Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
File:                     C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json)
Hash identifier:          lodk78cFwHu5Eq9L3EkKF8XLxZIQwHTo5brkTCpbUa0=
Subject key identifier:   B6:DF:D2:F5:00:F4:FE:3D:6A:30:47:9B:D2:43:CB:32:0A:5E:3B:30
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Certificate issuer:       /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial:       173FEFEA2C3E758C1858F22B8E9272DDE0C6D6FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
Manifest number:          0438
Signing time:             Sun 23 Aug 2026 11:00:48 +0000
Manifest this update:     Sun 23 Aug 2026 10:55:48 +0000
Manifest next update:     Mon 24 Aug 2026 11:49:48 +0000
Files and hashes:         1: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: IcZwwhQ2J8hWITHTr4hQGS/84f220KK3tuW6qpaJC6o=)
                          2: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: G1q3aDXg2LtQnvumA1dOUF1K4leeKhWExsaU+z9Zmvk=)
                          3: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: wOx56f6YQgWqhKq5NY01Jr6yOM6etTrPvb1dP7EPXg0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
                          rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3f:ef:ea:2c:3e:75:8c:18:58:f2:2b:8e:92:72:dd:e0:c6:d6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
        Validity
            Not Before: Aug 23 10:55:48 2026 GMT
            Not After : Aug 24 11:49:48 2026 GMT
        Subject: CN=B6DFD2F500F4FE3D6A30479BD243CB320A5E3B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:aa:49:95:d1:6e:f1:95:54:a2:75:ab:40:45:
                    5c:e0:43:fd:d9:5e:5a:a0:bc:89:d9:c4:26:90:5b:
                    c7:11:6a:97:32:10:f9:33:f5:d2:7a:89:4e:81:1f:
                    43:95:fe:11:26:e7:5d:d2:fb:db:de:40:9c:f0:9d:
                    db:07:19:16:29:0e:fd:3a:72:0d:15:ed:ff:46:eb:
                    da:5e:d2:dc:8c:9e:36:11:6c:b2:61:db:a9:0f:66:
                    1d:d4:eb:30:a7:d8:d5:35:e4:bc:ef:78:b6:51:cc:
                    3f:2b:e6:88:45:69:0f:61:b5:96:4d:a9:7d:77:3f:
                    fa:66:49:c8:9b:74:79:22:ec:28:41:d2:6e:39:51:
                    90:24:a5:5e:ab:d0:d6:57:31:02:cc:18:df:40:71:
                    44:ee:61:b0:93:c3:52:60:fe:fb:1d:fd:99:21:37:
                    fa:b6:12:c9:16:96:7f:f4:eb:e3:a4:99:5b:1b:9a:
                    12:b1:e2:45:81:86:98:1c:fd:86:74:74:7d:63:fa:
                    e4:c9:69:cb:ec:5b:04:57:88:df:fa:eb:08:61:d9:
                    cc:74:05:89:0c:59:98:3b:e1:8c:0d:ce:d8:13:8e:
                    43:7e:3b:7d:47:f5:db:79:dd:80:9a:67:46:c2:22:
                    05:43:12:6d:60:ab:9d:81:2d:e6:ed:a3:02:d3:93:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:D2:F5:00:F4:FE:3D:6A:30:47:9B:D2:43:CB:32:0A:5E:3B:30
            X509v3 Authority Key Identifier:
                keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:13:43:3b:bc:93:8e:eb:3b:de:6d:fb:b3:29:33:dd:4b:d5:
         fd:0a:75:f8:92:7c:9c:12:50:77:92:21:70:71:ba:1c:26:8f:
         99:78:89:13:2b:ce:d4:63:5b:6f:dd:93:f3:c1:f8:f2:1f:b6:
         92:3d:87:99:2f:c6:b8:48:31:24:1c:16:02:43:b8:df:fc:74:
         71:1b:41:b8:31:44:53:6b:dc:04:28:d7:0c:4e:48:f4:01:ff:
         71:72:78:1c:18:04:48:89:84:e7:88:8c:48:e8:23:49:d7:24:
         27:3a:c7:83:6c:2f:22:29:2a:3c:89:44:60:c4:b3:cd:42:19:
         e9:37:8b:bd:bd:af:ab:1b:8c:f8:9e:f1:21:2a:1c:89:0d:23:
         b1:8f:20:bc:9f:43:24:45:b9:a9:ef:81:46:51:fa:b2:8a:f4:
         d4:a0:98:e1:14:6c:0f:92:7d:68:6e:28:ae:4e:c9:97:3e:96:
         17:14:98:93:9f:8a:4e:f5:81:d5:eb:e3:db:05:7d:eb:58:99:
         3f:89:c9:9a:84:cb:d5:fc:a6:6e:1f:c2:de:1c:dc:d4:9b:b4:
         7a:cd:3b:2e:97:b1:5b:5c:fe:88:64:a4:7e:17:eb:a1:64:f2:
         4b:cd:6a:2b:1b:73:d6:26:21:f1:c3:61:77:14:b5:27:08:65:
         c3:8e:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----