Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
File:                     84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json)
Hash identifier:          DjsGbXLillfvLGdJyfLjhqrvxoBWPRrMrl4JCQcGZsk=
Subject key identifier:   3B:CA:64:BF:D6:65:70:DB:D3:F2:D2:70:0E:E2:B2:81:B5:02:26:31
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       4D7E8C1480E9829DC485A9127FE5F01B18540C18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
Manifest number:          04EE
Signing time:             Mon 02 Nov 2026 08:50:00 +0000
Manifest this update:     Mon 02 Nov 2026 08:45:00 +0000
Manifest next update:     Tue 03 Nov 2026 11:18:00 +0000
Files and hashes:         1: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: 3bU8saPGNaxb8NlHC4Rgwr73pT+NeK7FEI3q8+Gm8KE=)
                          2: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: JQkS3aVjRYIUrDrcqdT2yRUNgeAwc+sxOIedWxAMUJI=)
                          3: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: sELrt5SQrS9HNcS+TfDDUn0mn57V0TQF+1FQir+TvdI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
                          rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 11:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7e:8c:14:80:e9:82:9d:c4:85:a9:12:7f:e5:f0:1b:18:54:0c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Nov  2 08:45:00 2026 GMT
            Not After : Nov  3 11:18:00 2026 GMT
        Subject: CN=3BCA64BFD66570DBD3F2D2700EE2B281B5022631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:15:bd:6f:08:fa:73:d6:84:99:a8:46:77:
                    e9:5d:af:1f:3e:df:40:d8:35:7c:c1:3e:cb:95:72:
                    61:0b:ac:c0:1b:81:cd:4c:f3:d8:db:f3:e4:09:76:
                    fb:fd:34:76:c9:9b:29:55:a6:09:28:d3:70:e5:af:
                    1a:59:d6:7d:35:d3:ce:4a:a1:23:21:90:72:a5:b6:
                    2b:00:fe:06:09:1f:18:06:48:34:b5:05:57:97:1b:
                    81:e5:40:68:16:1a:c7:09:38:86:e8:79:04:50:fe:
                    e1:7d:1b:cb:c7:0f:86:51:c6:59:e4:90:3a:35:c4:
                    01:a3:7f:11:24:f9:4b:a7:35:33:3a:07:80:d0:55:
                    bc:ee:02:8c:48:74:cc:7f:b2:fd:f0:e2:20:89:3b:
                    fa:4c:86:7b:aa:dd:69:8c:a8:d1:97:b3:b5:bc:5d:
                    8e:0f:85:e5:f1:31:74:08:15:ad:22:e0:17:c4:dc:
                    0d:f5:09:f0:82:a3:e3:48:95:7d:ef:7a:71:b7:6e:
                    81:6b:8b:ee:a0:db:d5:2b:8c:eb:d8:2d:f8:bf:3e:
                    b8:21:87:34:ad:0c:67:ef:35:c8:5d:fc:2c:60:0a:
                    71:a4:a5:e8:fa:cf:92:9d:65:85:a0:b3:4b:a3:5a:
                    1e:0d:6a:f2:f6:19:9f:fb:66:24:3a:d7:3c:f7:78:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:64:BF:D6:65:70:DB:D3:F2:D2:70:0E:E2:B2:81:B5:02:26:31
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:68:aa:76:d6:fb:c5:5c:b4:8c:5e:3a:7c:a4:36:69:ac:
         9b:d9:f5:88:b3:5d:4c:c8:61:0e:46:a7:ff:c2:0c:4e:7e:34:
         51:a8:be:b8:8c:b9:f9:df:9b:90:46:b9:8e:18:bf:d1:74:fb:
         04:eb:e2:87:16:ee:ee:72:d7:da:b1:df:7a:50:a3:4a:28:a9:
         89:6f:d5:dc:63:af:f6:87:3a:00:d2:db:13:5e:38:8f:f7:6e:
         fa:f1:7c:53:7f:34:74:ec:63:34:cc:38:51:16:10:bd:52:f6:
         56:be:81:bd:e9:39:20:5d:c0:f0:35:e4:df:7c:d7:db:33:72:
         3f:4a:18:0a:d8:69:28:7a:74:47:72:7a:65:af:1c:77:a8:0e:
         99:cd:d7:79:a7:7d:fa:c6:8c:ea:41:93:4a:8a:f3:54:72:da:
         bb:4a:8e:7d:40:f7:53:e7:3f:79:f0:72:48:2c:ee:04:72:39:
         b3:b5:e5:f2:f8:0e:b1:5a:68:9a:b5:a1:91:3f:a4:63:30:a7:
         4f:29:29:10:8c:c9:e9:1f:7e:e7:7f:bf:89:23:a4:4c:6f:2f:
         64:cf:9d:1c:af:31:fe:b0:04:2b:9e:f9:46:dd:e9:ca:0c:d4:
         d1:a4:45:1e:54:f7:97:ee:4e:3c:d1:a5:f3:e7:57:4c:40:bf:
         0e:62:f6:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTX6MFIDpgp3EhakSf+XwGxhUDBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0
QTQ0MEY5MTAeFw0yNjExMDIwODQ1MDBaFw0yNjExMDMxMTE4MDBaMDMxMTAvBgNV
BAMTKDNCQ0E2NEJGRDY2NTcwREJEM0YyRDI3MDBFRTJCMjgxQjUwMjI2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDBW9bwj6c9aEmahGd+ldrx8+
30DYNXzBPsuVcmELrMAbgc1M89jb8+QJdvv9NHbJmylVpgko03DlrxpZ1n01085K
oSMhkHKltisA/gYJHxgGSDS1BVeXG4HlQGgWGscJOIboeQRQ/uF9G8vHD4ZRxlnk
kDo1xAGjfxEk+UunNTM6B4DQVbzuAoxIdMx/sv3w4iCJO/pMhnuq3WmMqNGXs7W8
XY4PheXxMXQIFa0i4BfE3A31CfCCo+NIlX3venG3boFri+6g29UrjOvYLfi/Prgh
hzStDGfvNchd/CxgCnGkpej6z5KdZYWgs0ujWh4NavL2GZ/7ZiQ61zz3eHfpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUO8pkv9ZlcNvT8tJwDuKygbUCJjEwHwYDVR0j
BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55
RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz
OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84
NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnqFoqnbW+8VctIxeOnykNmmsm9n1iLNdTMhhDkan/8IMTn40Uai+uIy5+d+b
kEa5jhi/0XT7BOvihxbu7nLX2rHfelCjSiipiW/V3GOv9oc6ANLbE144j/du+vF8
U380dOxjNMw4URYQvVL2Vr6Bvek5IF3A8DXk33zX2zNyP0oYCthpKHp0R3J6Za8c
d6gOmc3Xead9+saM6kGTSorzVHLau0qOfUD3U+c/efBySCzuBHI5s7Xl8vgOsVpo
mrWhkT+kYzCnTykpEIzJ6R9+53+/iSOkTG8vZM+dHK8x/rAEK575Rt3pygzU0aRF
HlT3l+5OPNGl8+dXTEC/DmL2xQ==
-----END CERTIFICATE-----