Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
File:                     2CACC99A330A3753D03224139703412FA1CB21D3.mft (raw, json)
Hash identifier:          9BrMWN/khZJ6hTT/N4dJ5U/iT57ZidEVSTGxhISUjk4=
Subject key identifier:   DE:B6:37:19:D6:F9:87:D6:68:FF:A4:DE:F0:DB:E0:82:9B:E8:DB:64
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       6F398718AC6236389505849821464F850ABD0C53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
Manifest number:          0309
Signing time:             Tue 03 Nov 2026 17:12:01 +0000
Manifest this update:     Tue 03 Nov 2026 17:07:01 +0000
Manifest next update:     Wed 04 Nov 2026 17:16:01 +0000
Files and hashes:         1: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: 6diI4DNRs5Vs4zrYbGWwTC9mZuL9ghDUv3sBr8Fa6ug=)
                          2: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: 0dgfAjZdFY2THoBYgdV2y3D/nsD1UP5IocHa1ixVBvk=)
                          3: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: EoVykA/7Art/ZTgGVArTxI4DOHRFURG2IregIPi5OBk=)
                          4: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: qsIQ7eoS0YN6VNbkY2w77F9RrWulAixs0VqO92MOdKw=)
                          5: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: EBg+hygH3tyR1PCkSg1MnXlfxpy3mX3E6KIi9F5Szwk=)
                          6: 2CACC99A330A3753D03224139703412FA1CB21D3.crl (hash: 3LtLW4ITUb6qbyRtJHehBAp8s5PqWdTSdxzK91Uv+d4=)
                          7: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: abQhG1dAzT3jW+P5WDuWLuQlMHWNlM3Uu5P6u/YKUfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 17:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:39:87:18:ac:62:36:38:95:05:84:98:21:46:4f:85:0a:bd:0c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: Nov  3 17:07:01 2026 GMT
            Not After : Nov  4 17:16:01 2026 GMT
        Subject: CN=DEB63719D6F987D668FFA4DEF0DBE0829BE8DB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:c9:6f:44:4a:ec:65:f7:2e:13:e1:75:22:
                    68:be:9f:ea:26:22:94:6f:bb:49:d0:53:df:96:b6:
                    87:de:ca:9d:6b:30:77:7c:d0:a7:a9:d6:46:15:9e:
                    4c:1b:39:00:51:7d:c0:de:2a:3a:3a:35:90:76:c1:
                    60:65:82:98:64:c3:13:83:6b:b2:ca:a3:f8:d1:5f:
                    a7:75:e8:9c:4d:d6:93:64:80:40:5a:e3:f5:75:de:
                    53:07:20:59:0b:17:d0:6e:c8:74:78:14:69:d6:93:
                    4f:ee:b3:66:c9:b3:54:42:1b:ab:d9:37:ae:9d:8c:
                    fb:e0:a0:7a:b4:c7:2d:9b:5e:9c:2a:3e:86:38:49:
                    8b:7c:e4:97:4d:14:bd:3f:8c:67:2a:a8:21:4e:ab:
                    b4:ea:11:13:a2:13:c8:f8:f5:b2:95:c9:14:3a:59:
                    5d:c7:7a:c8:14:27:08:b8:2e:1e:50:11:ff:1b:28:
                    f1:b9:69:83:22:81:7d:3c:c7:7e:67:22:65:76:95:
                    0f:c0:1d:44:0f:65:c9:e6:fa:fd:fb:2a:0c:0a:cf:
                    d2:25:6e:ec:40:1d:49:33:8c:9d:45:5b:ef:55:68:
                    55:8e:73:d7:f3:c9:0d:b8:0d:ac:94:6b:52:d9:47:
                    56:f2:22:e0:c9:a6:d8:94:3d:10:1b:1f:b4:59:cd:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B6:37:19:D6:F9:87:D6:68:FF:A4:DE:F0:DB:E0:82:9B:E8:DB:64
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:5e:f9:0d:2a:f0:87:f5:30:5f:cc:fb:9d:15:d2:34:dc:
         9c:d1:9d:a9:1c:b9:ac:22:ae:55:e2:99:da:00:60:dc:2c:9f:
         46:82:16:59:04:66:e7:60:7d:19:85:fa:b8:6b:55:c6:96:f9:
         28:65:c9:23:0a:6f:e8:2a:56:60:a1:9b:6d:8f:58:4d:3d:c9:
         3f:ea:56:46:c4:8e:3f:a0:14:9a:4b:e1:5f:64:7a:87:97:71:
         e2:31:4d:25:5b:ae:a5:6c:0a:bc:92:29:2b:87:51:e2:54:f0:
         25:ff:b3:4d:dc:ce:4e:a8:04:cd:79:6f:c8:4f:09:43:70:f9:
         f6:b3:ad:4d:00:b8:f0:02:1c:f6:44:4d:47:a9:e2:1e:d1:61:
         7c:d5:9e:ce:81:18:30:68:64:5f:b7:c1:5d:e0:86:32:eb:57:
         ae:31:c1:b7:33:7d:65:29:5d:d3:9a:7a:14:95:6e:ed:e8:e5:
         39:95:e4:11:30:a6:83:04:43:c4:09:b9:57:d0:b4:48:c8:a7:
         7b:62:ee:b0:de:7f:47:b4:71:6e:b7:a9:6e:0a:7d:60:3e:ac:
         76:15:4d:03:53:0e:d1:04:ab:b5:a9:01:dc:5c:0f:bc:e3:07:
         b5:a3:9a:fc:86:2f:5f:47:91:fe:5c:9a:c9:48:62:d3:ec:83:
         00:0c:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----