Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
File:                     AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json)
Hash identifier:          VwVapT/HCMpYNaLjg70DSu8CiXdAFO8UffCMVNcvK9g=
Subject key identifier:   2A:23:CB:0A:C8:2D:E3:5A:A2:10:FB:E3:74:96:E3:EF:D3:C5:9C:E9
Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8
Certificate issuer:       /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
Certificate serial:       057008F41155159ED205D275B89090588065AC8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
Manifest number:          0216
Signing time:             Sun 11 Oct 2026 08:50:06 +0000
Manifest this update:     Sun 11 Oct 2026 08:45:06 +0000
Manifest next update:     Mon 12 Oct 2026 09:29:06 +0000
Files and hashes:         1: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: v5M5Z+y4iQNRlg7egvGDrs5d0WTx9FO6gZFfTTjQ7so=)
                          2: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: dukg77/FZGwEGEYzh9ImGeDqTDpgZcuaelaD+6R0DVc=)
                          3: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: 6HFrEHL1v0fcx8BKWlRjusTJxpwbjwBan9WOc7FmBjo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl
                          rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:08:f4:11:55:15:9e:d2:05:d2:75:b8:90:90:58:80:65:ac:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
        Validity
            Not Before: Oct 11 08:45:06 2026 GMT
            Not After : Oct 12 09:29:06 2026 GMT
        Subject: CN=2A23CB0AC82DE35AA210FBE37496E3EFD3C59CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:e3:97:92:6c:1a:f7:d4:6b:59:b5:3e:c9:
                    b1:63:de:10:7d:6f:d3:b7:26:47:bd:c7:59:20:5a:
                    ec:42:0e:e8:c5:79:94:de:52:2b:70:e4:f2:59:dd:
                    09:04:29:ba:90:33:f2:e6:74:28:1c:51:1b:8d:f0:
                    c2:3c:21:c5:95:10:93:0f:38:77:00:d0:72:da:6f:
                    2d:7d:3b:b5:d3:49:49:3e:10:1f:75:b7:83:ba:f5:
                    c0:c6:e4:0b:29:6f:04:1a:42:bd:f5:84:67:ae:b2:
                    24:13:18:e2:ee:46:0e:bd:0d:44:15:1d:90:a6:35:
                    e1:01:e0:4e:8e:46:35:d5:4f:8e:64:2b:af:dc:44:
                    9f:c8:c7:c2:f2:73:3e:64:93:da:d7:77:d0:be:7a:
                    4e:e3:a9:6b:c4:1d:d6:cb:c2:5d:a7:9c:c8:b2:2d:
                    7c:2b:b8:92:d3:a5:fb:ca:0c:b5:17:c4:09:29:1d:
                    40:b5:53:b7:32:db:06:34:f0:a3:79:69:ad:75:e1:
                    fb:36:45:0e:66:0e:50:6a:87:1e:14:13:70:33:86:
                    05:82:8b:a6:4f:0c:e9:ce:82:e1:dd:71:5b:89:d1:
                    a8:1f:40:ae:fc:d9:af:bd:8d:7b:b2:c4:dd:bf:ad:
                    4c:9b:99:50:e6:2d:d7:3f:99:3c:1d:fe:e7:2f:01:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:23:CB:0A:C8:2D:E3:5A:A2:10:FB:E3:74:96:E3:EF:D3:C5:9C:E9
            X509v3 Authority Key Identifier:
                keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:e0:16:50:57:78:fd:55:d6:d4:27:bf:8d:03:22:9a:9a:
         63:62:f7:2d:50:be:44:0d:1c:a0:ee:2a:11:25:62:ea:b3:92:
         11:04:0b:cf:23:2c:ec:ba:e6:c8:91:e9:e5:0a:4a:2b:7e:b5:
         e7:9f:c7:8f:2c:9b:cd:b3:9f:5a:d6:8f:87:1a:09:2e:e4:be:
         47:63:c3:b9:45:4a:fa:e8:43:de:41:4e:e6:8a:58:76:ea:56:
         69:6a:32:be:32:48:06:0f:37:19:59:4e:be:ef:3f:59:8d:c1:
         ab:65:1a:54:ce:5b:a6:df:9a:54:04:08:5f:d2:25:d1:0b:56:
         f2:6f:c7:54:29:e4:16:24:75:08:cc:02:4a:3d:e7:07:3e:e3:
         e2:e2:19:9f:cb:aa:3d:e6:b2:20:2c:19:4f:80:06:be:67:29:
         8b:38:6e:39:dd:a3:68:d3:a5:19:1b:c8:65:06:4f:63:1d:5c:
         f8:41:d1:5a:b9:ae:14:8a:09:13:33:ce:98:17:d0:e4:83:ca:
         eb:f6:78:0d:fc:c9:a2:ed:a7:bd:f6:d7:de:7a:ee:bb:56:53:
         45:7f:08:ab:99:ea:6b:c2:be:b5:4c:ca:1a:3e:cd:64:fe:4e:
         b7:f9:4c:f9:e9:c8:62:5e:5a:fa:e5:c8:d0:b7:68:49:de:21:
         2c:4b:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:57:46 2026 by rpki-client