Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
File:                     9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft (raw, json)
Hash identifier:          Wsc9BM1et3WNMMERAa0tYTVRditcpQXYq6B5654jX/c=
Subject key identifier:   03:86:7E:6C:21:7E:24:C1:C5:2D:87:7F:2C:07:CD:94:85:A0:B9:03
Authority key identifier: 9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7
Certificate issuer:       /CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
Certificate serial:       5543D691D8305B99C642105D78B03885A1DDE015
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
Manifest number:          028E
Signing time:             Sun 18 Oct 2026 08:50:00 +0000
Manifest this update:     Sun 18 Oct 2026 08:45:00 +0000
Manifest next update:     Mon 19 Oct 2026 09:24:00 +0000
Files and hashes:         1: 9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl (hash: VLbDJdghg5v/2pP7iFs8zjxh6d74FZM8Y1n7T+7xKdk=)
                          2: 34352e3233332e3138382e302f32322d3332203d3e20323637333438.roa (hash: yJhSqR6sY+RWX328V/4SPjt/m5uViEEbVyuoi+3Bc/Y=)
                          3: 323830343a346331343a3a2f33322d313238203d3e20323637333438.roa (hash: QaUBZvIRzlgLNe+cCcSysvwHxqcjlDsVHI7LHkgqSRc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl
                          rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 09:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:43:d6:91:d8:30:5b:99:c6:42:10:5d:78:b0:38:85:a1:dd:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7
        Validity
            Not Before: Oct 18 08:45:00 2026 GMT
            Not After : Oct 19 09:24:00 2026 GMT
        Subject: CN=03867E6C217E24C1C52D877F2C07CD9485A0B903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:c9:55:67:7e:02:89:3c:1c:5f:0e:45:f3:
                    60:8c:55:c5:cc:b2:ae:03:fd:aa:61:b7:85:f4:c6:
                    4f:47:80:f7:c8:42:be:52:71:50:d9:b6:0d:a6:4a:
                    6f:b2:b7:a0:aa:ff:ed:82:69:c7:75:15:f5:89:a2:
                    03:c4:0e:7f:0b:31:b9:ac:e6:0d:ef:a9:95:66:98:
                    00:f0:2c:75:85:d6:22:aa:a5:75:3f:d9:7e:9a:38:
                    da:22:b2:22:f1:c2:27:a7:7b:e0:87:7e:dc:68:c4:
                    ed:93:2a:88:a8:a4:d9:61:f9:a8:ad:fc:e9:18:0c:
                    38:eb:d5:b9:a6:a4:70:14:bd:b0:fd:bd:9c:02:e1:
                    5c:9d:61:10:28:5f:f0:29:66:2c:b6:79:99:85:93:
                    f9:e5:01:75:a1:c9:ac:a6:44:57:c3:cf:b2:52:27:
                    bc:cf:b9:a2:bc:e3:3f:46:24:3a:1b:88:ee:53:3f:
                    c5:d4:6a:2a:4f:40:4b:5a:53:a2:2e:37:ac:6d:df:
                    cf:f3:d0:cf:a5:84:39:20:86:17:07:33:fd:a6:85:
                    6b:ea:4a:7f:2e:68:48:45:49:ae:f6:38:1b:6c:e5:
                    af:15:81:9d:09:89:54:65:44:89:fa:c4:1e:af:87:
                    41:99:c0:1a:d2:a6:5e:6b:09:ac:ca:84:fb:78:cb:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:86:7E:6C:21:7E:24:C1:C5:2D:87:7F:2C:07:CD:94:85:A0:B9:03
            X509v3 Authority Key Identifier:
                keyid:9F:B2:CE:2B:97:CE:82:E0:FA:2F:A5:67:4E:36:9E:4C:F2:E6:E1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/9FB2CE2B97CE82E0FA2FA5674E369E4CF2E6E1C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:45:0d:24:31:e3:09:77:28:89:38:d9:6e:a6:46:77:7b:54:
         97:dc:a9:69:62:c8:12:40:5d:0b:04:66:e7:a3:dc:1c:e9:0e:
         89:54:96:98:1d:c9:11:33:a3:e0:12:df:d0:7a:83:64:2c:1a:
         70:ae:2c:20:15:9e:50:16:a0:39:44:0b:73:6e:2c:83:b0:aa:
         5c:b3:55:9a:d6:74:e9:34:d1:a4:63:95:df:ad:92:87:77:5d:
         67:3a:c7:47:ba:6c:06:6b:24:9e:e3:55:60:ad:84:ad:31:50:
         88:4b:54:27:bd:77:1b:0e:f0:15:e6:46:7f:61:27:f7:0d:e1:
         50:95:ff:3c:63:7b:f1:4b:85:32:8e:d8:e1:36:49:5d:02:bc:
         8e:5b:ae:6a:82:a1:2f:63:f1:35:68:8e:8f:60:67:7f:1e:90:
         f1:88:43:66:e2:b0:b1:bb:eb:1c:38:ee:3d:0b:c3:04:5c:84:
         db:8a:f1:b3:25:3b:c5:76:e4:c1:87:aa:5d:2b:28:9a:63:b6:
         de:12:93:b3:79:9d:61:24:3a:75:39:e7:52:82:66:17:25:2f:
         4a:09:a9:e0:ed:9d:b5:eb:21:8a:f0:85:09:77:32:35:f6:70:
         36:ca:51:5f:4f:2b:2d:72:41:0c:fb:18:af:6f:52:e1:12:0c:
         a8:0d:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----