Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
File:                     9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json)
Hash identifier:          CCR7GHl1tvNa5nDObdnTiTFiyQzLJhFyt/D/YbcsOps=
Subject key identifier:   70:C8:5D:7C:25:F4:6A:D6:71:41:0B:DC:82:38:83:DD:7F:AF:50:91
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       0824126D8921BCA2AFBB4E99A321A3CB1B841599
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
Manifest number:          0505
Signing time:             Sat 31 Oct 2026 10:33:50 +0000
Manifest this update:     Sat 31 Oct 2026 10:28:50 +0000
Manifest next update:     Sun 01 Nov 2026 13:26:50 +0000
Files and hashes:         1: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: f40Q1ojFDRO4SRUTDExhHmqPRrjDn03XCHfPRH2xv3A=)
                          2: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: Z02ylICWuZGL7FRBVTvYrM9mFNt2L5NLl2bZfEE9s8w=)
                          3: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: ufpdRoVEuyGOO9CmI3+2ngCUs+irh2rYSrMb6reePmM=)
                          4: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: o80Y+BvePG3fWXJURy/BCRhZm8d5Eh6FonVOw05hoSA=)
                          5: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (hash: VmuBnMFgi/UWyab31GAqluHW+38hF+2SBzsSNNIkRmk=)
                          6: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: YkwHLpgwLHKjvhpXCm8Xg+6xfPXbv1uncq/WDub4Mas=)
                          7: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: RwmqDC/vZdJLG88lelLTp7z+Pv6qnTpSAxLtcheNFkc=)
                          8: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: 6nG6zXl3LwP3uO0DYikCJZtKod0Sad98g+oXlOiECx8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 13:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:24:12:6d:89:21:bc:a2:af:bb:4e:99:a3:21:a3:cb:1b:84:15:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Oct 31 10:28:50 2026 GMT
            Not After : Nov  1 13:26:50 2026 GMT
        Subject: CN=70C85D7C25F46AD671410BDC823883DD7FAF5091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:07:64:f5:f3:37:67:77:0a:b4:37:b8:5c:15:
                    b1:ba:c7:c7:41:c4:55:b6:11:12:4c:00:f0:10:87:
                    dc:92:a0:96:d9:19:3a:2d:43:b5:86:d3:dc:e0:02:
                    a4:31:2f:4c:04:49:31:72:ab:c7:28:b7:a0:96:fc:
                    c5:b4:f3:29:4a:40:d6:91:4d:b2:e5:fe:58:f2:fe:
                    06:3f:d6:d7:cb:27:ae:d2:6f:23:7c:33:c6:9c:90:
                    ba:b9:a4:ae:ee:af:bf:1a:91:df:2c:31:d1:9b:4c:
                    6c:8f:12:bf:58:51:9f:a4:dc:19:29:92:9d:c5:78:
                    d5:96:17:d2:f3:9b:00:6b:c5:a5:ff:cf:bf:59:0b:
                    f9:74:09:d9:46:51:72:f7:33:62:6f:92:17:2f:c8:
                    f4:8f:17:1c:b9:fc:d2:03:94:1b:84:c8:9e:c3:ba:
                    51:cb:a5:ba:eb:a5:fa:3c:71:1e:8b:75:81:00:ce:
