Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
File:                     A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft (raw, json)
Hash identifier:          EXdxfM/i+hQcxw5LJHsqvZ4Pt2zOkTkYl9mHEXLMY1Y=
Subject key identifier:   41:F3:1E:79:6C:ED:A7:42:78:E4:42:D0:64:50:20:6C:53:77:CD:F0
Authority key identifier: A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41
Certificate issuer:       /CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
Certificate serial:       38F8BD34D8A19C9FEFDA7102B60722879488A25D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
Manifest number:          04CB
Signing time:             Tue 13 Oct 2026 10:07:48 +0000
Manifest this update:     Tue 13 Oct 2026 10:02:48 +0000
Manifest next update:     Wed 14 Oct 2026 11:55:48 +0000
Files and hashes:         1: 323830343a383134343a3a2f33322d3332203d3e20323732343433.roa (hash: KlvdEYkX9e6Dm3nNfgxR5z3DLQZUvFZ0x98d6xXZtF8=)
                          2: A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl (hash: +vTa92pmL5Deu98ANlwiBtUBTu9CzFlGDUlfQZw1si0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl
                          rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f8:bd:34:d8:a1:9c:9f:ef:da:71:02:b6:07:22:87:94:88:a2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80F9230DA240EF987BCA2B29E4649A1AB1CF341
        Validity
            Not Before: Oct 13 10:02:48 2026 GMT
            Not After : Oct 14 11:55:48 2026 GMT
        Subject: CN=41F31E796CEDA74278E442D06450206C5377CDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:54:b2:84:08:05:04:40:37:cb:24:f6:7e:38:
                    1d:83:a2:d7:40:d0:b3:5b:e3:ab:cc:86:20:59:cd:
                    6d:3c:e5:6c:c1:04:c3:d2:25:55:db:a6:bf:fe:97:
                    0f:13:fc:66:6f:3a:f6:fd:76:a6:5e:6e:11:43:b4:
                    e0:1f:b6:65:36:27:3b:bf:d1:83:13:a2:95:44:94:
                    a2:22:c4:ff:ea:d4:5a:d4:08:aa:97:13:d6:f9:7a:
                    4a:67:7c:b3:52:61:3e:49:02:3b:ea:16:30:62:92:
                    11:7f:bc:81:fd:b2:89:50:5b:40:cf:11:be:93:23:
                    3a:42:9f:7f:ce:5f:59:09:8a:cc:52:3b:e9:88:45:
                    57:83:ff:0c:ce:32:3b:16:84:7d:85:a7:fe:d9:e4:
                    c6:56:2a:20:22:a4:2a:5c:84:d8:61:c2:d5:b8:5b:
                    ec:cd:ad:9a:b4:ba:cf:0c:00:7f:7e:32:5f:14:8f:
                    c2:57:ec:2d:3b:05:bf:0a:46:d9:e8:52:43:27:ce:
                    f6:96:20:2b:43:7d:0f:2e:5a:bd:3b:8f:20:8a:4b:
                    15:4f:eb:da:bc:20:d7:92:d8:7f:7e:99:fe:d2:46:
                    45:aa:7a:a3:1a:c0:1d:e9:27:2e:00:75:a9:21:8c:
                    f3:f5:77:02:06:9a:dd:81:4b:e3:51:1e:09:f3:7c:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F3:1E:79:6C:ED:A7:42:78:E4:42:D0:64:50:20:6C:53:77:CD:F0
            X509v3 Authority Key Identifier:
                keyid:A8:0F:92:30:DA:24:0E:F9:87:BC:A2:B2:9E:46:49:A1:AB:1C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SX5tkCPHsS77NZ4MDWK5HzTGs2whNbXpmEes9YQviXG/1/A80F9230DA240EF987BCA2B29E4649A1AB1CF341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:3d:4b:53:3a:6a:cd:1a:10:ea:d8:df:fd:96:8d:f6:a7:
         62:c2:68:fa:f1:76:3e:eb:e1:72:0d:36:5e:9c:84:af:61:c9:
         18:87:13:4c:c7:7a:e6:1f:22:e3:fb:86:eb:bd:f4:25:6c:57:
         7b:9c:76:58:81:e7:64:96:c2:2c:bf:06:14:84:92:ab:22:bf:
         d9:42:84:65:91:72:4e:89:66:9c:7c:d9:45:2a:97:4d:d3:d2:
         dc:f7:a9:13:e4:50:71:e8:d3:fc:b9:92:53:40:60:5b:d0:3e:
         60:70:be:ed:57:12:e0:2c:84:5d:b5:b7:d6:e3:16:fa:78:c4:
         fa:c3:29:ef:69:9c:05:84:b5:b2:cb:50:c0:ed:02:54:89:a4:
         38:11:79:15:47:ec:c0:32:53:c6:46:c3:04:c0:38:f9:29:46:
         d1:9e:25:e5:4f:13:28:77:fe:de:67:c7:f9:34:2c:9a:a4:76:
         3b:75:7b:85:39:5a:7a:cf:9d:a7:7f:b0:11:b3:31:4f:e9:59:
         53:18:37:7d:a4:15:d6:d4:fb:a1:c3:f2:79:1f:a2:16:79:5e:
         6d:51:03:49:6a:32:f0:3e:1a:58:0d:ce:c9:3d:52:e9:38:10:
         3d:30:a5:32:87:0e:3f:cb:fc:e6:c2:4d:a8:19:f7:d5:6d:c7:
         13:d5:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----