Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
File:                     CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft (raw, json)
Hash identifier:          NnjwNKlWxubhjLwJbgCE3TcubNL8QdHD6HIpL1VNK9w=
Subject key identifier:   A0:57:C0:64:B8:F6:D2:3A:D9:FE:7A:39:9A:90:BF:7E:E9:21:9F:9E
Authority key identifier: CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20
Certificate issuer:       /CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
Certificate serial:       4DD03E7DF6FBF7B6202F2ADEF12DC3146468159B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
Manifest number:          018D
Signing time:             Sun 11 Oct 2026 10:06:23 +0000
Manifest this update:     Sun 11 Oct 2026 10:01:23 +0000
Manifest next update:     Mon 12 Oct 2026 11:44:23 +0000
Files and hashes:         1: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl (hash: mJ651JRVcPoGg8lXbpQs69hurGYsJzs6AeAbOXg5+F8=)
                          2: 323830343a393732633a3a2f33322d313238203d3e20323734333839.roa (hash: kTr6CKpzTKUFfgoDsLlDzKHFTQvHPRxo2ersppPwDCk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl
                          rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d0:3e:7d:f6:fb:f7:b6:20:2f:2a:de:f1:2d:c3:14:64:68:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
        Validity
            Not Before: Oct 11 10:01:23 2026 GMT
            Not After : Oct 12 11:44:23 2026 GMT
        Subject: CN=A057C064B8F6D23AD9FE7A399A90BF7EE9219F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:47:32:aa:bd:26:15:18:c0:82:a6:5e:43:
                    8f:27:88:b2:b2:f8:7f:94:de:ec:02:f4:1c:37:1b:
                    b3:e9:32:a6:14:f3:f6:6b:fa:9b:6c:76:92:e0:de:
                    65:96:52:6b:86:ea:e3:e0:bb:85:cb:e4:31:b3:f0:
                    45:7d:1a:35:72:36:b6:d7:85:7a:54:d8:ea:3f:cd:
                    e2:d8:7c:34:a4:d6:18:c4:cd:7e:13:fa:1b:ae:30:
                    54:93:f1:3a:ff:a3:6d:42:0f:6f:37:fa:4d:76:51:
                    f8:41:32:88:6a:33:49:84:5a:bb:86:e8:99:27:43:
                    9f:26:f2:1f:30:4f:f4:7f:d6:ce:bb:07:9a:56:74:
                    db:45:0a:bb:9f:4b:df:07:fa:07:e9:31:9c:a5:35:
                    57:55:8d:a8:f3:84:a8:2a:61:f5:e8:ba:2c:52:27:
                    d7:d2:83:f4:5c:36:ac:e2:ac:2a:bf:ac:d2:37:39:
                    10:38:ce:4e:ba:53:c0:c1:0a:6e:93:90:fb:eb:e9:
                    06:2a:78:c1:ab:7d:cb:22:88:12:e4:58:7e:07:da:
                    4c:ba:af:1f:2c:d5:60:96:2a:10:2b:f5:bd:3c:b3:
                    da:bd:a5:e2:8c:0b:77:37:f6:a9:cb:30:d5:e2:df:
                    57:44:19:c5:99:16:e1:1a:9f:c9:ea:37:82:76:8c:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:C0:64:B8:F6:D2:3A:D9:FE:7A:39:9A:90:BF:7E:E9:21:9F:9E
            X509v3 Authority Key Identifier:
                keyid:CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:e7:5c:8c:1b:69:5a:f5:59:24:3b:08:09:76:06:0f:60:
         fe:8e:ce:f2:4c:e3:f6:04:98:67:13:e5:7d:58:d9:e8:e3:49:
         8c:fa:dd:fc:97:ec:e3:0e:88:32:41:4a:3a:20:f3:b1:af:15:
         16:11:7c:fe:13:7f:28:af:4b:f2:24:1c:f5:3a:36:36:a7:22:
         50:7d:55:3d:4a:6c:90:c4:85:e2:9b:75:13:64:ec:fb:9c:1f:
         07:ba:67:6b:0c:4e:b4:9a:87:6d:76:10:2e:26:ed:1a:99:67:
         2e:44:27:62:c9:1d:5f:a0:28:15:2f:74:15:65:60:51:57:23:
         7a:1d:c1:9b:aa:75:45:00:3d:58:5e:09:1a:06:82:a5:34:49:
         91:33:8f:59:6e:e2:85:16:f5:a2:5e:52:f7:02:5f:e1:de:e5:
         7a:8a:f2:0d:a6:06:7c:6e:93:04:30:4b:26:d6:f3:06:45:0e:
         4c:99:ba:9f:a0:1d:99:f7:65:6e:84:0c:ba:3e:44:cf:d4:bd:
         df:08:b9:1c:95:94:bc:4a:d2:66:a5:da:a5:ed:3b:f3:77:27:
         50:30:14:65:e6:3c:db:75:ff:e1:2f:89:71:34:31:37:61:9c:
         00:94:c8:ff:8b:5d:f9:d3:f8:74:ae:2f:d9:4b:50:b9:26:93:
         a1:fa:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:18:20 2026 by rpki-client