Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
File:                     86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json)
Hash identifier:          0kuRtdv7LWinQ+lOe6Y1xgTFhZlP9RT67Vb1IwzL3CU=
Subject key identifier:   16:9F:4C:53:44:CA:EE:EA:49:41:6E:9B:A9:B2:08:2E:0E:F1:29:90
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Certificate issuer:       /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial:       401E2B0F455F6BA14A58C761132E63ABF45877D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
Manifest number:          02FC
Signing time:             Sun 02 Nov 2025 21:36:32 +0000
Manifest this update:     Sun 02 Nov 2025 21:31:32 +0000
Manifest next update:     Mon 03 Nov 2025 22:03:32 +0000
Files and hashes:         1: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=)
                          2: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=)
                          3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: vLUvXXwIKCireVy2C2AnFvvjQeyLfHqoHhaz3ez0gKQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Nov 2025 22:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1e:2b:0f:45:5f:6b:a1:4a:58:c7:61:13:2e:63:ab:f4:58:77:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
        Validity
            Not Before: Nov  2 21:31:32 2025 GMT
            Not After : Nov  3 22:03:32 2025 GMT
        Subject: CN=169F4C5344CAEEEA49416E9BA9B2082E0EF12990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:60:88:28:e9:92:fe:96:41:88:9c:b9:87:
                    9d:2b:ae:e0:9c:e9:15:7f:e2:e4:bc:ea:49:16:4f:
                    7e:ce:35:2d:46:bb:e0:25:c1:86:06:ac:53:7c:cb:
                    98:e0:24:fc:2e:a1:32:6c:99:a1:27:d0:a3:5a:5e:
                    a6:31:21:8b:4a:20:28:42:f9:52:1a:ca:e7:7a:b4:
                    de:ff:53:26:aa:e2:e6:c6:b4:29:d4:cb:5b:41:17:
                    2c:d3:ff:4c:7d:87:b9:5e:23:d1:3f:a0:85:af:3c:
                    74:c3:a6:f0:3e:d9:3e:49:f4:70:45:f4:98:f5:db:
                    2d:28:36:3a:3f:5d:b5:a2:6e:95:4a:ee:f7:39:41:
                    db:4d:15:46:e6:b2:5e:c8:65:d8:b2:9d:36:eb:ad:
                    2d:8e:a7:24:78:00:1b:b7:b5:1b:2e:0a:e1:59:ac:
                    0e:69:87:8f:7d:c3:3c:47:c1:cc:d5:39:91:9f:8c:
                    9e:25:28:06:4a:ad:65:ca:ae:de:1b:a1:5d:27:c1:
                    56:47:4d:3f:e8:3e:7e:4f:92:3a:59:3f:02:46:e8:
                    2f:a5:f7:84:8b:07:e4:66:01:1f:83:12:17:db:20:
                    83:b1:6f:e5:d1:17:50:6a:94:ee:f6:21:ee:25:41:
                    63:f3:1c:00:c5:61:4b:9c:e3:43:14:72:c7:74:54:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:4C:53:44:CA:EE:EA:49:41:6E:9B:A9:B2:08:2E:0E:F1:29:90
            X509v3 Authority Key Identifier:
                keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e9:2c:87:b5:4d:2c:48:af:68:23:9a:a2:66:27:fe:35:60:
         6e:1f:28:77:cf:be:99:64:a5:4d:4e:ee:21:e8:40:e9:f7:39:
         0c:58:73:86:89:6a:70:76:31:7f:2a:00:74:d6:fe:94:17:6e:
         40:89:1a:78:07:07:e5:7f:9c:74:03:fc:55:e6:9c:ec:a9:01:
         35:d7:74:e6:49:4a:e4:c3:b0:99:32:16:61:e0:71:bd:56:8a:
         a9:38:8e:93:bf:61:50:4c:80:27:93:f6:64:46:5c:df:a4:79:
         d5:b6:3b:32:1b:b3:e6:a6:a7:01:92:78:65:56:ab:d0:66:d9:
         9f:48:6e:ee:84:24:39:31:fb:b9:57:22:7a:cc:36:bf:58:8c:
         f1:1e:0d:61:4e:2d:27:47:86:e4:8a:e4:00:84:a1:c6:ef:94:
         fe:bd:19:17:3c:2f:91:bf:bb:87:3e:09:c3:a9:d6:21:1a:f1:
         83:83:cc:84:7d:52:85:bd:e9:b3:b2:c5:a6:6c:70:4f:d3:73:
         54:a3:b1:2a:64:ea:fd:75:56:9d:a1:94:c2:3c:32:35:b2:6e:
         54:f3:c1:cb:f6:2e:55:5e:37:a7:6b:27:94:6e:66:ac:86:3c:
         07:c9:3f:d8:46:2c:f5:f4:6b:f4:fa:73:89:17:70:75:66:fe:
         b4:cc:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:21:22 2025 by rpki-client