Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft
File:                     BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft (raw, json)
Hash identifier:          MAdmZ2hp5OvfxXrUxQ7mm+v51jy/NW56VgtKLwm0ta8=
Subject key identifier:   BA:F5:8F:92:A5:E3:A8:44:FB:B6:9A:01:6D:88:50:13:23:32:43:2B
Authority key identifier: BF:09:63:C3:CB:BC:BA:53:9C:BA:10:3B:C8:07:AF:FC:B9:D7:82:09
Certificate issuer:       /CN=BF0963C3CBBCBA539CBA103BC807AFFCB9D78209
Certificate serial:       28EA212A8B0E31390E5A80C6F8FED55E298053D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft
Manifest number:          0F
Signing time:             Sun 11 Oct 2026 01:38:47 +0000
Manifest this update:     Sun 11 Oct 2026 01:33:47 +0000
Manifest next update:     Mon 12 Oct 2026 05:28:47 +0000
Files and hashes:         1: BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.crl (hash: QYxRXwB70q3SA8g4fmmM99CvkHmwTf5WDYhPUdqjSW0=)
                          2: 3137392e34382e3130302e302f32322d3235203d3e20323731303732.roa (hash: MLu67Ip+LB1E13y1c9FgBqNzNuVkEHBBvxzqjXmvDZA=)
                          3: 323830343a373564343a3a2f33322d3438203d3e20323731303732.roa (hash: JvwHh+MZ6Co1nbiDfOhcokKYMdc/FDT60FzI7Xhb98c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.crl
                          rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ea:21:2a:8b:0e:31:39:0e:5a:80:c6:f8:fe:d5:5e:29:80:53:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0963C3CBBCBA539CBA103BC807AFFCB9D78209
        Validity
            Not Before: Oct 11 01:33:47 2026 GMT
            Not After : Oct 12 05:28:47 2026 GMT
        Subject: CN=BAF58F92A5E3A844FBB69A016D8850132332432B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:42:be:d3:11:a5:fd:9d:7c:ae:db:8e:8f:
                    49:45:52:2d:12:5d:07:fb:63:09:f0:4e:ca:d9:be:
                    f0:d3:6e:1c:1d:cd:58:f4:a1:53:c1:e3:73:b4:98:
                    d7:7b:9e:f2:6d:8b:9f:b8:02:55:63:f9:86:2d:87:
                    c9:da:67:09:6b:a1:3d:87:9a:93:25:17:cd:d4:e1:
                    5b:5d:1b:01:9e:e3:3c:97:f5:f1:df:11:47:c3:1e:
                    b0:fa:ab:4f:36:09:36:a1:40:dc:18:43:eb:b3:f9:
                    2a:01:a4:0e:02:46:ed:bf:2f:37:d5:0b:03:76:12:
                    ed:58:d7:e1:ba:4d:21:c9:99:c1:7f:a0:9c:86:d6:
                    61:71:dd:31:63:cb:36:ed:54:97:14:6e:91:a8:e4:
                    23:b0:60:41:4b:e0:32:96:9b:e3:9f:4f:0e:fc:8b:
                    07:55:a1:70:29:5c:d2:de:90:d9:7d:5e:e7:20:6c:
                    e2:23:d0:39:5c:b4:72:4a:0a:57:50:09:65:4d:e1:
                    4e:44:79:f7:8a:5c:01:6d:6a:36:7f:08:f1:57:fb:
                    5e:5b:ed:ab:03:96:3f:3c:f4:e0:46:5f:69:c5:4d:
                    8c:db:12:2d:d1:e0:19:b5:ba:0f:c8:20:5b:4d:78:
                    ba:7b:79:f6:b0:3e:ae:c9:d7:e8:79:5b:7e:99:2d:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F5:8F:92:A5:E3:A8:44:FB:B6:9A:01:6D:88:50:13:23:32:43:2B
            X509v3 Authority Key Identifier:
                keyid:BF:09:63:C3:CB:BC:BA:53:9C:BA:10:3B:C8:07:AF:FC:B9:D7:82:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d5:a5:7f:3a:59:e6:11:01:82:7a:06:4a:2d:a1:e6:80:2b:
         3d:52:22:8f:3a:65:9b:0d:16:63:59:0f:db:d9:41:a6:0e:3e:
         1f:10:73:38:1b:22:76:04:6b:5f:b4:bd:6a:cd:b4:7c:ad:6c:
         d1:f2:99:60:e2:e5:6d:6b:64:59:3b:e6:7a:5b:5f:cf:a6:b7:
         5a:8b:18:a9:3a:80:a8:44:14:6c:99:d2:a2:59:15:1f:7e:10:
         66:4a:6d:4f:2a:31:00:4d:93:48:32:fc:45:da:41:e2:2a:ae:
         1f:d5:34:7e:a8:96:33:fa:b0:56:70:e0:3a:31:25:82:97:de:
         e9:34:57:4a:12:91:21:d8:35:88:fc:d6:a8:28:37:68:5f:16:
         dd:fb:c6:0b:58:88:72:de:77:45:03:c0:2c:80:b9:ee:94:78:
         9e:73:c2:e6:90:26:06:6a:27:74:e6:cd:1c:ea:56:4d:45:68:
         31:0d:65:76:9c:5c:4c:3c:e8:05:d7:ea:0a:9d:52:34:6a:7a:
         60:73:78:48:59:cf:69:bb:a0:9b:79:ae:3e:72:fe:85:eb:91:
         88:10:26:2e:5e:c0:fd:d9:4b:a7:a9:14:9d:aa:7e:ce:ee:39:
         06:4d:46:1b:61:17:4a:58:46:f3:26:55:16:68:d7:3d:2f:2c:
         54:2e:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:39:14 2026 by rpki-client