Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File:                     89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier:          TdSciPBSBaI44yBD9mspJNB1GYH7JhM5VPYCBb6tbsw=
Subject key identifier:   E4:F3:C4:B2:F4:1C:DA:EA:58:02:18:B3:EE:D0:AA:0C:DD:70:08:94
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       60E01192236AC4F934D9D82A48FCE57694CA4BE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number:          04E3
Signing time:             Fri 30 Oct 2026 12:59:32 +0000
Manifest this update:     Fri 30 Oct 2026 12:54:32 +0000
Manifest next update:     Sat 31 Oct 2026 13:45:32 +0000
Files and hashes:         1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: pNQQtraBbXnxGxAPwIjilveeCS5QWPOkanpn3PQkRrc=)
                          2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: 8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:11:92:23:6a:c4:f9:34:d9:d8:2a:48:fc:e5:76:94:ca:4b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Oct 30 12:54:32 2026 GMT
            Not After : Oct 31 13:45:32 2026 GMT
        Subject: CN=E4F3C4B2F41CDAEA580218B3EED0AA0CDD700894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1e:69:0b:9e:60:aa:b2:6c:de:a5:42:55:67:
                    7f:b0:bc:c6:2f:73:b6:7d:bc:35:3c:65:88:98:1f:
                    b1:98:2a:e4:7c:ff:01:fa:e6:08:3b:e8:7d:da:57:
                    99:ea:94:07:53:d1:a9:be:d6:d1:05:d5:b2:49:7d:
                    6a:a2:dd:af:91:4f:f3:b7:77:ce:b0:38:a8:e0:0f:
                    04:57:a0:92:0f:6c:af:55:2e:7b:95:fa:61:89:df:
                    a3:0a:aa:52:15:fe:59:b6:50:b5:dd:83:31:5b:ab:
                    97:e4:d2:f2:eb:eb:85:6f:2d:f3:8b:91:90:3e:9b:
                    86:f0:bf:15:32:7f:ed:f2:65:6b:cd:c7:69:06:ca:
                    a4:7c:3b:46:6f:31:44:0b:7d:be:b3:70:8c:d0:34:
                    a4:78:60:9e:9f:2e:67:92:83:06:82:d4:8a:94:7c:
                    39:7f:61:0a:4e:eb:ba:ab:ce:1b:25:a0:38:4e:2f:
                    d4:ac:56:ee:0e:c8:28:7b:d8:05:95:92:03:63:de:
                    6c:87:5c:9b:d2:9c:2d:43:3d:b3:5a:ff:cb:6d:28:
                    5c:14:06:76:0f:64:35:93:29:75:dd:5b:17:a8:10:
                    23:f7:3a:0a:a6:af:45:76:e0:e1:86:e0:e0:3f:0d:
                    7b:fb:a4:5e:5a:26:d4:6e:7a:6f:18:6c:35:e3:05:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F3:C4:B2:F4:1C:DA:EA:58:02:18:B3:EE:D0:AA:0C:DD:70:08:94
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:4c:b6:45:3e:2d:f9:79:32:3e:1b:2f:b1:15:33:d2:54:
         c6:28:9b:c2:2b:0a:c6:28:8e:c5:90:13:c8:5e:50:56:b6:76:
         c0:a4:49:f5:16:c5:0a:62:d6:11:11:12:f1:f2:60:d5:d7:33:
         bb:76:ed:f8:cc:91:75:4b:62:0d:43:9b:7a:97:4f:2b:5b:d3:
         e1:65:fd:61:22:f6:70:51:df:26:ec:d5:7d:3d:57:ef:3c:28:
         e6:a9:06:29:78:b5:c1:7c:05:f4:20:af:e4:c9:80:7a:c5:5f:
         12:82:17:27:5d:0d:b9:83:95:61:86:64:a8:17:ea:99:c7:8f:
         30:c3:c1:03:a9:70:b4:fb:47:ff:de:e9:66:d6:9b:99:ad:f6:
         b1:9f:19:a4:02:7b:c2:fb:08:dd:be:a5:8b:d9:c0:e0:ee:2e:
         dc:97:bd:c7:16:e0:35:ff:56:61:20:58:f6:42:30:09:a5:cb:
         cb:45:8e:3b:0d:1d:2d:61:de:aa:2b:5e:88:50:fe:7e:04:e7:
         bf:c8:7d:21:97:b9:44:ad:23:c6:25:96:96:c8:f6:7e:35:71:
         a9:ed:b2:d1:5d:ad:84:1f:c4:9f:11:0e:be:f7:30:58:ce:b4:
         7a:64:60:4c:74:9f:23:5c:ad:c8:09:56:ef:b7:34:14:3c:24:
         1c:cd:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----