Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File:                     8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier:          3Nf8H8aryYnikILoEFFag3N5JwezrK3Ve1YSVFFpE64=
Subject key identifier:   8C:25:10:4B:1A:B7:B6:0B:B9:B5:6D:E3:3B:9A:80:A5:1A:CD:F1:63
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       564F70388B5924CE4D1E97F9FDF639F6BE04AF33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number:          0447
Signing time:             Fri 30 Oct 2026 08:13:06 +0000
Manifest this update:     Fri 30 Oct 2026 08:08:06 +0000
Manifest next update:     Sat 31 Oct 2026 11:24:06 +0000
Files and hashes:         1: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: yi5NHf81xSrwdLikf640t+ZSO3q9F/irBW2g0xWm15s=)
                          2: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: E/Et19r3lpNjQPCWLAmS3AuFupx/WGnCwz+KuUlSuA4=)
                          3: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: qea2/OiRh+3BNdN6Qo0u8Kum06T+vJL8/t6zwq7Ryi4=)
                          4: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ERXeEDdPGxuxbhWYHNqcE8ExZ8Cxyb4ER4OqtsO0Z8o=)
                          5: 34352e372e31322e302f32322d3332203d3e203631363738.roa (hash: 5naDD0zitt7PIirZU/YwT0lkSbQqx7ZCEn7ZHzN8E3o=)
                          6: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: k+OYIPafOPyxewPaNEllAN4XrYOU55urLV+aDorsq9s=)
                          7: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: tlR4y5t9LIns2FHrpFk0pedEKjfE0nyP7jxIwrmH4ZQ=)
                          8: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: LQfEs5BsnJRWNQT6AAbr+cgTKDJiMzbQS+Ni1JHpza0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 11:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:70:38:8b:59:24:ce:4d:1e:97:f9:fd:f6:39:f6:be:04:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Oct 30 08:08:06 2026 GMT
            Not After : Oct 31 11:24:06 2026 GMT
        Subject: CN=8C25104B1AB7B60BB9B56DE33B9A80A51ACDF163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:c2:60:42:15:2d:42:96:62:fc:37:7a:60:
                    4a:aa:ad:79:fd:87:ea:8e:f4:a4:65:23:d6:26:21:
                    08:86:b5:4b:ab:40:12:93:9f:c9:54:c8:e0:2e:20:
                    ea:7e:ef:42:30:97:4e:21:fb:5e:68:7c:a6:14:f0:
                    77:6f:3b:37:fc:49:27:a3:41:05:fe:e0:1a:eb:02:
                    1f:58:35:31:20:9b:ff:97:86:d1:38:0b:25:c4:9c:
                    4d:53:66:3d:7e:31:a5:c1:12:ee:42:0d:30:35:aa:
                    1e:5d:3b:f5:c5:20:52:d2:5e:9a:a9:ab:5e:08:e5:
                    ef:dc:04:3f:c5:d0:2c:e9:b5:12:57:b1:fe:f4:cd:
                    7d:88:50:a1:c7:ea:76:5a:9d:0e:13:3e:81:8c:e5:
                    7b:26:12:2b:bc:b0:66:37:c4:8b:87:38:a3:16:77:
                    75:e2:ed:ab:bb:1d:2d:c3:f9:cb:0a:f1:ad:6e:a7:
                    14:9e:69:bf:3d:b9:a7:f3:c3:72:4d:a6:9b:11:e9:
                    59:63:49:c0:77:d1:56:41:79:99:e2:b0:4f:d9:bc:
                    5b:b1:08:a7:cd:54:e1:aa:51:97:f7:6b:5e:93:43:
                    c9:28:b2:50:bd:dc:db:dd:4f:9f:d8:e1:c3:15:1c:
                    10:5a:7f:5a:de:16:6c:ed:27:21:18:d3:77:13:85:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:10:4B:1A:B7:B6:0B:B9:B5:6D:E3:3B:9A:80:A5:1A:CD:F1:63
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:e9:d6:b2:9b:72:ea:6a:29:55:59:e9:3e:0c:89:64:6b:
         d5:50:8a:fa:de:ce:c6:12:5c:b5:19:e6:20:bc:e3:a4:8e:4d:
         72:10:26:fc:cf:6f:34:2d:72:bf:eb:c3:7a:fe:53:9d:01:4d:
         f6:3f:82:95:4f:66:88:82:97:7c:62:94:1f:57:0a:2e:14:c9:
         2e:b4:53:d5:70:a6:1e:db:c0:49:55:ea:8e:e9:14:5b:2a:3f:
         53:46:2e:8c:35:d1:9e:46:c4:b7:96:5d:c7:9e:5f:c4:77:fc:
         17:1a:e9:2f:bc:5c:da:09:bf:41:68:34:e6:76:04:14:59:c7:
         5f:08:0b:f5:1a:6b:3c:27:c5:7f:cc:d3:4d:c8:69:2a:8f:6c:
         39:f4:f4:09:d0:49:62:95:d5:8f:f0:05:15:28:f8:7e:6a:06:
         a1:63:87:f2:77:f0:ae:c5:e7:22:83:c1:5b:a8:d8:cf:22:32:
         5a:c8:36:8a:4e:4a:5f:c3:86:e3:53:ca:2a:47:b6:10:fe:0b:
         0d:1e:ed:e8:53:02:32:14:a7:1d:f6:6a:f0:96:e7:de:29:c4:
         9b:64:6b:ab:ba:87:8e:bc:95:92:b4:88:1c:7d:9c:f9:3e:75:
         2e:ed:f9:d9:ca:09:45:41:f3:e2:49:f9:cf:0e:d7:2f:35:7c:
         23:18:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 15:55:21 2026 by rpki-client