Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
File:                     8A590D260B5BE3ED54768E297080736709CACE0D.mft (raw, json)
Hash identifier:          m200KCBiVk6f5WMOLFha1pevnfkGMg4LcsyrRBC4ITg=
Subject key identifier:   55:C3:0F:0D:74:E8:09:71:D9:ED:EA:27:62:3F:46:FC:B5:52:72:D9
Authority key identifier: 8A:59:0D:26:0B:5B:E3:ED:54:76:8E:29:70:80:73:67:09:CA:CE:0D
Certificate issuer:       /CN=8A590D260B5BE3ED54768E297080736709CACE0D
Certificate serial:       0A0A9B32F50C4F1177B2E4EEB5FC6F977B0C0C99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
Manifest number:          22
Signing time:             Sat 31 Oct 2026 18:16:23 +0000
Manifest this update:     Sat 31 Oct 2026 18:11:23 +0000
Manifest next update:     Sun 01 Nov 2026 21:05:23 +0000
Files and hashes:         1: 323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (hash: jojjTOjsmuCOIqca+26c8DwgYFHeCe3yCU5zN1zjC/k=)
                          2: 8A590D260B5BE3ED54768E297080736709CACE0D.crl (hash: Z4ucH+L/uea3M8J2Eug6OuPMWfYcJ2M7sbWqOKla9+c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.crl
                          rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 21:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0a:9b:32:f5:0c:4f:11:77:b2:e4:ee:b5:fc:6f:97:7b:0c:0c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A590D260B5BE3ED54768E297080736709CACE0D
        Validity
            Not Before: Oct 31 18:11:23 2026 GMT
            Not After : Nov  1 21:05:23 2026 GMT
        Subject: CN=55C30F0D74E80971D9EDEA27623F46FCB55272D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:ee:25:5d:70:77:17:55:ad:c1:89:ba:23:
                    11:9d:45:71:67:9d:c4:f6:3c:b0:02:d2:2f:d8:4a:
                    e2:87:ba:51:f8:ca:50:a5:8e:f8:dd:ff:ed:48:2d:
                    59:31:bf:44:5f:9b:75:34:9f:2e:31:fd:64:5e:1d:
                    97:f9:fc:01:c7:74:87:66:bb:a9:d4:dd:c8:d6:29:
                    ea:36:f8:48:bc:58:82:a3:d4:2e:f5:eb:7b:24:76:
                    b1:79:7b:c2:44:a3:34:a7:2e:44:56:f3:3b:aa:f2:
                    8d:8f:df:c0:37:39:9c:ef:e7:51:bc:f9:f4:0c:70:
                    0b:d7:fe:7b:87:78:d2:06:18:51:f2:89:db:cf:e4:
                    df:54:0d:32:fb:10:f6:8a:a0:1e:99:2b:35:7c:5a:
                    8b:cf:bd:6f:8e:ac:85:8f:c1:63:53:da:37:3f:1d:
                    7a:55:93:9c:93:a6:28:c7:de:53:bb:0a:ff:e7:a0:
                    fd:12:68:5e:25:0c:7f:4c:ae:e2:64:6e:a4:87:c2:
                    02:74:ad:28:58:ce:3f:ed:07:11:8f:03:cc:06:a0:
                    72:fb:de:4a:a8:d1:ab:17:fd:2c:ab:06:77:a3:f7:
                    bc:8f:be:ce:c8:bd:3c:df:01:a6:be:5b:6d:40:0a:
                    9c:7c:08:94:f7:a5:f9:b7:8c:e8:3e:b6:85:da:17:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:0F:0D:74:E8:09:71:D9:ED:EA:27:62:3F:46:FC:B5:52:72:D9
            X509v3 Authority Key Identifier:
