Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
File:                     24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft (raw, json)
Hash identifier:          cy9pURg2yUjkZpzvt28ebyGwpFeAvLMyMS6vRBEVFOg=
Subject key identifier:   AC:70:AE:62:8B:DA:B4:E6:23:AD:E6:66:D1:18:54:63:A3:94:7A:53
Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82
Certificate issuer:       /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
Certificate serial:       7EB6B53F102E8230B40CCDFAE0F872E42B5C0885
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
Manifest number:          04AE
Signing time:             Fri 30 Oct 2026 14:30:17 +0000
Manifest this update:     Fri 30 Oct 2026 14:25:17 +0000
Manifest next update:     Sat 31 Oct 2026 16:00:17 +0000
Files and hashes:         1: 34352e3232352e382e302f32322d3234203d3e20323636393731.roa (hash: /uMXlbWnVYEuPIiw7J8C1Dbn394JRWSAh/RriDnYtoM=)
                          2: 323830343a343632343a3a2f33322d3438203d3e20323636393731.roa (hash: 2kWjhXI8Ln5NxgCAVc+zw7V5UQwpCqxuRh48jn5bJTs=)
                          3: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl (hash: DnvDJcemOz57Nl3nZRPnOFmigawdOkUMJt88gqZKhgY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl
                          rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b6:b5:3f:10:2e:82:30:b4:0c:cd:fa:e0:f8:72:e4:2b:5c:08:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782
        Validity
            Not Before: Oct 30 14:25:17 2026 GMT
            Not After : Oct 31 16:00:17 2026 GMT
        Subject: CN=AC70AE628BDAB4E623ADE666D1185463A3947A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:50:52:c4:90:b0:83:dd:88:7c:52:7e:0a:
                    f2:6c:c9:ef:4e:6d:39:70:25:d8:f2:71:f2:19:70:
                    03:e0:31:c5:5d:7f:ae:6a:15:38:af:a0:c3:51:62:
                    d6:c9:c2:76:28:f1:ca:3d:ba:7b:eb:8b:db:12:22:
                    62:73:3d:69:08:99:81:8f:b6:a9:ef:ea:67:c1:e1:
                    05:05:6c:b5:60:b0:11:b1:d9:35:16:4e:e3:cb:a0:
                    7d:2c:c3:9f:03:c9:9e:8f:1b:3d:a3:9e:49:ce:47:
                    80:db:8c:e7:42:b3:63:16:46:67:ea:7b:98:a9:e1:
                    19:09:9f:6c:0a:92:6b:75:a5:93:a9:51:64:bc:0a:
                    ff:da:3e:a0:28:ce:6a:76:bd:54:fa:73:f4:e6:1a:
                    e6:2c:39:f6:2c:e6:7d:7b:1b:ea:e3:f2:2d:e4:fe:
                    b3:7d:06:58:ea:47:52:3a:be:24:be:e0:d2:03:17:
                    4b:69:bb:9a:03:e5:0d:2d:c7:b6:ea:a1:33:a2:9f:
                    7d:07:77:95:09:55:02:07:23:42:07:6f:88:2c:21:
                    b6:91:ac:e3:62:fe:58:06:57:fa:c5:58:c3:8f:e3:
                    ed:b3:78:2e:ab:c5:15:d9:b2:fd:4d:dd:07:1a:0d:
                    e7:d7:9a:b2:04:7d:b4:71:cf:d7:f2:7a:c3:88:c9:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:70:AE:62:8B:DA:B4:E6:23:AD:E6:66:D1:18:54:63:A3:94:7A:53
            X509v3 Authority Key Identifier:
                keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:92:5e:7c:7b:03:49:47:d9:d6:26:bf:e8:4c:5d:9c:de:
         c8:ed:d6:1c:6c:c4:0f:22:d5:58:78:3d:8f:ba:1d:bc:0d:26:
         39:b1:5e:f0:b5:b6:db:17:32:63:c8:d1:02:7d:7d:0f:78:9e:
         fb:38:cb:43:b3:3b:0e:87:e4:ad:df:4c:e9:58:8d:a8:36:41:
         99:31:65:ee:70:02:35:33:f3:82:52:0f:dc:a7:df:e4:39:b0:
         bd:fb:7d:a9:66:57:db:dd:16:52:15:9b:35:e4:66:90:0d:08:
         4c:65:b6:b4:50:78:47:91:6d:3b:09:5f:51:a1:32:77:9d:30:
         0b:47:bb:ac:b8:e2:68:8b:72:b5:bd:f6:0a:51:07:c8:13:2f:
         7b:8b:2b:8c:8d:31:f2:2b:be:be:52:22:90:a1:83:20:55:20:
         a3:0d:b1:46:3e:e7:38:60:ee:71:45:49:2d:49:ba:02:71:8d:
         a1:64:c0:c3:f2:bc:11:23:34:fb:ff:96:81:e6:bb:47:f5:3b:
         3f:87:2a:4c:e2:20:53:5e:15:c0:49:44:46:92:69:47:27:e3:
         76:e4:8d:45:eb:48:7c:04:b5:26:74:49:89:40:a5:dc:f8:8f:
         3c:6d:91:04:46:4c:a1:04:e6:0b:12:6b:b6:22:d2:f7:3e:0a:
         8d:4a:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:16:00 2026 by rpki-client