Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft
File:                     0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft (raw, json)
Hash identifier:          vQfhor3upRYTF6QfZ8LlCDZ7dJz1xdOCLVsTz/4JGVc=
Subject key identifier:   F4:6E:90:C0:57:61:2F:57:7C:AE:73:AB:F2:F4:20:28:E8:F9:2D:03
Authority key identifier: 0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56
Certificate issuer:       /CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556
Certificate serial:       122A1161490BA7777CC2E543B02FFEFFEAA35323
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft
Manifest number:          0117
Signing time:             Sat 31 Oct 2026 14:57:26 +0000
Manifest this update:     Sat 31 Oct 2026 14:52:26 +0000
Manifest next update:     Sun 01 Nov 2026 17:04:26 +0000
Files and hashes:         1: 0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl (hash: zLI4c4fBI4jBTzdrrO9odGH/v4I0M8XZ82+Z28hspVg=)
                          2: 323830343a313861343a3a2f33322d3438203d3e203631393435.roa (hash: zG9p2gmYO/fEqc2msRtR+vBTBr/dsVxHBxbXwsjpWdw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl
                          rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 17:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2a:11:61:49:0b:a7:77:7c:c2:e5:43:b0:2f:fe:ff:ea:a3:53:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556
        Validity
            Not Before: Oct 31 14:52:26 2026 GMT
            Not After : Nov  1 17:04:26 2026 GMT
        Subject: CN=F46E90C057612F577CAE73ABF2F42028E8F92D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:6f:11:1f:e2:42:e5:ab:42:ce:f8:de:7a:
                    e0:7d:27:dc:17:87:38:5f:4d:8e:54:3d:79:b3:22:
                    3d:91:43:04:13:a3:cb:98:4f:26:94:3f:ae:69:ed:
                    db:5f:6b:3f:52:64:07:73:76:29:7d:6a:f4:6d:eb:
                    6d:97:dd:46:fb:73:7e:65:84:a8:94:38:b9:78:f7:
                    18:ce:f2:fa:6a:02:b9:6f:1d:81:f2:3b:b2:ef:99:
                    d7:dd:0e:40:c8:97:68:0c:8c:cd:99:91:20:e4:3e:
                    69:6e:7a:1b:c3:d8:f9:49:23:0d:a1:86:a0:43:63:
                    96:b5:b1:a4:12:c0:db:cc:02:34:87:f5:ee:77:94:
                    f8:cb:d1:de:dd:75:37:f8:f9:60:4d:75:cb:9e:34:
                    cd:f2:bb:5d:d8:0b:a5:7e:94:fe:f0:84:34:92:a9:
                    de:8c:d5:aa:10:f9:5b:8e:12:b5:5f:78:03:63:92:
                    be:f3:f4:a6:4a:e4:a6:1c:7e:a3:00:e0:29:01:b5:
                    a2:87:ff:30:81:96:3f:30:96:aa:81:97:76:b6:2f:
                    08:d2:6b:f9:8f:f8:b9:16:19:57:4c:78:70:66:75:
                    b1:5c:2f:4a:f7:28:50:3e:b5:f5:dd:93:cd:d7:c5:
                    7d:d9:09:95:08:26:39:d4:7c:6a:6b:fa:c6:6b:94:
                    11:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:90:C0:57:61:2F:57:7C:AE:73:AB:F2:F4:20:28:E8:F9:2D:03
            X509v3 Authority Key Identifier:
                keyid:0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:18:0b:03:da:f3:c3:7a:25:93:17:f3:fa:a7:5e:75:d3:b0:
         1b:9c:d6:4e:ee:60:96:02:48:f9:51:38:80:ca:d9:d2:38:62:
         a0:8a:a8:9b:a9:9a:4f:3a:23:a7:54:38:57:a1:9c:bb:c1:14:
         8e:24:e2:a8:82:df:7a:67:f7:c1:20:5e:5a:5b:0b:ca:78:a1:
         fe:53:2a:f7:49:0a:8f:f5:cc:8d:4d:f1:18:7c:5b:f7:70:50:
         9f:21:13:82:6c:39:94:21:8d:17:51:3e:4d:e6:15:82:05:9f:
         d5:51:84:1e:f7:2b:ea:3e:a6:c0:cb:a4:04:74:3f:d3:61:57:
         7e:07:4e:aa:59:60:57:9a:b4:71:b3:03:18:68:a4:2f:f9:e3:
         83:ba:24:ea:53:e0:a0:7e:9d:c5:67:79:2f:87:c3:2f:17:6c:
         de:c0:ac:8b:6d:dc:f3:4d:b1:5b:33:bf:21:ea:7c:71:73:92:
         35:84:28:a2:f7:da:4d:d2:c7:ab:9a:bd:6d:a4:7b:40:44:9d:
         3d:02:60:85:8d:f0:0d:53:1b:c1:a8:c2:b2:fe:30:56:84:6c:
         04:f5:a3:04:b9:0c:24:2a:30:61:6d:ee:ee:96:49:8f:85:85:
         0f:36:d3:94:9e:14:51:4c:da:17:61:55:d5:b3:0b:76:38:d0:
         ac:24:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----