Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
File:                     FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft (raw, json)
Hash identifier:          AcHa3PbO309KhG4n+UWLyf+oCJC/2xs1lgXztasa8Ts=
Subject key identifier:   D5:40:BC:53:25:18:52:2C:CA:FE:86:0D:BF:12:C6:A8:8E:1F:05:DB
Authority key identifier: FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0
Certificate issuer:       /CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0
Certificate serial:       5D629531148FD400C7F0DAAECBE085C9B3532BBC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
Manifest number:          0128
Signing time:             Mon 02 Nov 2026 15:06:08 +0000
Manifest this update:     Mon 02 Nov 2026 15:01:08 +0000
Manifest next update:     Tue 03 Nov 2026 18:19:08 +0000
Files and hashes:         1: 323830343a346566383a3a2f33322d3438203d3e20323638323935.roa (hash: CxZxM3BLNvFYW65Y76zKHnqGUy02Y19OL8fydS8gq8Y=)
                          2: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: kSiwVkFSht5sHqzzFD1P2mJQVYUOoEbi/B67iFq/CGA=)
                          3: FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl (hash: sNBArLEmoKDqQPfB3KMCxYZaeI9N1LYgTjwhkU84eTg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl
                          rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 18:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:62:95:31:14:8f:d4:00:c7:f0:da:ae:cb:e0:85:c9:b3:53:2b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0
        Validity
            Not Before: Nov  2 15:01:08 2026 GMT
            Not After : Nov  3 18:19:08 2026 GMT
        Subject: CN=D540BC532518522CCAFE860DBF12C6A88E1F05DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:78:43:f5:7a:8e:03:02:05:f5:71:ea:91:
                    d7:81:f2:a7:e0:c2:9c:ea:0b:93:68:17:7b:9d:8f:
                    7f:b6:af:6d:f4:98:c0:d6:95:53:c4:44:af:f1:36:
                    0d:07:78:98:2a:d9:9b:34:0d:8b:97:e1:99:f8:c3:
                    bd:74:f8:2a:e8:ae:cd:4e:68:d5:62:60:7b:e2:fb:
                    ce:b6:36:e2:f7:1e:13:cf:01:44:96:2e:40:3b:8b:
                    47:b1:a1:d4:b8:ce:ad:db:89:b1:b9:64:2e:e5:d5:
                    11:e3:cf:fb:a2:cd:cc:f0:69:e9:64:6f:50:cf:41:
                    7c:e4:0c:44:3a:31:28:c9:c0:d5:94:6c:29:d0:44:
                    53:60:b2:c5:1b:55:e3:55:fb:31:c6:5d:43:ad:e8:
                    18:65:c1:15:d2:84:b1:60:1e:6a:45:82:9d:9c:d2:
                    3d:21:20:5a:8d:9d:d9:3d:ce:12:19:17:9d:2c:81:
                    11:e6:d5:eb:48:d5:87:6c:f5:75:7b:1f:94:1b:90:
                    d5:20:ab:9e:bc:b4:21:67:9c:3f:b0:2d:b3:c2:73:
                    11:99:f5:6c:6f:af:de:07:4a:d9:cf:52:2d:32:08:
                    92:61:fd:02:d2:20:5d:e0:f6:9f:1b:c2:74:84:6f:
