Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
File:                     9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft (raw, json)
Hash identifier:          YuBb3FCi8F8xatZOdpmYID9iESLoCm9M+5+iw7d4O24=
Subject key identifier:   39:3E:C6:9E:3E:33:55:A8:6F:C8:5F:D8:00:20:2A:4C:53:CB:17:64
Authority key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
Certificate issuer:       /CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
Certificate serial:       74ABB90FA98F38D10D659BA87FC05DEA13521016
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
Manifest number:          0488
Signing time:             Mon 24 Aug 2026 00:23:10 +0000
Manifest this update:     Mon 24 Aug 2026 00:18:10 +0000
Manifest next update:     Tue 25 Aug 2026 03:50:10 +0000
Files and hashes:         1: 34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (hash: rwNV2Ulfd4Vad/l+ejClrnvnI1sAET5fICE40mt6p4Y=)
                          2: 323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (hash: Mt/9OzLFKzrWHsXUu8GeZATCuyz5l8+TGv1fTYbFyaE=)
                          3: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl (hash: kATKkSrR4cycA3/AZCf58WDWEjkq2D9gdY9B74qFvzU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl
                          rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ab:b9:0f:a9:8f:38:d1:0d:65:9b:a8:7f:c0:5d:ea:13:52:10:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
        Validity
            Not Before: Aug 24 00:18:10 2026 GMT
            Not After : Aug 25 03:50:10 2026 GMT
        Subject: CN=393EC69E3E3355A86FC85FD800202A4C53CB1764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:0c:db:6f:e7:f7:44:06:b8:b0:15:74:f6:
                    e4:4e:ff:d2:10:7a:19:c7:c3:47:be:9c:53:e3:a8:
                    77:82:0a:e7:f7:e0:11:aa:55:5b:a7:e7:7c:a8:ad:
                    d4:c5:85:19:5a:68:cf:f1:e8:e3:bd:21:bd:49:36:
                    ec:5e:e7:b0:1c:d2:22:27:45:3e:df:80:7a:28:71:
                    11:4a:f1:e7:87:f1:e9:b1:08:d2:dc:b5:67:f4:4b:
                    7a:e9:6e:2e:1a:07:99:05:64:12:3b:41:fd:b0:16:
                    5b:28:2a:fd:5a:cf:35:f3:43:7e:7b:e3:7c:a9:c1:
                    dd:e5:f7:90:b3:cc:7b:b6:6f:f7:a9:dd:1b:8c:f6:
                    2f:a0:67:ff:53:fc:0c:89:d9:f0:00:8c:6c:55:0c:
                    66:ef:27:20:a6:fa:76:4d:36:d6:06:13:8a:8f:0c:
                    55:82:46:d5:60:e4:59:fd:a5:00:53:8c:a2:50:3e:
                    1d:e2:24:77:77:00:b0:8e:d8:3c:46:1d:6f:c9:8d:
                    bd:27:c4:63:bf:a2:a7:e4:9f:16:65:1e:1c:32:7c:
                    a9:99:69:3f:2e:71:e6:25:a2:87:50:c9:c9:af:2b:
                    47:52:d2:c5:03:fa:50:16:e4:40:93:44:f8:1b:8b:
                    15:0e:49:00:d2:55:0b:16:cc:e6:0f:28:b0:ab:09:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:C6:9E:3E:33:55:A8:6F:C8:5F:D8:00:20:2A:4C:53:CB:17:64
            X509v3 Authority Key Identifier:
                keyid:9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:a8:4d:95:77:1a:95:42:e9:39:25:a2:a3:6a:25:03:fa:
         e8:78:33:58:5c:32:8c:cd:56:3f:95:82:3b:e5:9d:2c:88:19:
         a8:a0:d9:41:33:05:7b:e6:98:a7:a4:04:6f:30:e1:7e:c4:46:
         6e:3b:db:b9:f0:37:20:67:a7:8d:d9:d3:47:3e:b0:03:fb:14:
         d7:bd:b3:b9:d1:01:a7:af:f2:d8:31:4a:7d:15:f8:d2:ed:73:
         bb:2e:97:6e:d4:e6:ba:94:74:a5:73:4e:ce:f2:9c:fb:ca:42:
         7d:8a:42:74:47:71:ad:d7:a6:02:6b:38:3a:f8:23:da:a7:bb:
         6a:ca:aa:37:51:d8:11:9f:07:d8:5b:24:a5:f7:58:ec:8c:58:
         18:a2:b1:a1:9d:9a:91:7c:35:67:f7:ee:fe:df:fe:75:fc:74:
         28:d5:9c:d5:bd:c3:10:69:3a:5a:25:0e:f6:0a:14:e7:61:75:
         83:38:b1:59:b2:2e:82:b0:d6:86:27:5e:97:10:32:0e:dc:42:
         db:5f:6d:41:d9:1a:d5:14:69:e5:83:85:4b:08:80:72:ac:a9:
         3d:d7:52:75:6d:ad:54:02:b0:e7:20:14:5b:bc:0e:ab:fc:87:
         5f:ff:82:d4:f0:fb:9c:9a:a9:db:04:5f:5b:f7:26:31:cc:02:
         4e:98:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:44:17 2026 by rpki-client