Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
File:                     8F7C897DFF70774947A63DAC93567C79586D1B6C.mft (raw, json)
Hash identifier:          t6l1ttVtkwOI+Er6bsEaKffjDfY8SY6IDw+cHwmlmYI=
Subject key identifier:   30:09:3D:07:12:25:45:7C:3B:5D:C4:87:A5:FA:54:CF:DD:AD:42:F9
Authority key identifier: 8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C
Certificate issuer:       /CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
Certificate serial:       396FA3B7C95037704BBA4A98E8DAC091E3CCB400
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
Manifest number:          04D1
Signing time:             Wed 14 Oct 2026 22:47:11 +0000
Manifest this update:     Wed 14 Oct 2026 22:42:11 +0000
Manifest next update:     Fri 16 Oct 2026 01:32:11 +0000
Files and hashes:         1: 3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (hash: GqN5IX+bmxqmm+8/1bjCat4WBG3v7hsNsZkjjn96TaQ=)
                          2: 8F7C897DFF70774947A63DAC93567C79586D1B6C.crl (hash: /+2V1ynnHwOlAlidWxFV2ySFAbE8gHKZD5IVAYk3Zws=)
                          3: 323830343a333165343a3a2f33322d3438203d3e20323635303433.roa (hash: UjzRcYc/0vB4I0K2cDjkR6rb7/AVeHCSES4Q4zPEgPE=)
                          4: 3137302e3233312e32382e302f32322d3234203d3e20323635303433.roa (hash: OS68o1TGNwneKN/uHeQ3QEUgEwYru5Aj5p0IxB/BEwc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl
                          rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6f:a3:b7:c9:50:37:70:4b:ba:4a:98:e8:da:c0:91:e3:cc:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F7C897DFF70774947A63DAC93567C79586D1B6C
        Validity
            Not Before: Oct 14 22:42:11 2026 GMT
            Not After : Oct 16 01:32:11 2026 GMT
        Subject: CN=30093D071225457C3B5DC487A5FA54CFDDAD42F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:e4:9b:08:c0:28:9d:05:02:18:25:22:f6:
                    b3:82:1f:ca:3c:66:0e:e2:b3:04:72:41:a5:a3:21:
                    7c:8d:56:35:33:e2:05:71:eb:96:58:f2:73:c6:52:
                    e3:e9:62:1b:f4:4e:e3:d8:11:74:72:30:6a:c9:9e:
                    20:63:c5:33:5f:a0:00:64:0a:a9:75:f9:0b:70:e9:
                    73:d0:77:e6:e9:0c:27:71:f9:92:25:73:bd:ac:00:
                    2c:0b:97:54:24:89:aa:d3:d9:53:7c:75:5c:b7:f2:
                    ae:f9:fa:ec:8e:46:e1:67:4e:6b:93:55:a8:92:c5:
                    5e:fa:d7:9f:06:26:08:62:11:35:36:5e:bc:7b:ae:
                    80:52:83:3b:cd:fa:a1:5b:4d:60:20:de:df:0e:12:
                    7d:05:90:34:e8:8d:45:9f:ba:df:6e:6f:ee:95:b5:
                    ed:2a:7e:14:15:58:75:83:c6:11:0f:74:be:89:10:
                    99:53:ad:91:ca:61:17:e7:8c:b6:00:ed:9c:14:21:
                    4f:0e:74:2c:f3:10:1a:d4:91:42:c7:d3:4f:a4:de:
                    b4:70:8a:f2:e0:4d:55:23:38:89:cb:32:3e:a6:bc:
                    f2:0b:2d:54:4b:41:c5:f9:e7:8b:c9:ff:fd:41:0a:
                    09:c0:7e:d1:19:98:4d:cb:09:12:fb:64:cd:ce:b0:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:09:3D:07:12:25:45:7C:3B:5D:C4:87:A5:FA:54:CF:DD:AD:42:F9
            X509v3 Authority Key Identifier:
                keyid:8F:7C:89:7D:FF:70:77:49:47:A6:3D:AC:93:56:7C:79:58:6D:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/1/8F7C897DFF70774947A63DAC93567C79586D1B6C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:3b:d2:17:f2:8e:9e:e3:20:0b:1f:6d:4e:2e:c0:78:cf:
         ab:54:ef:bd:2a:a1:bd:45:53:14:e9:56:d6:03:b6:6e:b6:db:
         9a:6a:06:ee:6f:f3:f3:ff:47:3e:93:d4:bd:ac:c8:85:40:19:
         a2:fb:ca:0a:ab:ee:54:4c:d1:c1:f2:e8:43:b4:3d:f7:75:87:
         ab:d2:ca:64:86:9d:99:6f:21:dd:4d:29:2e:89:0b:51:49:ba:
         de:5f:f8:3f:6e:6d:55:db:e5:a3:ff:7f:e7:ca:64:9b:c9:8b:
         c5:86:bb:fe:01:bd:d5:ba:1b:10:b3:71:5a:d1:0b:3c:48:f3:
         64:af:ad:a9:5e:24:d1:c0:e4:8e:11:2e:18:9d:81:f2:1d:8f:
         c2:99:dc:2b:22:ea:25:9b:c8:0d:58:f7:7d:e6:9e:5f:51:c5:
         98:58:94:67:ea:a6:b6:f2:f3:c9:ce:96:74:62:a6:ed:ee:9e:
         b5:d7:ba:0d:ad:f3:de:24:7f:74:bf:8b:9c:fa:00:5d:08:42:
         d1:ae:49:b1:d4:79:67:f3:6e:cf:1f:7a:b3:c2:eb:f1:c4:bb:
         ec:2d:d1:29:a0:6e:5a:1b:bb:93:c9:3d:b2:c1:72:fc:36:69:
         9f:18:05:ef:94:29:e9:86:bb:38:ac:28:0b:b5:d1:4f:8c:b9:
         b3:37:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----