114DD4983F2B03168FE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/C952C93A676BA611AEC114DD4983F2B03168FE10.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:18:21:72:23:b6:e6:cd:de:51:83:72:66:bc:e6:3c:c2:
         3b:e0:0c:78:76:6f:d6:ea:6f:33:61:07:0d:d9:91:68:ad:a8:
         75:4e:a5:23:44:6a:ed:97:0a:67:5e:91:c5:62:b1:0f:71:e9:
         c4:b4:30:03:1e:97:01:d7:c6:4b:af:31:f4:2c:05:e9:e7:e9:
         6b:41:e2:74:de:c5:a9:8f:46:b9:ce:98:bf:25:5b:3a:ef:14:
         45:89:5f:2c:d4:cf:be:b1:a2:12:fa:4c:ba:f9:48:6b:c5:b4:
         00:f0:b3:15:2a:a6:3b:72:36:f6:ee:7a:0c:23:32:4c:6a:7e:
         65:0b:43:7a:95:35:f7:db:0f:79:59:af:2a:ae:ec:43:fa:f6:
         d6:1f:4b:6d:8e:1e:42:78:83:bd:c3:80:8c:3e:2e:63:c5:b5:
         c0:c1:52:c8:87:db:5e:fc:f7:f0:c2:59:4c:15:ee:d0:56:f3:
         66:a4:24:c2:e1:d9:5f:f7:79:ca:a5:86:f9:74:31:3b:9d:0a:
         bf:20:73:a8:73:f3:cb:b2:2a:e1:4d:91:8b:19:24:64:6b:e7:
         a5:88:9a:4f:d0:40:34:63:bb:91:da:52:89:c9:05:d0:8b:1d:
         55:21:ca:6f:c7:bf:ec:0c:b0:6f:ac:c4:72:97:fb:49:e4:0b:
         0e:44:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:00:42 2026 by rpki-client