Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft (raw, json)
Hash identifier:          yFGPHTTtBzXCPf0yteqfbw/8K8HxlgvDUJr9D1J5s+c=
Subject key identifier:   0B:90:FD:92:52:3B:6F:64:11:5E:32:BA:F4:E0:7E:B8:A2:04:26:11
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       471648460A670A43549CB46627862570FFA94EB6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 10:10:00 +0000
Manifest this update:     Sun 23 Aug 2026 10:05:00 +0000
Manifest next update:     Mon 24 Aug 2026 11:23:00 +0000
Files and hashes:         1: 323830343a323264383a383030303a3a2f33342d3334203d3e20323634313236.roa (hash: tiAhAv+gVbWnoT7cv+d8lIbVabpk8bEQbwc0BlWu3rA=)
                          2: 323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (hash: ZlSDgPNh56nAawdjSDhFfcG60JSspTvr2ONkxv60a9c=)
                          3: 3133382e35392e3230302e302f32332d3233203d3e20323634313236.roa (hash: LC5WhYwuRlCoKe/AWdkLeyKJqgH4k4/mduZy8fUH33c=)
                          4: 3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (hash: zyRJOiiqXZco2HnDWeQ6bYjAoYiXQImsmBofds7Syx8=)
                          5: 3133382e35392e3230312e302f32342d3234203d3e20323634313236.roa (hash: o/FwBJR2RpZgahnxgXMMyagNRhKTBqEFV9E92sD1lrI=)
                          6: 323830343a323264383a376630303a3a2f34302d3430203d3e20323634313236.roa (hash: w3iIpPfw+vjn8mKuKjFVKpT1wLZA+Sy+4PtT+m4vmNc=)
                          7: 323830343a323264383a383130303a3a2f34302d3430203d3e20323634313236.roa (hash: dDsxwhFcl6PE21AzfgDizXZulzqHwHruSt9cpCA6uek=)
                          8: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl (hash: U6RuSm4Fkv6i/roBmbEyZwj6kVHPzsU1hdsAKj1Zkuo=)
                          9: 3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (hash: V1cDZrw/jQuyXO5uGWhl5gnjqatTeLgacGxDPKp+eQs=)
                          10: 323830343a323264383a3a2f33322d3332203d3e20323634313236.roa (hash: gFIIDGbj9XYgwHaSzz61DO559mRwID/lhg7zHWCMNMo=)
                          11: 3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (hash: S+v8vzphhtZY7xjginNwf3t+wP+EJBriE6bKYdq9edI=)
                          12: 3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (hash: IWYZXcg3OmimkKiv+s1rdVnT4q8ViSPy8aJgPOJsXlQ=)
                          13: 3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (hash: KD2sUINvey2RZUbWiynu9D1f8dcwlTd0sk0Iaaix2mw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:16:48:46:0a:67:0a:43:54:9c:b4:66:27:86:25:70:ff:a9:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Aug 23 10:05:00 2026 GMT
            Not After : Aug 24 11:23:00 2026 GMT
        Subject: CN=0B90FD92523B6F64115E32BAF4E07EB8A2042611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:1d:75:6c:36:e6:18:fd:72:f3:06:83:ed:
                    ae:10:58:7d:c1:15:55:91:9c:fa:cd:25:b7:10:82:
                    a2:07:ea:65:34:fa:ab:dc:be:3c:54:c8:8e:ef:6f:
                    21:dc:62:0f:a7:4a:f1:d6:ca:fc:f5:5d:dc:8f:6e:
                    e5:a5:b4:df:d8:4c:67:f5:95:d5:05:80:37:9b:98:
                    3e:66:cb:83:73:96:70:a1:f3:4a:e3:86:88:b0:b7:
                    bd:b2:e2:86:65:57:85:4b:39:7e:05:43:9e:34:87:
                    ac:71:d0:38:95:f4:40:20:00:77:68:fe:63:4d:d6:
                    57:71:bd:e2:11:72:ff:43:a7:a9:18:a7:cc:87:ee:
                    88:b0:b0:49:96:02:16:0b:2c:60:48:30:7b:62:da:
                    75:82:2d:72:c3:86:85:5d:87:0e:59:13:cd:9d:f7:
                    4d:59:40:14:8d:aa:bd:cc:e8:fb:10:72:b8:6d:2e:
                    ad:e5:9b:e6:63:b7:09:f0:bf:d1:47:fc:12:ff:95:
                    de:5f:43:eb:49:e9:05:b5:78:d8:2b:79:69:72:35:
                    b3:d4:5d:b7:38:12:dd:de:14:7b:d3:37:a2:f1:92:
                    11:69:6f:22:d4:ea:42:fb:d1:8e:4a:e2:9d:b5:c2:
                    b2:86:30:e4:ba:1f:65:dc:67:cf:c4:2f:cb:07:de:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:FD:92:52:3B:6F:64:11:5E:32:BA:F4:E0:7E:B8:A2:04:26:11
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ec:59:6c:40:80:b7:69:79:00:e2:08:c4:3f:55:8f:ae:0e:
         68:ff:e8:87:f7:b8:aa:c7:6d:a6:55:ec:9f:d9:c5:85:5e:06:
         93:39:63:93:d7:85:4d:c8:a0:2e:7d:09:36:24:cd:27:bd:8b:
         76:d2:68:cc:11:03:89:9e:67:d7:4a:a9:b9:43:7f:ae:1a:c5:
         99:da:e8:45:9b:07:f3:10:b5:f7:0b:72:e3:12:61:0d:dc:13:
         af:57:67:de:cf:b9:39:6c:b0:ef:f5:68:47:26:88:ca:bd:bc:
         9d:c0:46:21:22:d8:27:71:fa:26:c6:3d:78:ee:60:ca:39:30:
         02:67:78:68:56:9a:c2:45:d4:77:b0:82:e2:9c:2b:bc:a7:96:
         de:11:6d:2d:68:a8:70:bb:31:5e:0b:da:81:aa:f1:fc:67:09:
         e9:d8:7d:b7:82:07:00:59:bb:14:7d:b6:a0:1d:83:e9:50:e8:
         7d:84:ba:4a:8e:4c:91:8f:c1:50:c6:72:cf:c2:03:59:cc:c6:
         c5:89:f8:fd:5a:96:6f:bd:c0:3d:8f:17:c4:eb:8e:3d:49:f1:
         29:0d:6a:f4:d2:0e:df:59:ee:3f:50:61:e8:f9:da:81:ec:a7:
         bb:cd:69:6a:94:bf:41:5d:1f:b3:58:2b:7a:23:8a:69:87:7e:
         9f:2b:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----