                    8a:9b:da:d7:a8:ed:63:ad:4c:c2:ad:36:f0:8d:65:
                    cc:10:2e:bd:d6:b6:d3:21:b8:08:7c:30:a9:d9:a3:
                    c6:66:f7:00:7f:98:55:84:9f:1d:39:cc:34:c8:ab:
                    4a:9b:f0:93:43:c7:0e:08:ff:d9:5c:05:fa:51:1f:
                    81:8e:77:4b:7d:b7:8e:27:c7:60:4e:11:21:18:2f:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C8:5D:7C:25:F4:6A:D6:71:41:0B:DC:82:38:83:DD:7F:AF:50:91
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:2f:9d:08:3d:56:b5:86:1d:5d:89:85:4d:1a:2c:f8:52:
         17:ce:19:9e:25:70:9c:0c:64:d5:2e:1e:6f:4e:a4:9c:bf:a0:
         0d:5e:87:26:d0:cd:6e:61:e5:bb:ee:88:42:34:e8:7b:0f:af:
         49:2b:45:1e:59:10:f8:b5:21:bc:eb:24:33:60:14:2a:e1:ca:
         d9:6d:7b:05:10:3e:a6:8c:dc:cb:9a:e6:16:e7:10:ce:40:f2:
         c5:46:ec:fc:89:66:cf:ff:11:d1:4c:43:df:f3:d2:a8:f9:46:
         49:be:3d:f7:88:39:f9:df:e9:58:5d:5b:d3:b3:11:ff:64:ec:
         12:9e:20:b5:ce:9f:5b:7d:d5:95:28:aa:a2:41:c4:db:d6:05:
         b5:a7:ed:27:71:f1:e4:87:9e:94:df:09:84:f2:3d:b4:a4:56:
         41:23:b0:11:b4:14:5d:ab:52:1c:10:d3:fa:9d:65:ef:49:c7:
         9f:e0:ea:2f:f9:9a:a3:b1:04:97:5d:58:e0:50:33:b0:9b:e9:
         30:5f:34:b8:f6:79:8e:f0:df:1a:e6:62:c1:c9:66:ae:a2:c1:
         27:10:e7:21:6d:e2:8e:d2:7e:e5:00:ce:40:8d:9f:d8:7c:e7:
         a9:76:d9:1b:3b:97:da:80:44:8a:1c:49:84:df:2d:d4:e8:03:
         d4:4b:c0:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCCQSbYkhvKKvu06ZoyGjyxuEFZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4MzI4MTg5QTBDRkY1M0U5RUQzQTJGMjA3RkZCQjlD
QUU2MUE0MTAeFw0yNjEwMzExMDI4NTBaFw0yNjExMDExMzI2NTBaMDMxMTAvBgNV
BAMTKDcwQzg1RDdDMjVGNDZBRDY3MTQxMEJEQzgyMzg4M0REN0ZBRjUwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwB2T18zdndwq0N7hcFbG6x8dB
xFW2ERJMAPAQh9ySoJbZGTotQ7WG09zgAqQxL0wESTFyq8cot6CW/MW08ylKQNaR
TbLl/ljy/gY/1tfLJ67SbyN8M8ackLq5pK7ur78akd8sMdGbTGyPEr9YUZ+k3Bkp
kp3FeNWWF9LzmwBrxaX/z79ZC/l0CdlGUXL3M2JvkhcvyPSPFxy5/NIDlBuEyJ7D
ulHLpbrrpfo8cR6LdYEAzoqb2teo7WOtTMKtNvCNZcwQLr3WttMhuAh8MKnZo8Zm
9wB/mFWEnx05zDTIq0qb8JNDxw4I/9lcBfpRH4GOd0t9t44nx2BOESEYL8ERAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUcMhdfCX0atZxQQvcgjiD3X+vUJEwHwYDVR0j
BBgwFoAUm4MoGJoM/1Pp7TovIH/7ucrmGkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4
WlcvMS85QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCODMyODE4OUEwQ0ZGNTNF
OUVEM0EyRjIwN0ZGQkI5Q0FFNjFBNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4WlcvMS85
QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa7AvnQg9VrWGHV2JhU0aLPhSF84ZniVwnAxk1S4eb06knL+gDV6HJtDNbmHl
u+6IQjToew+vSStFHlkQ+LUhvOskM2AUKuHK2W17BRA+pozcy5rmFucQzkDyxUbs
/Ilmz/8R0UxD3/PSqPlGSb4994g5+d/pWF1b07MR/2TsEp4gtc6fW33VlSiqokHE
29YFtaftJ3Hx5IeelN8JhPI9tKRWQSOwEbQUXatSHBDT+p1l70nHn+DqL/mao7EE
l11Y4FAzsJvpMF80uPZ5jvDfGuZiwclmrqLBJxDnIW3ijtJ+5QDOQI2f2HznqXbZ
GzuX2oBEihxJhN8t1OgD1EvA3w==
-----END CERTIFICATE-----
Generated at Sat Oct 31 17:34:24 2026 by rpki-client