                keyid:8A:59:0D:26:0B:5B:E3:ED:54:76:8E:29:70:80:73:67:09:CA:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A590D260B5BE3ED54768E297080736709CACE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/2/8A590D260B5BE3ED54768E297080736709CACE0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:5d:03:8f:9f:ac:e4:20:76:f5:ab:c8:ce:d9:79:62:35:6f:
         8b:15:ed:2f:c5:f2:c7:ab:36:93:07:2b:d3:1f:5c:8d:3e:93:
         8a:7e:f6:4d:9e:5d:13:15:62:35:76:4c:8f:47:ac:24:97:e7:
         b6:8d:5b:90:25:62:fd:66:c9:b7:a1:22:c5:53:7b:71:26:7f:
         e6:86:e6:fa:6f:1b:2b:f5:3a:48:3e:ea:a9:78:bb:e7:7f:fb:
         a0:33:9e:93:b1:75:5f:b7:f9:60:80:e8:05:00:8f:90:ed:48:
         39:9d:be:46:9e:4e:ca:76:b6:7f:bc:f1:0d:3c:f8:4c:80:17:
         b3:aa:d4:27:8c:e8:d1:5e:3a:36:94:f9:7d:23:74:ea:e9:9e:
         b2:a3:f6:f8:46:1c:d9:64:62:a0:32:59:ba:b4:33:3f:46:a5:
         58:f8:50:cc:75:ca:0c:63:79:21:55:ca:08:a9:1b:b7:c8:ac:
         f1:5e:48:ce:9c:ec:2e:f4:7e:d8:50:02:3a:3e:66:81:50:55:
         2c:24:08:79:e2:ae:f7:11:9f:85:ad:55:47:7a:8e:d0:9f:05:
         76:a5:91:8a:fb:b8:c8:ff:2a:8d:60:0a:d3:b4:d1:12:89:b7:
         48:ad:3e:da:0d:ad:57:36:a2:c9:d5:48:68:c4:75:3f:77:c0:
         ed:15:7a:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCgqbMvUMTxF3suTutfxvl3sMDJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE1OTBEMjYwQjVCRTNFRDU0NzY4RTI5NzA4MDczNjcw
OUNBQ0UwRDAeFw0yNjEwMzExODExMjNaFw0yNjExMDEyMTA1MjNaMDMxMTAvBgNV
BAMTKDU1QzMwRjBENzRFODA5NzFEOUVERUEyNzYyM0Y0NkZDQjU1MjcyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIR+4lXXB3F1WtwYm6IxGdRXFn
ncT2PLAC0i/YSuKHulH4ylCljvjd/+1ILVkxv0Rfm3U0ny4x/WReHZf5/AHHdIdm
u6nU3cjWKeo2+Ei8WIKj1C7163skdrF5e8JEozSnLkRW8zuq8o2P38A3OZzv51G8
+fQMcAvX/nuHeNIGGFHyidvP5N9UDTL7EPaKoB6ZKzV8WovPvW+OrIWPwWNT2jc/
HXpVk5yTpijH3lO7Cv/noP0SaF4lDH9MruJkbqSHwgJ0rShYzj/tBxGPA8wGoHL7
3kqo0asX/SyrBnej97yPvs7IvTzfAaa+W21ACpx8CJT3pfm3jOg+toXaF4+5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVcMPDXToCXHZ7eonYj9G/LVSctkwHwYDVR0j
BBgwFoAUilkNJgtb4+1Udo4pcIBzZwnKzg0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHJFaHllN0VQSlRvU3duNVlQdUZVaFBNNzIzNjY2OXNnbUJFSmpqdGl5
UzYvMi84QTU5MEQyNjBCNUJFM0VENTQ3NjhFMjk3MDgwNzM2NzA5Q0FDRTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBNTkwRDI2MEI1QkUzRUQ1
NDc2OEUyOTcwODA3MzY3MDlDQUNFMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NHJFaHllN0VQSlRvU3duNVlQdUZVaFBNNzIzNjY2OXNnbUJFSmpqdGl5UzYvMi84
QTU5MEQyNjBCNUJFM0VENTQ3NjhFMjk3MDgwNzM2NzA5Q0FDRTBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyF0Dj5+s5CB29avIztl5YjVvixXtL8Xyx6s2kwcr0x9cjT6Tin72TZ5dExVi
NXZMj0esJJfnto1bkCVi/WbJt6EixVN7cSZ/5obm+m8bK/U6SD7qqXi753/7oDOe
k7F1X7f5YIDoBQCPkO1IOZ2+Rp5Oyna2f7zxDTz4TIAXs6rUJ4zo0V46NpT5fSN0
6umesqP2+EYc2WRioDJZurQzP0alWPhQzHXKDGN5IVXKCKkbt8is8V5IzpzsLvR+
2FACOj5mgVBVLCQIeeKu9xGfha1VR3qO0J8FdqWRivu4yP8qjWAK07TREom3SK0+
2g2tVzaiydVIaMR1P3fA7RV6Iw==
-----END CERTIFICATE-----