Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
File:                     2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft (raw, json)
Hash identifier:          HpZgqGwwWqyLT36U6KYp4shuiT+QXYb36XtARD+QAZ0=
Subject key identifier:   2C:FA:31:1D:E8:A5:25:CB:5B:22:2A:61:4D:17:5F:56:2E:E3:8E:D3
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       22B0A4CBE0EA6CE1183FDE027B3C64A9A2BD1873
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
Manifest number:          03AF
Signing time:             Thu 15 Oct 2026 10:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 09:56:04 +0000
Manifest next update:     Fri 16 Oct 2026 10:03:04 +0000
Files and hashes:         1: 323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (hash: vhbTm1vcO49uWFtqu1F9q50sOEakNJvZgWxdQlfhTB8=)
                          2: 2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl (hash: gBf34tpUITfK0X+sCHxD5kOL43xSKl6ZNqAz8Y0ow1I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b0:a4:cb:e0:ea:6c:e1:18:3f:de:02:7b:3c:64:a9:a2:bd:18:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Oct 15 09:56:04 2026 GMT
            Not After : Oct 16 10:03:04 2026 GMT
        Subject: CN=2CFA311DE8A525CB5B222A614D175F562EE38ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:e1:46:e6:89:b3:77:6f:9f:aa:66:89:a8:
                    c9:17:0f:81:e3:55:ca:0c:d3:c0:12:8e:be:73:67:
                    41:79:ff:b2:3e:e0:73:a7:37:3e:9a:5d:4a:91:04:
                    0b:b0:0c:d9:3b:aa:5a:9e:8d:0f:7e:da:dc:cf:a2:
                    de:9c:3b:03:9f:db:e4:13:65:e6:44:b8:c7:9a:ce:
                    9b:17:be:91:55:34:81:33:04:9d:89:2b:11:62:67:
                    10:7d:f3:ad:96:fb:2a:29:f5:8d:cc:e0:e7:63:43:
                    d5:8f:74:97:84:dd:f0:87:7c:b6:5b:90:ae:37:c6:
                    13:40:fc:5a:7a:e9:ba:5b:36:9b:f0:7f:84:6c:60:
                    80:d4:a3:2b:51:84:e1:a5:5e:e9:3c:10:47:fd:5d:
                    5a:c1:82:e6:46:af:40:88:e2:c7:32:13:a8:5c:d6:
                    10:20:42:bf:0c:91:3f:84:1e:41:b3:d9:3b:3a:1e:
                    e7:e1:21:a3:c4:c3:af:96:31:84:80:d4:71:50:50:
                    09:e7:47:9a:ec:39:6e:04:6a:25:dd:ca:84:cc:38:
                    1e:6a:5f:c0:25:ca:8c:88:18:bd:23:a1:87:9a:0b:
                    09:98:bf:a4:ca:68:40:6f:a0:e0:1e:ec:81:ca:1c:
                    8e:74:f3:f9:c8:8c:61:93:41:53:19:b8:09:99:a4:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:31:1D:E8:A5:25:CB:5B:22:2A:61:4D:17:5F:56:2E:E3:8E:D3
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:13:64:bc:56:d1:80:72:24:23:30:7a:66:4b:dc:56:11:
         68:1b:40:fe:75:0b:30:b0:4f:c1:cb:d2:5c:91:c7:9a:69:8e:
         10:3d:14:4c:af:32:81:fe:78:27:a7:96:d4:71:7b:05:9c:0d:
         66:f4:04:5b:77:95:4d:ba:0a:f9:ab:35:5e:a8:aa:6a:cf:4a:
         3a:b8:4d:03:9b:9e:85:60:19:f5:0c:92:9b:d2:9c:53:52:c9:
         7f:08:a8:55:ce:1c:15:28:ff:cf:ca:59:be:66:83:50:ee:8e:
         d2:84:a8:93:31:68:9e:ed:a5:e0:9e:b5:40:f0:4e:5c:3e:91:
         6f:46:7b:69:6f:b2:70:09:f2:ce:93:a2:c3:cf:23:4f:37:af:
         b4:66:b7:05:33:08:d8:51:16:e8:e0:06:8f:63:70:11:3c:a4:
         85:90:2c:6c:a7:2e:4a:e3:94:fb:5a:02:b0:49:e5:9c:f0:16:
         19:ea:0e:e1:9f:1e:03:7f:37:d4:48:ec:fb:fc:75:64:75:7e:
         e9:45:ea:92:03:63:71:eb:cd:b6:f4:5c:f4:e9:dd:d3:ee:00:
         c5:85:30:a0:b9:f5:f4:d8:81:84:aa:fc:97:48:54:46:4b:d5:
         1a:9c:c0:e2:e1:e1:44:99:1d:c4:e8:20:87:c6:c6:ea:9e:89:
         3a:37:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----