Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          CfAq5zaJqvaJ/KeyiNNxvSgDJ4DBIe+tloN10C4Xv4A=
Subject key identifier:   40:34:49:31:E8:4C:18:AF:C3:A8:BE:9F:1B:97:C2:7F:1C:4A:82:7C
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       506D888CBC627278AE1FC44589F43527A566E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          0488
Signing time:             Fri 21 Aug 2026 10:49:00 +0000
Manifest this update:     Fri 21 Aug 2026 10:44:00 +0000
Manifest next update:     Sat 22 Aug 2026 11:55:00 +0000
Files and hashes:         1: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: 8vkozyDPx6Js0crbjSB9FU5xNI5S3BuMP9U2du1TFhQ=)
                          2: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: KlvdEYkX9e6Dm3nNfgxR5z3DLQZUvFZ0x98d6xXZtF8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Aug 2026 11:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:88:8c:bc:62:72:78:ae:1f:c4:45:89:f4:35:27:a5:66:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Aug 21 10:44:00 2026 GMT
            Not After : Aug 22 11:55:00 2026 GMT
        Subject: CN=40344931E84C18AFC3A8BE9F1B97C27F1C4A827C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:ad:ba:29:ec:00:d6:2d:01:4d:98:d9:be:
                    96:8f:9e:16:30:16:69:c4:08:1d:10:7b:10:a9:23:
                    42:22:61:ae:b0:b8:5a:1c:b0:8e:9c:38:6f:91:24:
                    59:b3:cb:4a:e0:2e:57:30:9a:78:52:d8:bb:ac:d0:
                    de:c8:dc:9f:35:db:f3:91:76:f0:a4:c8:f8:20:e7:
                    ca:07:9c:8c:1a:9e:ea:9a:11:f3:e3:a1:fd:1b:f9:
                    b1:3b:b8:53:f3:31:ca:94:44:78:31:e4:d3:ac:20:
                    8b:62:47:6b:43:1b:2c:a8:29:31:b0:9f:52:04:56:
                    a9:a8:09:3b:4a:7b:b3:94:8b:09:9d:08:e7:86:81:
                    fd:b2:1c:e1:65:bf:6d:cb:16:f7:2f:92:3c:70:43:
                    83:2c:71:8a:89:80:91:e9:b5:19:f5:bd:1d:d9:4c:
                    7c:63:82:95:e9:77:b7:5b:96:65:9f:9f:0d:94:12:
                    1b:af:88:c7:48:d0:3a:1c:84:2b:ce:5d:43:70:5b:
                    09:e5:75:68:a7:ab:d5:6f:0f:ab:5c:3b:74:ca:1e:
                    2d:55:c4:b4:93:47:76:19:cc:24:81:ad:8f:91:4d:
                    43:6c:7d:b0:07:55:8b:41:54:f2:ad:1f:ce:20:c2:
                    53:1b:2d:ae:de:f4:c8:63:6a:0f:47:41:53:d2:53:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:49:31:E8:4C:18:AF:C3:A8:BE:9F:1B:97:C2:7F:1C:4A:82:7C
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:03:2d:1a:46:07:bd:f7:f1:1a:d2:18:67:aa:5c:5e:50:06:
         7a:7c:be:e6:25:85:36:4b:f1:86:03:eb:76:ca:58:a5:5c:83:
         7f:8c:36:b0:83:75:01:c6:96:64:f6:9f:45:0c:1b:bc:97:71:
         ec:5a:ee:90:5f:c5:b3:5a:98:ef:dc:4b:ce:25:b4:8d:73:30:
         b9:ee:c4:44:b3:1c:44:77:2f:61:1c:26:7d:d1:d1:64:fe:57:
         06:a2:4c:b4:02:0d:dc:71:a9:a7:a3:3f:e4:59:8a:4d:e9:26:
         7f:3a:ea:dd:be:b3:47:34:7a:5e:80:a8:9a:82:d9:68:05:5b:
         4a:06:36:52:8a:78:6c:20:f3:ad:7b:ac:8c:c4:d7:cf:73:7d:
         83:20:47:a0:f2:13:fe:f7:09:f6:f5:b3:93:e4:92:df:f3:34:
         cc:7e:5f:11:a7:ed:ac:57:0f:ea:a2:7f:1d:6c:06:df:67:5a:
         b4:f0:38:7b:10:09:55:de:4b:96:9f:93:94:f5:4e:6a:e7:12:
         6e:a4:c3:24:a5:71:92:82:6f:a1:1f:21:e7:d1:6d:b6:f4:32:
         d9:3c:1b:2a:d2:93:57:a9:ec:d3:24:80:af:56:3a:80:e5:06:
         d5:7b:79:cd:1d:18:06:18:ee:af:e3:71:a2:63:82:23:1a:88:
         74:79:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----