Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File:                     2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier:          vhfKFCOxW9OHnXCD48rKroDFpifGCfawQxW+Ept6v2M=
Subject key identifier:   B5:77:0F:E9:5A:35:EC:50:4C:3C:7D:99:F1:DE:C6:AE:92:8D:56:76
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       190459660C8A952A754F101987F5CE1BF3CFA5AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number:          04ED
Signing time:             Sat 31 Oct 2026 16:35:15 +0000
Manifest this update:     Sat 31 Oct 2026 16:30:15 +0000
Manifest next update:     Sun 01 Nov 2026 19:39:15 +0000
Files and hashes:         1: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: ouEzHDkE2E5vfq55y9dlEDh6oBHise2kcGwYI0PUoKg=)
                          2: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: TbDFL3gUdNfReddqFUYovFWPHWh7xwus0xT+10cp8M0=)
                          3: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: A2Gpn8ZW5aoEGzgwjPMqPIr4WywGHZsk8HwfwI/eW/o=)
                          4: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: smY/SAzd2Fuaf2YaSHRlggXrs8poIzwUXt+Sy0fZuxY=)
                          5: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: dOTcyk/Yg1CLHjEE7CrSkjNRl+YJedBSp33BbqS6EcI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:04:59:66:0c:8a:95:2a:75:4f:10:19:87:f5:ce:1b:f3:cf:a5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Oct 31 16:30:15 2026 GMT
            Not After : Nov  1 19:39:15 2026 GMT
        Subject: CN=B5770FE95A35EC504C3C7D99F1DEC6AE928D5676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:1f:96:f5:0b:ab:c0:c1:e4:bd:19:51:df:
                    83:ec:0b:4b:b0:f4:15:57:0f:1d:e7:5d:04:bd:a6:
                    c5:53:2f:34:45:8b:f7:d7:f5:50:05:72:fc:08:aa:
                    ec:fc:9a:11:32:7d:96:d2:a6:d6:23:7a:b9:2c:dd:
                    22:c1:e8:29:d8:d2:c0:1e:9b:cb:b8:39:59:65:55:
                    57:ad:8d:ab:49:4a:ce:15:38:e8:ce:a0:50:3c:8c:
                    d3:0d:16:a8:be:6e:42:58:24:e3:84:b3:9c:04:98:
                    b2:0e:f8:4a:50:f5:4e:bd:5d:ec:c5:63:fa:ae:5b:
                    e9:93:f1:14:6a:41:55:b0:58:af:a4:0b:d2:fd:5c:
                    dc:41:d7:ba:b9:19:28:1b:43:0e:97:e1:33:0e:c2:
                    0e:88:41:20:7c:9a:92:c8:e3:20:93:40:1c:20:06:
                    5f:b5:11:1e:d5:b5:3a:d5:6d:e1:54:a4:fb:1a:b5:
                    68:e4:71:c9:ae:ad:8b:c5:0b:71:1c:50:5e:40:32:
                    a9:8f:9c:bf:bc:dc:71:79:7f:6a:b5:b1:54:18:c9:
                    27:cc:fe:bf:e9:26:0a:5b:3f:2b:df:1e:6e:75:30:
                    e5:76:09:25:78:e4:b4:b9:04:5b:c7:7d:01:e8:02:
                    c9:3f:4b:bd:15:60:71:20:41:93:c8:02:7d:4e:af:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:0F:E9:5A:35:EC:50:4C:3C:7D:99:F1:DE:C6:AE:92:8D:56:76
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:43:d2:ad:49:31:07:a3:9f:b6:50:25:c2:75:d7:2e:b4:4e:
         cd:5d:67:f9:eb:81:4d:36:3e:b7:aa:30:dc:31:9e:e6:13:f5:
         20:94:c4:ac:1b:d0:1d:fc:c3:15:d9:7e:63:61:ef:42:98:01:
         85:52:16:1e:c7:59:4e:4d:20:01:e8:d9:c5:74:9c:0d:5b:4b:
         6e:ce:28:dc:e8:61:aa:bc:03:a2:61:32:62:0f:73:14:cb:db:
         a5:c1:66:2f:80:ed:5a:a4:59:fe:d7:26:aa:7a:c4:c1:35:56:
         c1:45:22:f7:f5:df:1c:de:3b:86:3c:aa:02:8a:9d:91:76:3d:
         d3:a0:14:3a:e8:ec:93:78:72:e4:bb:36:e1:63:ee:83:61:3d:
         63:5b:b8:77:a4:c4:fe:1b:0d:34:38:50:ef:a3:f2:76:49:43:
         2b:31:dc:81:34:ff:48:f6:8f:99:c0:bb:97:50:92:4e:e0:86:
         f2:94:7d:98:66:ab:5e:28:61:04:8d:b2:2b:f6:19:2e:d4:cc:
         a1:c4:70:1a:74:6e:c0:31:bd:ad:38:5f:5d:49:f0:60:33:85:
         fc:4b:55:3d:1f:2b:a3:a1:d8:fd:5a:6d:46:32:3c:17:d9:bc:
         0a:29:11:92:53:3e:16:ab:85:51:eb:77:e6:01:9e:43:25:93:
         ea:e9:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----