                    f1:02:ef:2f:b3:53:78:ce:72:62:43:68:a3:ee:45:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:BC:53:25:18:52:2C:CA:FE:86:0D:BF:12:C6:A8:8E:1F:05:DB
            X509v3 Authority Key Identifier:
                keyid:FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:58:8a:7a:64:21:23:fc:a5:71:d1:17:b1:29:fd:c6:71:c7:
         6f:6a:b0:b4:c2:63:49:98:7b:c3:56:b3:4f:e0:39:52:d8:61:
         3c:d4:e4:f8:a1:85:6b:68:2b:8e:e4:a8:ee:b3:e8:59:84:63:
         a7:27:8c:e5:9f:cb:76:dd:e6:23:66:f8:bc:30:d0:70:f6:58:
         cd:f9:f1:93:fa:42:10:a7:9a:b6:0f:73:22:a3:ee:e4:2d:ef:
         22:45:3f:29:8b:5e:7b:e6:14:30:46:0d:7c:2b:db:5d:b6:35:
         2e:f6:00:4c:82:fd:48:b7:5e:13:64:57:8d:aa:a1:ab:5d:00:
         0b:cc:fc:4e:a2:db:25:ef:19:d7:68:a2:91:c5:86:3f:a7:ca:
         83:29:85:89:66:f8:ba:12:12:80:68:31:29:34:ab:77:ea:fa:
         dc:d6:04:ac:77:f3:67:f8:71:e2:a3:a1:36:c4:7b:d4:01:3e:
         3c:88:93:dc:fa:8c:59:bc:c8:32:0e:3a:2f:68:02:12:0f:92:
         b8:08:e7:32:ad:b8:a8:97:a9:be:6e:99:f8:b4:23:21:8d:14:
         54:7d:75:22:a0:24:66:fe:eb:65:83:45:17:90:08:26:d0:fb:
         92:e4:2a:59:6f:61:81:49:94:24:c3:ae:54:f9:9a:ea:72:07:
         06:6c:18:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXWKVMRSP1ADH8Nquy+CFybNTK7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGQTVDMzEyNUJDN0U5ODQ1NTNFNzQ4Njk2RkJGQzg1
QzE3MDVEMDAeFw0yNjExMDIxNTAxMDhaFw0yNjExMDMxODE5MDhaMDMxMTAvBgNV
BAMTKEQ1NDBCQzUzMjUxODUyMkNDQUZFODYwREJGMTJDNkE4OEUxRjA1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmr3hD9XqOAwIF9XHqkdeB8qfg
wpzqC5NoF3udj3+2r230mMDWlVPERK/xNg0HeJgq2Zs0DYuX4Zn4w710+Crors1O
aNViYHvi+862NuL3HhPPAUSWLkA7i0exodS4zq3bibG5ZC7l1RHjz/uizczwaelk
b1DPQXzkDEQ6MSjJwNWUbCnQRFNgssUbVeNV+zHGXUOt6BhlwRXShLFgHmpFgp2c
0j0hIFqNndk9zhIZF50sgRHm1etI1Yds9XV7H5QbkNUgq568tCFnnD+wLbPCcxGZ
9Wxvr94HStnPUi0yCJJh/QLSIF3g9p8bwnSEb/EC7y+zU3jOcmJDaKPuRRv7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1UC8UyUYUizK/oYNvxLGqI4fBdswHwYDVR0j
BBgwFoAU/vpcMSW8fphFU+dIaW+/yFwXBdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI
cm8vMC9GRUZBNUMzMTI1QkM3RTk4NDU1M0U3NDg2OTZGQkZDODVDMTcwNUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRkE1QzMxMjVCQzdFOTg0
NTUzRTc0ODY5NkZCRkM4NUMxNzA1RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMC9G
RUZBNUMzMTI1QkM3RTk4NDU1M0U3NDg2OTZGQkZDODVDMTcwNUQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFFiKemQhI/ylcdEXsSn9xnHHb2qwtMJjSZh7w1azT+A5UthhPNTk+KGFa2gr
juSo7rPoWYRjpyeM5Z/Ldt3mI2b4vDDQcPZYzfnxk/pCEKeatg9zIqPu5C3vIkU/
KYtee+YUMEYNfCvbXbY1LvYATIL9SLdeE2RXjaqhq10AC8z8TqLbJe8Z12iikcWG
P6fKgymFiWb4uhISgGgxKTSrd+r63NYErHfzZ/hx4qOhNsR71AE+PIiT3PqMWbzI
Mg46L2gCEg+SuAjnMq24qJepvm6Z+LQjIY0UVH11IqAkZv7rZYNFF5AIJtD7kuQq
WW9hgUmUJMOuVPma6nIHBmwYiQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:32:19 2026 by rpki-client