Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
File:                     E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft (raw, json)
Hash identifier:          LkTL2RX0akr6nPvInf35SDEj+OmqxafSYUfH6pxy/n4=
Subject key identifier:   70:B7:DE:C8:B9:34:C8:10:75:DE:9C:3B:73:E2:6C:E0:18:BF:60:BB
Authority key identifier: E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50
Certificate issuer:       /CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
Certificate serial:       068C65AB151380116EA07D926708E12E92599F4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
Manifest number:          97
Signing time:             Mon 19 Oct 2026 18:48:35 +0000
Manifest this update:     Mon 19 Oct 2026 18:43:35 +0000
Manifest next update:     Tue 20 Oct 2026 20:41:35 +0000
Files and hashes:         1: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: DApklLLlpc0KYrrOYvKpgBVs9M7LYkNYHNuR8gHK8gQ=)
                          2: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: iZTF/qrxHFD+liPsWuW7YWiBgKOV6HGXCXdTIk7EtM0=)
                          3: E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl (hash: lmgrVzqp8rzbbsniuG/SBQVBPaQrkhOvdqCEv0OHLWY=)
                          4: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: P9Re5UCW/JIFm9Z4CeGRceik9RvcFrvuYyQTRBjLfdo=)
                          5: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: agAzEIBQii/fLQBWlK1tw3q7jO7PA4TV/yVcX5UOKXY=)
                          6: 323830343a313066633a3a2f33322d3334203d3e20323633363536.roa (hash: YplvbWvmhYXYhTo8Lcmj/5HGe48e5FY06evNKf+ymA4=)
                          7: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: 0cOsvSrDyHKuJ74Y01asJXEjHFYbsyuURLsu37oCAak=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 20:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:65:ab:15:13:80:11:6e:a0:7d:92:67:08:e1:2e:92:59:9f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
        Validity
            Not Before: Oct 19 18:43:35 2026 GMT
            Not After : Oct 20 20:41:35 2026 GMT
        Subject: CN=70B7DEC8B934C81075DE9C3B73E26CE018BF60BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:55:a1:7f:d4:55:ff:54:66:21:d6:b7:4a:
                    7f:af:99:89:2d:45:6d:3d:f3:a1:cf:33:ea:10:1a:
                    e4:e1:68:a0:44:3c:85:ea:fb:18:11:77:b3:e8:6d:
                    1d:e5:8f:4f:d5:d1:d2:5b:6a:2e:26:1e:4e:70:6c:
                    88:94:65:16:19:ae:c5:f6:7b:da:18:3a:ea:ac:d7:
                    e7:0c:5b:04:f1:27:1c:f4:35:eb:ce:1c:96:22:0c:
                    55:e8:46:44:f4:f6:3f:c0:24:5f:a0:73:d6:de:fd:
                    d4:f3:74:50:30:35:00:59:bc:d8:64:cb:06:69:70:
                    7d:ec:51:47:35:37:64:7b:47:a6:4a:86:ad:b9:c4:
                    fb:b2:b7:a4:39:24:4a:94:ef:81:e0:2d:a9:5c:12:
                    02:fb:57:d2:8f:40:dc:3a:10:be:65:8c:d4:fa:29:
                    b1:12:c5:52:8e:56:de:a5:7a:b4:d5:f8:36:cd:9b:
                    7e:10:0d:51:4b:97:cb:4c:a3:3e:02:31:c9:ee:2a:
                    7e:ab:ca:8a:50:df:81:5b:05:31:b0:83:6a:2e:76:
                    5f:e0:9b:0e:22:c3:1b:0d:5d:3f:7b:55:f7:7d:17:
                    2b:8f:86:4f:e1:c9:eb:76:a1:05:b2:d8:97:c4:0e:
                    e7:cf:6c:ea:2e:f4:05:85:23:37:14:74:1c:04:43:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:DE:C8:B9:34:C8:10:75:DE:9C:3B:73:E2:6C:E0:18:BF:60:BB
            X509v3 Authority Key Identifier:
                keyid:E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:ea:ed:71:f0:48:c1:ef:2b:36:8d:1c:82:1d:11:be:19:
         e3:e0:d6:9f:2a:5c:bb:ae:9c:b0:d3:7b:b5:af:d3:d1:27:bd:
         24:67:4e:4a:29:43:83:60:d0:48:8e:c0:7d:f1:e6:5d:e4:4c:
         be:93:d1:35:c5:e4:22:25:00:bb:ac:54:a0:2b:b8:78:7a:b5:
         67:e8:49:3b:92:45:99:cd:d0:f5:f9:c5:2c:f5:cf:48:7e:31:
         9c:36:ca:45:0f:a6:9d:22:2f:fa:00:8e:34:03:6b:33:13:1c:
         2a:ef:b5:e1:bf:44:c4:ec:a9:83:8e:99:d0:8d:23:a1:e7:d9:
         06:31:77:8a:93:59:7a:0a:1a:4d:c8:60:16:b6:b4:58:25:09:
         d9:b5:f5:6a:e0:66:d1:78:d1:c5:36:e2:19:9c:15:60:88:1d:
         ff:ac:86:16:a4:1f:65:6e:fd:17:82:22:39:da:f0:31:87:87:
         08:9a:e8:bd:e8:cc:e7:52:89:42:75:b2:42:c7:07:70:ab:b7:
         16:1d:ae:90:15:40:b9:50:5d:51:7b:fb:a7:2e:d5:c8:b3:13:
         ce:0e:72:26:1a:e8:68:fe:76:4e:34:c6:2b:ac:84:2f:87:e2:
         e7:cb:96:b2:5a:44:ed:3f:18:8c:ab:03:0a:c8:f7:7f:6b:83:
         5f:38:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:33:11 2026 by rpki-client