Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
File:                     8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft (raw, json)
Hash identifier:          7gIIPGzXio/SV8XykiTFGxf9ES8ETdCyShUqauYB07k=
Subject key identifier:   1D:5F:72:48:68:71:D8:55:1F:BD:FA:F3:5F:80:D7:E4:B4:43:B8:B8
Authority key identifier: 8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F
Certificate issuer:       /CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
Certificate serial:       55BF88C403D89F951FB8811801B03CC9F7A11554
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
Manifest number:          011D
Signing time:             Sun 01 Nov 2026 07:36:06 +0000
Manifest this update:     Sun 01 Nov 2026 07:31:06 +0000
Manifest next update:     Mon 02 Nov 2026 08:42:06 +0000
Files and hashes:         1: 3137372e31312e3133362e302f32312d3332203d3e203533323039.roa (hash: 1yBYoxCbqyRTtwE3OTkKLoD4VPiB+/lQT8QL1rj4Mzc=)
                          2: 34352e37312e3232382e302f32322d3332203d3e20323637363234.roa (hash: ReIlrJofErIYzzsbkcSy4Wj6C6hm/QCDcbuBIkCHma8=)
                          3: 323830343a323935633a3a2f33322d3438203d3e203533323039.roa (hash: kneCxNNmz/9UoawhP8w+ZMi6p+hC6IWBLGGny5B+TMU=)
                          4: 3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa (hash: Iym5Nq5Cop0gSlyPwSBrURCecdd1L8UNHVwpC5FY0JU=)
                          5: 3136382e3139362e35362e302f32322d3234203d3e203533323039.roa (hash: klHM0IK8I1q/ns0s3I73FikH/QVlu3NwAHg2+yqUmNE=)
                          6: 8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl (hash: lM+nBw3bT8lqbz+KDdW1yYAztQ1njRj/+ti2pOSpTyA=)
                          7: 3137372e33382e32342e302f32312d3332203d3e203533323039.roa (hash: Xd/CoTVDATVrWHmbxG//m+erJ5q4WoNYXffksIVD5ZI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl
                          rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bf:88:c4:03:d8:9f:95:1f:b8:81:18:01:b0:3c:c9:f7:a1:15:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F
        Validity
            Not Before: Nov  1 07:31:06 2026 GMT
            Not After : Nov  2 08:42:06 2026 GMT
        Subject: CN=1D5F72486871D8551FBDFAF35F80D7E4B443B8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:2e:ed:cf:99:da:e6:7a:03:2b:5b:f4:37:
                    f1:c4:5a:d4:56:3f:74:db:d4:58:d3:d7:d5:37:84:
                    40:4a:47:62:cb:92:d1:e8:97:b3:da:1c:2d:ef:a9:
                    7e:eb:37:02:a7:39:99:d6:b8:ed:30:ed:10:1c:bf:
                    d1:6b:b7:5d:c8:ea:7b:a2:e1:70:55:f5:b9:c3:5c:
                    5d:3b:41:23:bf:fe:e4:1c:2c:e4:0f:00:23:97:25:
                    b5:6d:99:70:92:74:ab:cf:ed:68:d2:b7:ab:51:4e:
                    48:9e:29:52:77:0d:e4:5a:b1:b6:6f:ec:55:46:5b:
                    c3:91:c6:32:cf:35:41:6f:87:b4:cb:0e:1b:f3:8a:
                    04:37:b7:55:43:54:90:b8:66:c2:3b:4c:f2:b3:6a:
                    bf:89:8b:36:f5:7c:e2:8a:61:7d:c1:54:d7:80:66:
                    e8:2e:4e:87:f0:48:42:08:47:78:41:27:0d:62:97:
                    ae:80:18:9f:69:02:b4:13:31:5d:2a:b2:24:9b:98:
                    ac:c8:48:7b:0e:19:0b:cc:27:57:60:d2:f6:5d:a0:
                    9e:0c:33:0b:15:5e:34:a2:1a:2a:e6:63:fd:8b:76:
                    3b:ee:bc:e4:cc:7b:f8:95:82:9a:be:dd:42:19:bb:
                    93:3e:2f:1b:a6:0b:d3:04:30:f4:13:ae:8b:d8:b0:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5F:72:48:68:71:D8:55:1F:BD:FA:F3:5F:80:D7:E4:B4:43:B8:B8
            X509v3 Authority Key Identifier:
                keyid:8B:2C:1E:FA:A9:30:40:51:7E:A3:D0:9D:1C:F4:DD:C5:3B:EE:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/8B2C1EFAA93040517EA3D09D1CF4DDC53BEEF97F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:f3:88:94:41:96:83:30:0c:3a:b5:61:cc:b1:2e:56:60:
         46:dd:1a:74:13:ed:ed:cb:e3:86:6c:92:d6:3e:3f:0b:6b:cf:
         72:ee:50:bc:49:f7:b4:fe:c9:21:94:2c:58:c8:b3:93:04:10:
         16:b8:8a:bf:8d:cd:7b:4e:f3:61:24:bd:6c:bd:23:50:eb:4e:
         91:e7:c2:f1:4e:e8:c1:62:96:c2:b9:3f:8b:28:90:48:53:37:
         46:6a:c8:d5:34:1d:39:dd:30:35:6e:9b:17:53:11:a8:66:d2:
         6f:07:28:8e:66:8b:8f:83:f7:35:41:ac:d4:d0:ff:d5:b6:3d:
         b8:ab:5b:c9:91:10:6d:9e:66:7e:6f:87:1b:93:1c:be:76:3a:
         eb:52:7d:86:00:ec:00:4c:76:10:ea:64:26:de:6a:c6:ea:83:
         8f:cd:fb:a8:90:bc:57:90:49:a8:e7:c1:0c:82:49:7d:58:a8:
         47:2b:4f:e2:00:c8:04:e4:67:39:f1:23:91:2f:4d:17:74:5f:
         f0:42:7c:65:ae:12:65:23:1c:82:3c:c7:1e:44:35:65:c4:93:
         ca:33:6c:84:cd:33:27:26:02:12:c6:af:c6:30:2e:a9:ae:71:
         fd:f4:49:5d:ad:a2:77:90:b0:d2:4d:63:b2:59:cd:82:59:5a:
         e6:66:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:41:22 2026 by rpki-client