Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.mft
File:                     C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.mft (raw, json)
Hash identifier:          H0W3Pm9jnCHjJztMs1GQFsrn6FWRwbE40APeDM4APbI=
Subject key identifier:   38:43:51:86:6D:7B:59:35:DE:DE:53:06:24:D3:74:FE:42:18:CA:EE
Authority key identifier: C5:D7:26:DF:8C:25:40:A6:15:B5:E8:F5:7C:79:02:ED:CD:0C:C6:BC
Certificate issuer:       /CN=C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC
Certificate serial:       7F79B3C72E9632215F7B5F6E87FE15DADE277FCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.mft
Manifest number:          0129
Signing time:             Sun 01 Nov 2026 15:16:08 +0000
Manifest this update:     Sun 01 Nov 2026 15:11:08 +0000
Manifest next update:     Mon 02 Nov 2026 16:15:08 +0000
Files and hashes:         1: C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.crl (hash: SjvkhWl6seGKw5jJaSyDLI+tfSuBXXdhUyOqnc0+U5s=)
                          2: 323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (hash: PaZQEJwjreibwfIu6GhsaLr/P8VTwBVRjbhrcEP4Q0k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.crl
                          rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 16:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:79:b3:c7:2e:96:32:21:5f:7b:5f:6e:87:fe:15:da:de:27:7f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC
        Validity
            Not Before: Nov  1 15:11:08 2026 GMT
            Not After : Nov  2 16:15:08 2026 GMT
        Subject: CN=384351866D7B5935DEDE530624D374FE4218CAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:42:34:77:ba:7f:7a:a9:f9:55:51:9e:fe:
                    f4:78:0d:4c:7d:08:8a:56:86:25:a3:5c:81:ba:20:
                    62:a2:34:04:b3:b4:84:a5:ff:26:4c:ca:95:31:65:
                    bc:8d:a8:63:18:f0:45:c7:af:0e:ca:3c:cd:d2:79:
                    23:b0:a0:35:63:d7:2d:b5:42:8c:8f:8e:ea:45:02:
                    6c:56:37:1a:4e:73:15:7c:8c:dd:f0:f2:36:08:dc:
                    f6:da:0b:69:57:28:92:9e:0f:ef:f5:24:cd:a7:ed:
                    0b:88:4e:82:da:14:9a:d1:44:0d:51:a1:9c:f2:ea:
                    66:41:93:62:7c:67:5d:20:54:55:ee:79:8b:d2:b8:
                    e2:e3:e9:2c:dc:b0:71:f1:d5:99:20:9c:20:e2:fc:
                    99:c8:99:ba:0d:a2:45:5e:9a:7c:c8:f2:76:50:e9:
                    fa:8e:62:65:1e:7b:99:50:3a:a1:c4:fe:cc:b0:79:
                    53:06:7e:b3:8b:23:eb:45:1a:ae:43:16:ab:30:bd:
                    3f:d4:35:61:93:98:c1:47:ff:fe:b4:3b:bf:ef:fc:
                    5a:5c:38:2f:bb:30:ad:e0:65:e7:23:ba:dd:03:81:
                    2b:ab:8b:f8:75:5b:e1:71:6e:ae:5e:13:cf:7f:d1:
                    66:39:02:f0:cf:15:bd:45:77:fb:e9:c3:82:f6:e9:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:51:86:6D:7B:59:35:DE:DE:53:06:24:D3:74:FE:42:18:CA:EE
            X509v3 Authority Key Identifier:
                keyid:C5:D7:26:DF:8C:25:40:A6:15:B5:E8:F5:7C:79:02:ED:CD:0C:C6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/C5D726DF8C2540A615B5E8F57C7902EDCD0CC6BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:ca:0d:f7:91:94:34:2b:17:50:48:3e:4a:71:8a:0d:ce:5a:
         f5:81:33:f3:cb:14:32:cf:8f:17:44:06:e6:4f:28:94:71:4a:
         27:13:e4:7a:9d:e1:82:44:d8:00:81:cf:0c:f1:bb:fd:60:ac:
         f0:15:54:57:28:58:8e:d7:62:9c:48:3f:b7:9c:bd:7b:8c:4a:
         78:4a:d2:b4:55:74:f5:b9:20:f0:0b:e4:8c:09:2a:a9:34:3c:
         c9:00:9d:ae:a4:0a:46:a5:49:c9:f4:27:0b:da:de:55:ac:a6:
         09:f0:6d:2d:e9:db:b9:ad:ae:68:c0:21:83:89:27:16:85:9a:
         d0:60:d4:5c:35:75:c5:72:ce:aa:af:3d:5c:4f:d6:25:d8:2d:
         fc:e2:7d:5c:8a:be:26:9b:82:48:41:c4:28:dd:f3:0c:fe:8e:
         cb:d5:48:7c:32:fe:67:61:75:0f:7c:e1:0e:dd:37:27:c5:df:
         d5:69:a9:3f:27:52:f6:9d:55:b3:1e:46:e1:41:c3:5b:af:b2:
         2a:0e:2b:06:eb:29:d0:a0:06:2c:ca:d6:b4:bd:a1:80:71:f2:
         b5:8c:f6:af:f2:54:2f:ad:06:b8:b8:e5:59:a8:a8:01:50:ee:
         9a:c2:9a:fa:ce:f4:58:e6:7b:d9:19:f6:03:73:5b:1a:5c:fd:
         a8:0f:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:51:56 2026 by rpki-client