Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File:                     86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier:          U3xzhTd3B491HrTJmIX5e/m8WaMsaEkF8g5VEAYFrVY=
Subject key identifier:   4D:34:49:1A:A8:54:48:38:A8:C7:B7:D6:1B:29:1C:C4:11:46:46:F4
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer:       /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial:       60C58D8335BC21DF4533F6C326AAAA7FF30FD655
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number:          04E9
Signing time:             Mon 02 Nov 2026 00:21:58 +0000
Manifest this update:     Mon 02 Nov 2026 00:16:58 +0000
Manifest next update:     Tue 03 Nov 2026 01:47:58 +0000
Files and hashes:         1: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: +jXCgtjSZmiOrkDmlcgqCPKbk53FMeOhPld8T+Rrj4E=)
                          2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: E+Ma3InLA9r1gaEmUaTbdzlPYH5q+HVx3nCFL9qtnJY=)
                          3: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: J4hurxs3ry731dFTFoMgb7xwtvyrAEt2oytAaJZIIGU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
                          rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 01:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:8d:83:35:bc:21:df:45:33:f6:c3:26:aa:aa:7f:f3:0f:d6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
        Validity
            Not Before: Nov  2 00:16:58 2026 GMT
            Not After : Nov  3 01:47:58 2026 GMT
        Subject: CN=4D34491AA8544838A8C7B7D61B291CC4114646F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:9a:94:cb:d3:ae:66:a0:0f:01:8e:d2:75:
                    f9:71:02:51:46:4d:26:ad:a0:84:bc:aa:1d:fc:52:
                    e8:d0:4d:55:38:84:1c:b6:14:d8:47:ee:b4:ec:b5:
                    1d:64:55:7b:64:5a:05:5d:44:a1:b7:14:2c:86:62:
                    67:97:5d:d7:60:b1:39:80:17:e6:3e:52:a9:7e:8f:
                    bd:69:77:25:88:61:60:55:00:fd:30:ac:1f:34:c8:
                    7d:91:fc:f0:a1:ad:31:4c:40:5f:6b:fd:84:6d:6e:
                    89:ae:5e:fc:72:03:0d:c0:c1:d5:7e:61:9a:dc:9e:
                    f8:be:66:58:33:58:e2:73:9d:b2:e5:ea:c7:e2:01:
                    ee:fb:31:c2:71:9b:b8:e2:56:f2:02:56:3f:55:2f:
                    cc:64:8b:70:40:af:c2:71:db:dd:1e:47:67:e3:7f:
                    d8:f1:e9:18:18:bb:75:d3:7e:3b:4b:a8:17:a8:9d:
                    b9:cd:0f:41:0c:e8:54:38:4c:35:fb:be:ef:10:78:
                    0c:60:fd:91:c8:ab:fc:25:b8:e9:55:22:3c:9d:39:
                    b3:1a:df:d5:6d:c3:21:19:4f:57:32:91:cb:e7:d2:
                    f6:43:37:39:66:75:6c:3f:93:bc:08:55:67:3a:7a:
                    bb:0e:b1:49:08:87:cf:fc:2c:06:8f:c9:1a:d4:13:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:34:49:1A:A8:54:48:38:A8:C7:B7:D6:1B:29:1C:C4:11:46:46:F4
            X509v3 Authority Key Identifier:
                keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:6a:40:db:f0:a4:a0:a2:26:8d:30:11:87:25:04:f5:81:
         4b:ad:e1:70:4a:39:dd:a1:a5:8d:64:d6:e8:8b:5e:bf:52:87:
         6b:d2:fb:2f:80:11:f8:ef:6c:2a:9f:94:17:c8:6e:53:53:d7:
         40:a2:cb:c0:02:0e:d1:d6:5e:82:80:d3:a7:f9:bd:92:ba:4b:
         64:5e:c7:c1:dc:2c:e9:6d:c4:fe:e9:21:a8:b7:b2:b7:8f:c4:
         05:ce:58:ad:75:10:27:d6:fa:7c:8d:ed:68:68:20:9a:a7:40:
         20:4c:17:15:eb:56:ab:58:5e:97:e1:a0:00:95:de:69:b7:bb:
         28:c9:30:17:82:5f:d6:a0:27:cc:c6:40:07:db:13:fe:7e:58:
         3d:42:35:dc:86:98:87:c8:04:22:83:9d:9e:97:ad:33:ff:6c:
         46:22:1f:d2:39:ec:c7:51:1c:50:80:23:37:e2:99:d8:03:4b:
         c0:ac:01:3c:d3:ef:6a:72:d7:e8:25:d6:c8:3e:58:79:6a:2d:
         7f:8c:ad:d8:ec:b4:92:7d:cc:43:84:6d:73:29:cf:9b:99:0b:
         4b:49:8a:73:00:79:28:bb:cc:84:b7:11:33:1b:9a:37:52:d7:
         ec:be:5f:21:25:d1:09:55:84:62:9f:a1:1a:4f:e1:0b:a4:1e:
         5d:84:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:12:58 2026 by rpki-client