Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
File:                     1A5050EEA434138710D1F922949F1181F26D44A5.mft (raw, json)
Hash identifier:          GMED9UcQwt9QhUYgUE4aiX/j3LcJH2tIDcMn+SbFpsc=
Subject key identifier:   CA:7E:66:C9:60:1A:85:CF:BF:A6:AD:9A:9C:74:DD:FF:97:0F:40:34
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       46493601589B0C514E6355AD3AFE05F49483437E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
Manifest number:          022D
Signing time:             Tue 27 Oct 2026 16:39:48 +0000
Manifest this update:     Tue 27 Oct 2026 16:34:48 +0000
Manifest next update:     Wed 28 Oct 2026 17:46:48 +0000
Files and hashes:         1: 32342e3135322e3130352e302f32342d3332203d3e20323730353139.roa (hash: hF5udj0GP+KTr/JiORL3cWwD4usf2lgpjfO75siUeHU=)
                          2: 1A5050EEA434138710D1F922949F1181F26D44A5.crl (hash: Aovxs+GWJ7uQUdwrT7FzrC8o2fX9fOfeGfAeGrj6xoM=)
                          3: 32342e3135322e3130342e302f32342d3332203d3e20323730353139.roa (hash: 8RWhtz/DvUHUyto1x/M7tlmtQhM2lx2RuxT1VIidkGg=)
                          4: 323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (hash: M+1kYavQG3CBR07rzUbS1KY5vtDlvMScx1R1CzbUc44=)
                          5: 32342e3135322e3130372e302f32342d3332203d3e20323730353139.roa (hash: 9iJ/BopfkqOyx2cGSuTEKNkT4KrqphHr8z7lSZ9fbso=)
                          6: 32342e3135322e3130362e302f32342d3332203d3e20323730353139.roa (hash: ICVgOy7H4wh/fmI+xzFuNSZ+55xAvefGdjnLeS2RXag=)
                          7: 3230302e33362e3139362e302f32322d3332203d3e20323730353139.roa (hash: My+c2ZFaVg6htxdWQNdutohQqxixE90+QHzKTkYYobs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:49:36:01:58:9b:0c:51:4e:63:55:ad:3a:fe:05:f4:94:83:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Oct 27 16:34:48 2026 GMT
            Not After : Oct 28 17:46:48 2026 GMT
        Subject: CN=CA7E66C9601A85CFBFA6AD9A9C74DDFF970F4034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:4a:25:c4:e7:2f:5c:b0:f4:d2:b0:86:59:
                    a5:eb:de:fa:1f:ee:93:d6:53:86:93:71:27:cd:fd:
                    5e:18:ff:fe:41:12:6b:f5:25:6a:0a:6c:76:13:ae:
                    5a:8e:04:ed:c4:c2:9b:3a:a6:24:96:a4:b0:3c:e5:
                    6a:3f:e6:11:e9:76:96:80:fd:69:96:e6:94:32:36:
                    39:40:f3:f0:d8:b5:71:1a:cb:bb:56:4d:23:36:13:
                    f7:fa:9a:e8:96:a9:23:3f:30:9a:3e:2c:4a:8a:34:
                    57:26:98:8b:36:d7:2f:43:70:2f:3e:4d:05:1a:ab:
                    56:c7:00:9e:ba:20:e4:a2:dd:b7:51:6b:c1:0f:33:
                    46:f1:0a:fe:c3:67:d7:f6:ad:10:3e:5c:b9:40:33:
                    32:4e:ff:81:fd:0f:27:20:98:ba:08:2a:06:5e:68:
                    57:40:e4:89:9e:c8:43:19:e7:45:ef:7a:a9:2f:4a:
                    85:63:fb:d0:47:f3:f7:50:88:da:35:cd:62:e1:a5:
                    b8:b8:5d:a5:bb:9b:ba:1b:d4:21:a3:a6:c8:ee:fc:
                    2c:51:ab:9b:b9:38:6f:b5:87:92:ef:da:81:fc:0d:
                    c3:de:8b:e7:51:0a:41:16:c9:96:4c:54:a9:04:e7:
                    59:31:f6:9b:ae:17:b8:90:a2:a8:f5:e2:68:ab:5c:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7E:66:C9:60:1A:85:CF:BF:A6:AD:9A:9C:74:DD:FF:97:0F:40:34
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:c8:93:c1:f7:45:02:d3:75:2e:0b:e2:6a:db:98:29:31:
         f4:a1:32:0f:28:29:64:fd:a5:bb:53:fe:10:4e:46:5b:02:8e:
         c0:4e:1c:48:2c:e4:72:c1:d2:16:8e:31:dd:11:36:1d:2b:1f:
         12:41:32:bb:2b:35:63:1a:bd:e3:7f:d9:4e:12:84:b5:c7:f7:
         0c:6c:f6:85:ba:f2:8a:2a:4e:eb:eb:41:8a:4d:d4:00:79:74:
         7a:1c:7c:cd:29:4b:bd:72:f7:01:b3:d9:92:5e:05:12:72:d5:
         76:98:1b:19:44:dd:86:4b:69:49:3c:1d:32:d0:16:83:fe:f7:
         2c:68:af:f1:c7:c8:d8:c1:e2:43:04:26:d9:43:10:4b:72:44:
         2c:44:ce:0c:99:d3:25:01:c3:d1:2c:db:61:dd:79:ae:b5:5d:
         48:6e:ad:28:ea:b3:25:7e:0d:7f:73:cd:28:34:0a:11:10:15:
         ff:d3:1f:48:dc:a3:06:55:b3:4e:83:8f:e2:16:2b:ed:e4:40:
         98:c7:b2:79:d4:87:92:40:b4:4d:b8:06:ce:b6:f0:a1:22:bc:
         be:a7:ba:b0:a4:4d:90:db:e4:95:29:d6:00:a5:68:a0:5b:c8:
         da:24:61:03:57:d5:14:c4:ad:be:82:ec:e1:5e:08:c6:d5:74:
         11:f5:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:09:09 2026 by rpki-client