Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft
File:                     C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft (raw, json)
Hash identifier:          pMTIkjRgWNLY2EM4os2Ad+eGcwGUYpmOsSjSMLAL0Yw=
Subject key identifier:   90:98:F9:B8:4F:02:96:31:67:EE:CA:A8:84:EC:42:90:03:BF:F9:5B
Authority key identifier: C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55
Certificate issuer:       /CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
Certificate serial:       2A56E35A115AEC6AB9F48ADA7567632E0903E45D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft
Manifest number:          CA
Signing time:             Sat 31 Oct 2026 01:33:09 +0000
Manifest this update:     Sat 31 Oct 2026 01:28:09 +0000
Manifest next update:     Sun 01 Nov 2026 05:23:09 +0000
Files and hashes:         1: 34352e3137302e37342e302f32342d3234203d3e20323638313533.roa (hash: D0b2FO0G64xb+UnTGHN1YUtwLUHyuZEdgQZTPxB3h9Q=)
                          2: 34352e3137302e37352e302f32342d3234203d3e20323638313533.roa (hash: KaUZHNX0/Rf9VZu0nEkkwwMd49rcJnsKXO3dfEwzaCE=)
                          3: 34352e3137302e37342e302f32332d3233203d3e20323638313533.roa (hash: fhfOOvbNUX1XIXMfl1Lvr6B82hxd6SfjqpCeMrerlFM=)
                          4: 34352e3137302e37322e302f32332d3233203d3e20323638313533.roa (hash: 5HZqJ25nuz07p9KOEpp99AxQIsG7ZaqDd/6MoLJ+XqU=)
                          5: 34352e3137302e37322e302f32322d3232203d3e20323638313533.roa (hash: no6Kq0r1AJw2ubs6veyXrXcjT0fnTYjKMef2xOxyU6I=)
                          6: 323830343a353864383a3a2f33332d3333203d3e20323638313533.roa (hash: eldjhsvn22frlGhDJii8VBffrw3y/34bFHh4D1Uw4nU=)
                          7: 34352e3137302e37332e302f32342d3234203d3e20323638313533.roa (hash: 6b5zf0Q3VtIeSmaGM4hINCy11beDRCOlik5QVMWx6bc=)
                          8: 323830343a353864383a3a2f33322d3332203d3e20323638313533.roa (hash: gYBT9DzrEo11UOS+r9pq9W+zZ61gfiLdq/y+Q8az7wQ=)
                          9: C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl (hash: ow7kGcYOecdAqIDOziBJ/OR3hCcqJbbJo3rfoXnaqsE=)
                          10: 323830343a353864383a383030303a3a2f33332d3333203d3e20323638313533.roa (hash: +VT2C6qL389KTyJLz5VGHwAXHCEWUa77QYXxGCLTDf4=)
                          11: 34352e3137302e37322e302f32342d3234203d3e20323638313533.roa (hash: hvOg+ymNw5CA8wiHNBrinl+hXiGA9S7V3Xe5k2kOQCU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 05:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:56:e3:5a:11:5a:ec:6a:b9:f4:8a:da:75:67:63:2e:09:03:e4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9252AB23441CBFEC245C4915A2B1DEBF93EAD55
        Validity
            Not Before: Oct 31 01:28:09 2026 GMT
            Not After : Nov  1 05:23:09 2026 GMT
        Subject: CN=9098F9B84F02963167EECAA884EC429003BFF95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:dc:05:9f:77:7c:cc:2c:d2:7d:b3:8a:ee:
                    85:62:b5:7a:f5:6b:69:d1:d4:a6:bb:b9:89:2a:31:
                    a1:9a:e0:e8:7e:46:40:e2:a8:38:d8:3a:55:95:23:
                    88:22:47:86:3e:28:b6:34:ab:b9:40:13:90:74:62:
                    ae:af:55:f3:d6:e5:07:dd:9b:ad:b1:6a:d3:80:05:
                    c9:80:98:37:f0:3d:f0:d6:88:39:d9:04:ef:2f:99:
                    5b:0a:c9:62:eb:e6:88:a5:35:b9:c9:c9:ee:40:d1:
                    13:5b:d2:aa:3a:da:ad:48:78:f2:3b:e7:8c:00:4a:
                    cd:b8:4c:b1:00:fe:49:43:18:1d:84:52:07:d6:a8:
                    61:93:fb:3e:9b:ea:66:87:fb:1e:f5:f0:d0:dd:05:
                    60:8a:d0:ed:88:d4:d5:70:3f:70:49:e4:1c:0f:b8:
                    d3:6c:50:85:0b:bf:1f:da:eb:35:13:22:07:96:a6:
                    49:ae:f5:54:17:d7:a4:45:c3:e1:f7:84:58:5c:32:
                    cf:2b:16:6f:16:d4:a5:49:aa:2e:87:2c:d2:3e:4c:
                    22:d1:7d:28:35:13:cb:12:8e:f1:dc:f9:18:ff:c0:
                    b7:e1:cd:e6:d4:8b:ce:15:d6:41:88:22:7b:eb:0e:
                    14:84:7f:52:06:34:88:6c:a3:c8:9c:b8:ec:75:93:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:98:F9:B8:4F:02:96:31:67:EE:CA:A8:84:EC:42:90:03:BF:F9:5B
            X509v3 Authority Key Identifier:
                keyid:C9:25:2A:B2:34:41:CB:FE:C2:45:C4:91:5A:2B:1D:EB:F9:3E:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/C9252AB23441CBFEC245C4915A2B1DEBF93EAD55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8a:eb:6c:fe:52:71:f4:fe:d8:73:f1:f9:90:34:ef:73:67:
         61:9f:cb:a0:82:93:91:fd:cd:8d:97:c5:16:5a:4b:f1:d8:60:
         63:20:27:21:2f:6d:96:9a:7d:14:46:d0:0a:0e:9c:0a:48:49:
         f4:f8:2f:5d:64:cb:4a:ba:fa:62:3a:cf:21:f2:9e:fb:18:b6:
         9b:01:1e:27:c4:99:05:02:7a:87:d9:64:a9:0f:fd:20:79:d5:
         6e:ad:ef:02:d8:ea:a9:7d:87:88:8a:3e:4e:c4:56:94:e7:3e:
         96:5f:64:27:d2:d6:78:5b:23:ee:ff:f7:7d:da:92:64:13:ec:
         4e:29:b8:7b:b8:00:25:90:7d:25:e2:df:01:e9:6b:4b:42:ea:
         d9:8d:88:ec:a4:d0:0b:f9:21:90:1c:eb:61:b5:1c:94:dc:ac:
         2b:e3:07:67:e4:86:5b:6b:5a:37:48:4b:77:30:7b:01:73:fb:
         9e:14:d3:e9:e3:51:bf:9e:e4:c5:7e:78:29:60:b4:d4:20:cd:
         50:69:9f:ec:bb:79:ef:7b:dc:5a:d6:da:c1:b7:ba:d3:e7:1b:
         ac:fd:22:53:e7:f8:a2:8e:1a:0a:a7:43:52:a4:ed:91:46:3f:
         08:f5:e4:5f:9d:5a:f2:f9:dc:34:88:e5:19:4b:75:6b:ac:fb:
         b2:e8:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:51:12 2026 by rpki-client