Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
File:                     60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft (raw, json)
Hash identifier:          O0Jlrt8LTsp99e1jE/t2XtitnFspREytqKHNFEgL9xY=
Subject key identifier:   66:B8:5E:EA:DE:C4:B3:6D:63:46:33:37:F1:4E:C7:C7:E5:15:FD:A8
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       2027930F4685F178C1029F407E0BA28C5B3F478C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
Manifest number:          02AA
Signing time:             Wed 28 Oct 2026 13:57:58 +0000
Manifest this update:     Wed 28 Oct 2026 13:52:58 +0000
Manifest next update:     Thu 29 Oct 2026 15:39:58 +0000
Files and hashes:         1: 60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl (hash: O8Ipopp0YjqLuQw7gZNMuDb6dhGUO3HeNL8TlpzDlFo=)
                          2: AS52706.roa (hash: tMRYhct67qQqjFg94jjsAmhPxnKOiqpZnzjl66FKEQg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:27:93:0f:46:85:f1:78:c1:02:9f:40:7e:0b:a2:8c:5b:3f:47:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Oct 28 13:52:58 2026 GMT
            Not After : Oct 29 15:39:58 2026 GMT
        Subject: CN=66B85EEADEC4B36D63463337F14EC7C7E515FDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:54:3d:bd:a6:f4:b2:de:49:82:8f:cb:51:
                    f3:18:48:48:c3:c0:3e:12:d2:b7:35:85:be:2b:12:
                    58:9c:af:7e:47:3c:3b:d7:bf:26:d6:21:d6:d3:de:
                    2a:c3:38:1e:de:c2:5a:14:a4:92:be:e2:22:31:44:
                    33:89:b1:10:10:0e:24:f4:a7:01:f5:00:a2:1d:8c:
                    a0:88:4a:0b:32:3c:4b:b7:f6:39:c6:be:47:cc:da:
                    6e:bf:96:27:ee:34:9f:54:a2:50:dd:d1:64:07:ac:
                    4f:6a:ee:78:d7:a6:36:b2:fd:22:7f:df:2b:fc:97:
                    d4:0a:7b:e6:39:a9:29:f0:92:de:6e:66:ab:30:f4:
                    2e:2c:c5:7c:b1:22:5a:33:4d:27:69:d1:f1:f6:d4:
                    d9:ca:5e:51:7f:bb:a1:81:c1:b9:58:ee:4b:c2:48:
                    cc:f5:c0:a9:13:4f:be:48:24:f6:52:36:d1:a6:9d:
                    29:e5:78:41:09:f6:d4:94:ec:10:36:a7:7f:61:bd:
                    c6:65:f1:b4:5c:e2:85:f9:b5:95:bc:51:88:47:17:
                    d5:a1:26:52:4c:01:ab:67:90:dd:d3:b1:3c:21:25:
                    31:ed:6a:e8:ea:a7:48:b0:6a:d8:c8:e9:81:58:2b:
                    c7:6f:0a:c2:a7:7e:57:72:2e:b8:35:18:05:6d:05:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:5E:EA:DE:C4:B3:6D:63:46:33:37:F1:4E:C7:C7:E5:15:FD:A8
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:3b:76:80:6a:3f:96:4d:7c:9e:34:f0:0a:1b:e9:a0:e8:b8:
         d0:7b:0b:0f:bd:d2:6b:a1:c2:8d:e1:e9:79:5f:4d:af:a4:e5:
         f3:cd:4a:7f:4c:54:79:d8:31:d1:b1:e4:60:2f:df:47:6a:2c:
         8f:6e:7f:1e:60:d4:b9:a9:14:45:f4:a8:3f:96:0a:a2:c9:7d:
         81:ce:78:66:7f:e2:11:4d:8c:5f:a9:b5:c4:30:14:3b:65:f6:
         c0:1f:5e:c5:90:f7:1c:ab:90:ce:aa:50:ee:fd:c4:e8:37:2f:
         36:1e:69:bf:4a:54:14:2e:84:ee:2b:9d:0b:c8:4c:08:c1:c5:
         70:90:9c:75:0c:4f:c2:1d:fc:f0:6f:8d:de:88:b1:8b:60:78:
         68:23:9d:9d:8d:b6:03:89:b7:a6:eb:8f:1e:c0:9a:bc:e8:59:
         06:1e:27:76:81:02:e9:1e:c4:b5:b9:c6:90:7a:63:55:81:9f:
         0d:18:f1:88:f1:59:f9:13:d9:ef:a2:15:bd:ef:1a:63:20:a3:
         5b:26:41:1c:b8:d4:cb:ee:27:b2:be:36:69:c3:7f:fa:80:f1:
         2b:7e:c6:c2:73:d4:34:bc:08:24:cc:3c:f9:d3:3c:af:a0:77:
         8e:2f:bb:48:27:e0:4d:5f:60:de:89:44:e8:8c:67:29:f0:dc:
         5e:8c:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:55:25 2026 by rpki-client