Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File:                     B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier:          tb7YVr5KcPxu4nso87n2dL1bheGkENRURe/zpFh5RhM=
Subject key identifier:   90:02:A9:B1:1B:C4:95:C5:70:27:F5:70:DF:A3:82:EC:77:59:48:A9
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer:       /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial:       743FE09D99BA19A3D41845549AC178DD7D208F57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number:          022F
Signing time:             Wed 14 Oct 2026 13:50:00 +0000
Manifest this update:     Wed 14 Oct 2026 13:45:00 +0000
Manifest next update:     Thu 15 Oct 2026 15:20:00 +0000
Files and hashes:         1: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: bLrgvblKc9sDuWX7/E9oFr9HTVYHYe8oUIWR7sKt02o=)
                          2: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 82DEv67kvsZGE4sbpUu76A1q4x5oe1Hzn4rxllhVcaM=)
                          3: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: DOK7IUSK2ihNvmlzJ6XOa9yaKknrOGWRPmocROiBpgM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
                          rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3f:e0:9d:99:ba:19:a3:d4:18:45:54:9a:c1:78:dd:7d:20:8f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
        Validity
            Not Before: Oct 14 13:45:00 2026 GMT
            Not After : Oct 15 15:20:00 2026 GMT
        Subject: CN=9002A9B11BC495C57027F570DFA382EC775948A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:ca:66:44:31:c9:74:f0:4b:a9:1c:b4:6d:
                    47:75:07:2b:54:2e:b8:95:58:f8:42:ae:63:df:cc:
                    83:bb:f1:8c:a7:ba:26:c1:22:b8:03:4f:81:45:6b:
                    38:de:40:a4:0c:1d:6c:73:cd:bd:04:8c:f7:25:9a:
                    7d:fb:34:b0:c5:25:f5:34:71:f5:1b:4a:bd:3e:e6:
                    24:c8:00:16:c5:68:3c:9a:9f:f1:2c:fb:94:b8:b0:
                    d1:0d:a2:7a:7b:82:4b:54:33:22:2e:7d:80:81:e8:
                    3a:25:52:2b:3e:e6:00:4e:3e:d0:94:3a:56:68:c2:
                    eb:44:10:ff:54:44:c5:20:ca:26:f5:22:2f:3a:93:
                    fd:19:cf:20:33:b4:80:0e:92:76:33:fb:20:df:9e:
                    87:7a:bb:5c:13:1a:ba:5d:ec:ab:b5:dc:94:ee:8c:
                    7d:6b:2b:fa:38:e8:c0:09:e6:d7:a1:ab:bb:61:6b:
                    24:08:0c:4c:f3:93:ee:72:e8:99:86:5b:48:4f:0f:
                    4f:17:43:0a:60:f7:57:10:9b:5f:0a:d6:3a:f6:f5:
                    aa:da:1e:16:89:fa:45:9e:0c:24:a4:ad:58:34:e1:
                    3f:7c:ac:ec:89:c7:8b:a7:50:de:f0:74:77:58:b4:
                    b1:46:04:d6:05:3a:c8:5a:22:52:9f:b4:b9:cd:97:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:A9:B1:1B:C4:95:C5:70:27:F5:70:DF:A3:82:EC:77:59:48:A9
            X509v3 Authority Key Identifier:
                keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:77:65:75:cc:80:1d:ae:9d:36:b1:86:2f:c3:ad:37:c9:
         3d:37:84:4d:cc:48:b7:db:73:b9:ed:3c:c9:9a:54:7f:bd:04:
         13:6b:ed:36:2d:af:98:21:f3:53:37:51:7b:d3:ed:2f:ca:3a:
         40:65:10:19:4b:f0:cd:a3:ed:7b:a0:c5:96:eb:3d:5d:61:c1:
         c7:1a:83:50:6c:d8:9a:40:31:0a:30:10:f5:9b:b5:03:51:47:
         56:e2:9f:d0:2e:c1:d6:fa:3c:07:52:80:6d:b6:83:f1:d8:b1:
         fd:e5:f8:c0:0f:8a:e4:e5:b2:23:b9:8b:89:4e:8f:f2:ca:1a:
         9d:37:65:d0:49:35:56:ad:56:d6:b7:db:43:8a:77:a5:82:9e:
         e7:4a:40:95:3e:ad:ba:33:00:d3:b0:a2:84:ed:17:a2:b8:51:
         d4:22:78:65:e7:63:7f:2d:ce:35:3e:54:9e:2a:f0:62:2c:9b:
         99:70:c2:83:32:cf:9b:79:0a:7e:03:32:bd:a2:ae:bc:1f:71:
         08:84:d6:78:3a:97:6f:2d:e3:85:52:07:6b:51:95:a0:52:97:
         55:94:16:76:65:9c:17:15:bb:9b:e0:d7:eb:c3:47:ac:d2:c1:
         3b:9d:c0:95:20:9f:e5:fc:46:a8:59:6a:ec:a1:66:db:3f:0d:
         cd:9e:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----