Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
File:                     84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json)
Hash identifier:          XZ3Tgw+R6oP53dE8KSi2PVKU6Q+42JrRONUVEkHpGQw=
Subject key identifier:   EE:B5:AA:B9:07:53:02:68:86:CB:84:36:B2:39:CA:25:E3:25:0D:35
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       2E4BAE4EDF8335B922AF8F14448B52DE10370397
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
Manifest number:          048F
Signing time:             Sat 22 Aug 2026 17:30:00 +0000
Manifest this update:     Sat 22 Aug 2026 17:25:00 +0000
Manifest next update:     Sun 23 Aug 2026 20:52:00 +0000
Files and hashes:         1: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: 3bU8saPGNaxb8NlHC4Rgwr73pT+NeK7FEI3q8+Gm8KE=)
                          2: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: JQkS3aVjRYIUrDrcqdT2yRUNgeAwc+sxOIedWxAMUJI=)
                          3: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: CYepp/U1q1hrK4aT71ORH7eRsJMR4JkN/MA/kQV17/4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
                          rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4b:ae:4e:df:83:35:b9:22:af:8f:14:44:8b:52:de:10:37:03:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Aug 22 17:25:00 2026 GMT
            Not After : Aug 23 20:52:00 2026 GMT
        Subject: CN=EEB5AAB90753026886CB8436B239CA25E3250D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:e0:63:0b:57:33:12:40:6a:3e:28:70:af:
                    39:88:dc:e2:2a:16:4c:ce:43:62:11:0a:31:f4:58:
                    b9:5f:26:91:b5:05:66:9e:06:63:5a:b7:b4:f4:22:
                    36:2a:b7:b3:a4:b5:7d:73:85:f4:01:de:41:0a:a0:
                    9a:86:e4:94:c1:17:3a:19:92:d9:c6:88:31:48:9f:
                    54:d5:7d:44:1e:8e:db:ff:6f:45:ad:11:f7:fa:30:
                    bf:78:ce:73:e9:85:7e:50:62:64:36:e8:4c:4d:c8:
                    4c:79:91:b8:1c:e2:1f:c5:65:25:e4:a7:d1:2a:f9:
                    3e:15:7f:33:2f:1b:60:73:b5:87:64:98:f8:52:ac:
                    ac:55:44:80:83:6b:20:19:64:44:1c:0d:4a:1e:93:
                    ac:39:9c:1b:49:83:10:60:b0:a2:88:20:49:00:52:
                    04:ce:d8:16:42:32:31:ca:d2:7a:d4:09:8f:b0:de:
                    aa:f3:29:d1:0f:43:13:af:71:59:ae:62:8d:e6:b6:
                    2b:44:b3:31:44:8a:2e:18:e6:76:57:0f:69:20:5c:
                    13:b9:dc:b5:c4:c6:84:95:2d:d9:1e:e3:9d:da:ca:
                    3b:7b:36:06:c4:98:ff:69:eb:e4:fc:47:42:53:36:
                    64:d1:73:e2:90:c9:22:52:6d:5c:06:fc:54:d9:ec:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B5:AA:B9:07:53:02:68:86:CB:84:36:B2:39:CA:25:E3:25:0D:35
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:9b:50:00:6f:8d:6b:31:af:21:76:c5:4b:91:7a:8d:c7:
         2f:65:b0:46:9b:0a:5a:83:2c:37:c1:9c:56:2f:0b:45:48:6f:
         22:ad:95:57:37:b3:af:a3:4e:76:ae:f4:d2:71:2e:51:23:1c:
         6f:20:5e:66:be:9a:38:aa:c4:99:fd:14:ad:9f:9e:65:3f:23:
         d6:7d:6f:46:99:cc:22:b9:dd:de:79:6f:f7:f7:ca:a5:42:d4:
         ce:67:84:dd:a8:d3:1e:e5:36:78:1e:ae:88:07:03:7a:94:c2:
         0d:8d:c1:b3:a9:a6:71:d1:8e:b1:cb:80:f5:c7:7f:f7:d8:c5:
         81:01:f2:d4:28:99:02:43:e8:75:4d:bb:f4:b5:5b:03:f3:8d:
         73:e2:4e:f7:f5:85:33:86:15:e3:46:05:33:51:42:7a:28:81:
         26:c8:03:b5:dd:d5:99:7e:30:01:c7:f8:90:a1:6a:37:da:41:
         a9:50:54:07:27:4e:d3:9b:34:36:2d:1a:8c:2e:16:03:08:ba:
         39:51:48:94:15:75:5c:68:1b:84:5a:9b:89:62:8c:8a:37:42:
         07:33:64:83:9a:dd:ef:8b:84:4c:f5:1a:b9:b5:59:7e:5a:76:
         8e:6f:52:e9:ec:03:fe:fa:15:9d:b8:e0:9c:b6:c3:67:ac:a3:
         1d:46:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----