Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.mft
File:                     20CEBB610A7B39805C4B53C8264EC742AD6E72F2.mft (raw, json)
Hash identifier:          GHGMmNnnZYhsSn4stnyJvBKeXUdbQZ4TsKFXEpvsSbk=
Subject key identifier:   D8:E6:70:00:CC:98:F6:93:0D:5A:FE:89:DB:17:82:51:2D:0C:23:50
Authority key identifier: 20:CE:BB:61:0A:7B:39:80:5C:4B:53:C8:26:4E:C7:42:AD:6E:72:F2
Certificate issuer:       /CN=20CEBB610A7B39805C4B53C8264EC742AD6E72F2
Certificate serial:       1431237E6C901EBE1C247EEF60A6634554E35E43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.mft
Manifest number:          17
Signing time:             Sat 31 Oct 2026 21:57:28 +0000
Manifest this update:     Sat 31 Oct 2026 21:52:28 +0000
Manifest next update:     Mon 02 Nov 2026 01:24:28 +0000
Files and hashes:         1: 34352e3137362e33362e302f32322d3234203d3e20323638393638.roa (hash: 4O1O1YsJUrjHEvgaZOWX7MLRcfmIxvjE0Nlajp3iRHM=)
                          2: 20CEBB610A7B39805C4B53C8264EC742AD6E72F2.crl (hash: A+B50g23d8QTcGEjamjwlh/xw/u34DnCuE6Vwi/tmwU=)
                          3: 323830343a356436303a3a2f33322d3438203d3e20323638393638.roa (hash: LA68eSYF8f+/+EQd/lLyPpVqxc/zVs/gvqXsT4ul0iM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.crl
                          rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:31:23:7e:6c:90:1e:be:1c:24:7e:ef:60:a6:63:45:54:e3:5e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CEBB610A7B39805C4B53C8264EC742AD6E72F2
        Validity
            Not Before: Oct 31 21:52:28 2026 GMT
            Not After : Nov  2 01:24:28 2026 GMT
        Subject: CN=D8E67000CC98F6930D5AFE89DB1782512D0C2350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:b3:f3:49:98:64:a6:de:d1:b0:02:ee:7f:
                    69:d7:19:11:8c:c0:1a:e6:55:66:14:1e:1a:b5:ae:
                    84:c1:83:fe:50:bb:a5:ee:aa:30:d6:5a:2d:54:a0:
                    43:95:c3:be:cb:ef:e0:36:74:33:7e:0e:91:77:94:
                    2c:67:c9:47:ac:35:29:ea:af:9c:75:aa:a3:f4:b5:
                    6c:cc:ba:11:7f:f7:64:03:db:5b:27:9d:cd:ae:b1:
                    b4:ab:9d:ca:39:17:e2:52:9a:31:89:92:de:4d:d4:
                    47:bb:b5:96:96:c7:27:48:aa:14:be:1a:af:b9:19:
                    95:09:e0:a0:6c:e0:fd:9b:af:03:cb:0c:54:09:20:
                    15:15:a0:54:65:08:1e:bf:26:ea:43:cc:8e:d5:e8:
                    37:75:c6:19:11:62:05:9c:5f:a2:6a:07:03:7a:b8:
                    cd:cd:74:e2:c9:c3:8f:c1:37:04:0e:e3:ba:bb:51:
                    86:84:1e:3e:e1:76:41:c2:75:5d:2a:5b:28:2f:3c:
                    c2:ef:ff:e7:c7:96:1f:ea:a3:74:49:d6:ac:66:82:
                    10:b1:36:81:04:1a:85:40:a3:91:e5:22:e2:5e:3f:
                    97:85:28:95:f2:7c:76:88:c5:22:41:87:a5:ca:57:
                    3c:4d:a6:b8:25:de:45:7c:72:e6:18:12:32:48:c5:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E6:70:00:CC:98:F6:93:0D:5A:FE:89:DB:17:82:51:2D:0C:23:50
            X509v3 Authority Key Identifier:
                keyid:20:CE:BB:61:0A:7B:39:80:5C:4B:53:C8:26:4E:C7:42:AD:6E:72:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/20CEBB610A7B39805C4B53C8264EC742AD6E72F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:52:0a:50:43:23:53:e3:58:fb:69:9c:ff:64:51:1f:fd:
         ef:3e:9f:e0:fc:2a:ab:50:c8:fc:4f:43:9e:1b:b7:56:cc:38:
         1a:85:a5:c3:2a:2a:ee:7d:70:c6:48:0f:5e:be:b2:c2:a6:9e:
         c4:c0:14:ce:20:1b:2c:72:ef:be:1a:30:40:53:1f:e3:64:1b:
         01:e0:6d:65:03:1c:e2:4b:35:a3:a7:56:a0:9a:24:23:27:c0:
         fd:84:d5:ca:47:65:25:40:0c:b7:7c:4d:96:69:d4:32:b1:58:
         04:8f:cf:71:fe:bc:0e:84:cf:9c:a4:0b:60:07:b6:a6:5d:a1:
         83:f7:dd:78:89:7a:d0:99:45:79:75:03:6e:2f:25:d7:92:b6:
         cd:53:e3:de:43:16:ec:62:5d:86:60:01:f4:25:b2:6b:db:86:
         ef:3b:0f:8c:5d:8b:3c:63:7d:14:e8:d2:1e:f4:09:8b:45:31:
         1f:0b:37:94:14:49:8c:43:eb:a0:ab:ab:fe:e3:e1:ab:45:ee:
         5a:b9:04:a6:b9:e0:57:22:fa:18:80:5d:54:46:27:c7:5d:1d:
         ff:c3:e0:94:a6:98:c7:f7:fc:b1:48:6f:7a:26:9f:fc:57:4c:
         75:97:b8:78:1e:47:45:95:ad:e5:6a:7c:81:be:a7:af:8a:ae:
         c2:fe:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:34:51 2026 by rpki-client