Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
File:                     89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json)
Hash identifier:          q76BLSPpaenHYGUg7y1IgyrMdVuiaYjbUGPMQBLkBEI=
Subject key identifier:   CB:E5:4C:FF:36:9D:74:DB:AC:7C:AA:B0:A3:F3:67:5C:CB:BC:97:C6
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       40F5F22ACAA5D0681BCF2AE0D9F1F92066DE4B24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
Manifest number:          048A
Signing time:             Sun 23 Aug 2026 17:42:08 +0000
Manifest this update:     Sun 23 Aug 2026 17:37:08 +0000
Manifest next update:     Mon 24 Aug 2026 19:17:08 +0000
Files and hashes:         1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: 8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=)
                          2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: nikm8fZQASsO8RHxHhJVKqRVCf4/1QVGExeti78pXUc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:f2:2a:ca:a5:d0:68:1b:cf:2a:e0:d9:f1:f9:20:66:de:4b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Aug 23 17:37:08 2026 GMT
            Not After : Aug 24 19:17:08 2026 GMT
        Subject: CN=CBE54CFF369D74DBAC7CAAB0A3F3675CCBBC97C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:d0:91:26:50:d9:33:57:65:79:d2:fa:36:
                    48:e4:a6:d8:86:5a:ae:bb:2c:07:a2:92:78:a2:31:
                    a9:2b:6d:5c:9c:d3:f9:d9:5e:01:c9:be:c5:0a:d4:
                    af:15:91:4f:d9:4e:3e:a0:53:fa:d7:af:7d:2a:01:
                    98:6a:87:b7:3d:d2:ce:93:f4:d7:87:45:ed:b6:2c:
                    e0:ed:59:61:25:7f:a5:37:22:7c:68:50:4c:10:87:
                    54:2d:2b:6b:08:a0:dd:7d:19:ee:8a:c1:74:c8:08:
                    99:aa:ae:84:70:d9:6f:43:e4:40:0d:8e:21:f4:c9:
                    8e:53:ba:62:5a:31:46:26:a3:e7:1c:03:1f:79:cd:
                    1e:78:6e:2f:c8:c1:9e:27:85:29:c7:b2:e9:bb:73:
                    27:cf:34:d7:70:9e:8d:5b:2a:13:c0:02:6c:78:00:
                    e9:9d:bd:78:06:29:74:b7:b7:d9:47:43:d0:04:cb:
                    01:ac:58:00:dd:d3:f7:bd:5c:05:5d:2e:1d:d0:d1:
                    e6:fd:ca:82:12:2b:35:6b:ee:9b:db:cd:d0:0e:c5:
                    11:70:40:93:bd:b0:12:34:22:89:47:02:ee:55:c2:
                    05:2f:22:dc:fe:b3:5b:f8:8d:fc:97:fe:53:75:25:
                    fc:a0:b4:f0:26:10:a3:df:7d:89:7c:c2:c5:50:7c:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:4C:FF:36:9D:74:DB:AC:7C:AA:B0:A3:F3:67:5C:CB:BC:97:C6
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:24:04:ba:4f:ce:b0:35:5f:ee:2e:59:45:db:0f:51:50:
         df:fd:87:a8:3f:8f:56:f8:23:f8:1e:b3:23:55:7b:c9:46:68:
         70:e0:cc:22:97:43:4d:89:14:e7:df:7e:cc:cf:79:0d:c2:4f:
         fc:d1:90:d3:dd:ff:28:10:2c:f5:c7:52:51:ef:27:c9:38:2f:
         47:5f:92:ef:02:d5:27:81:e1:72:72:3a:02:b6:ce:62:37:55:
         0d:23:fb:44:ac:f6:5c:e6:27:bd:f3:ef:0d:82:38:42:af:94:
         7e:53:c9:cb:24:8c:41:44:d6:77:28:d0:51:cb:a2:c0:51:73:
         d1:df:ee:d2:33:06:c1:72:5c:b4:80:1d:e8:3f:be:db:b7:9b:
         42:2b:ca:1e:e5:66:c8:be:92:14:11:a0:b9:b0:26:b9:fe:68:
         c7:7e:68:94:52:6e:14:1d:6c:f3:1f:1e:64:74:67:71:86:87:
         90:9a:43:d8:b4:d4:cd:be:4b:e1:e9:4e:e3:9c:04:e6:a9:28:
         64:f5:66:ff:d6:a6:b4:1b:66:d0:ab:99:6f:a1:46:40:21:08:
         df:04:a3:b6:f1:69:ea:fe:35:ef:0f:2d:c2:f9:db:ad:b2:a6:
         ae:57:b6:39:01:76:b9:52:c2:c3:8f:5f:44:40:3a:6c:4d:a2:
         7d:c2:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----