Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
File:                     84398976322691988CABA640BBB2854AECDF6B87.mft (raw, json)
Hash identifier:          3vM9eXfmKHTZhqBD2J441BrD1GlbZJouOb47yByUq4E=
Subject key identifier:   89:1D:C6:62:3F:CA:A3:86:86:7F:BD:E2:C1:7E:53:BC:90:48:6F:2F
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       751A6457012BB4FBEAA3D2E931CFB6430AD905B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
Manifest number:          04F1
Signing time:             Mon 02 Nov 2026 06:27:22 +0000
Manifest this update:     Mon 02 Nov 2026 06:22:22 +0000
Manifest next update:     Tue 03 Nov 2026 07:13:22 +0000
Files and hashes:         1: 34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa (hash: 07rnsbDhj59/JawOj0qlxi2sqrSAT3IOfi/atiO2xLI=)
                          2: 323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (hash: xm6QS2tykS0HNopH4b1bku6DcYmJ8RbOFMzSXulztVI=)
                          3: 34352e3136302e3234362e302f32342d3234203d3e20323638343532.roa (hash: gQziZo0PENu68BDcd+ge2huKXFfgQ8FVrrkE3yNiTvc=)
                          4: 34352e3136302e3234342e302f32342d3234203d3e20323638343532.roa (hash: kQIOU+AWJZDFwQy1cwevFObY7N/UxySaLvqop+BUlpQ=)
                          5: 34352e3136302e3234352e302f32342d3234203d3e20323638343532.roa (hash: Yi5A1lphLn7DrNhMqDNrbPhc9qDvUhFpt1CcO6Rm5Ck=)
                          6: 34352e3136302e3234342e302f32322d3232203d3e20323638343532.roa (hash: l6EeTZbGUFN43SjdH3xz27GH0ozr4uGbZKIc9cmhZYU=)
                          7: 84398976322691988CABA640BBB2854AECDF6B87.crl (hash: VlD/HpxGnKBTS7rg9gR5v8Ghu5LAhXZ0YrkCrf+7low=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 07:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1a:64:57:01:2b:b4:fb:ea:a3:d2:e9:31:cf:b6:43:0a:d9:05:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Nov  2 06:22:22 2026 GMT
            Not After : Nov  3 07:13:22 2026 GMT
        Subject: CN=891DC6623FCAA386867FBDE2C17E53BC90486F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2d:f6:d7:16:5c:53:ad:24:1f:19:ee:f0:70:
                    2d:fe:a0:79:e5:d8:ed:0f:18:a6:ed:b9:e4:6b:8e:
                    6c:f6:b3:82:b4:0d:36:8f:32:43:76:16:bb:fd:34:
                    16:23:b0:7d:f3:1b:11:1e:36:bb:d2:28:da:5a:f9:
                    d2:ed:fa:c5:47:f5:29:28:d6:c3:4f:16:32:16:49:
                    01:fe:0d:39:13:4f:1d:cf:97:c2:2a:39:3f:bd:af:
                    93:db:04:3a:98:37:79:57:59:e4:45:a3:22:1b:81:
                    2d:2e:c5:3d:ee:c4:8d:56:6b:5b:76:ca:b0:c3:3d:
                    6f:dd:ef:38:3e:48:e1:e7:2c:99:36:06:32:dd:40:
                    66:f5:0e:68:9c:30:d6:72:81:47:2a:10:11:56:ae:
                    21:ae:d1:fe:84:58:9e:37:9a:48:9c:5b:03:bf:da:
                    9e:19:f7:11:f4:70:81:df:2f:3a:0f:98:f8:65:65:
                    e8:44:65:1d:3b:74:66:b6:21:e0:1c:dd:f3:13:c4:
                    07:21:b1:22:60:a7:40:b5:d9:b1:1e:d8:68:ed:db:
                    4c:fe:e9:89:a2:37:c0:bf:5f:11:53:ee:37:d5:28:
                    00:ce:eb:36:84:be:a9:1e:3c:5c:e1:18:6f:9e:0c:
                    55:69:72:d6:7d:51:c7:83:51:ab:47:f4:b7:59:64:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:C6:62:3F:CA:A3:86:86:7F:BD:E2:C1:7E:53:BC:90:48:6F:2F
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:73:2d:e7:b1:9c:b6:4e:8a:29:12:c2:05:8b:76:92:23:9e:
         15:73:9a:ba:a7:43:89:35:45:08:be:fe:ac:91:59:46:36:76:
         e3:8d:99:a2:e7:d5:72:c8:cd:95:44:7e:ca:12:72:78:90:6e:
         17:d6:0c:94:34:64:d6:c0:95:53:ba:f1:ba:a5:c7:76:c8:78:
         49:2f:9c:81:1d:ea:1a:1b:4d:88:65:d3:cb:26:4a:1d:5e:5d:
         c5:47:15:d0:f8:53:2e:04:c7:49:82:7e:6b:8a:42:6f:3b:78:
         c7:54:eb:09:5f:bd:5d:4a:58:34:8b:6b:aa:31:52:b0:f2:28:
         61:fe:da:fd:86:c2:3d:0b:8a:12:76:89:fd:2b:0f:99:e4:44:
         f1:2a:17:a1:f5:c6:56:35:ab:6b:a6:d8:6f:5e:48:71:1d:29:
         d5:56:91:a1:ad:7c:47:ae:97:51:b8:13:bd:61:6c:b3:10:6d:
         42:c3:f0:92:83:c0:11:97:c6:fd:73:63:5c:00:f2:2d:f8:be:
         f4:9d:ff:09:a8:df:67:5c:45:02:1e:e7:41:31:ca:2d:76:f3:
         91:48:53:5a:07:64:c5:b6:75:6a:cb:c5:d1:76:fc:af:e9:98:
         d5:b8:e8:4a:ca:05:a0:34:e1:ad:ff:dd:5c:87:2a:9e:0f:b6:
         11:d3:a7:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdRpkVwErtPvqo9LpMc+2QwrZBbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzOTg5NzYzMjI2OTE5ODhDQUJBNjQwQkJCMjg1NEFF
Q0RGNkI4NzAeFw0yNjExMDIwNjIyMjJaFw0yNjExMDMwNzEzMjJaMDMxMTAvBgNV
BAMTKDg5MURDNjYyM0ZDQUEzODY4NjdGQkRFMkMxN0U1M0JDOTA0ODZGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLfbXFlxTrSQfGe7wcC3+oHnl
2O0PGKbtueRrjmz2s4K0DTaPMkN2Frv9NBYjsH3zGxEeNrvSKNpa+dLt+sVH9Sko
1sNPFjIWSQH+DTkTTx3Pl8IqOT+9r5PbBDqYN3lXWeRFoyIbgS0uxT3uxI1Wa1t2
yrDDPW/d7zg+SOHnLJk2BjLdQGb1DmicMNZygUcqEBFWriGu0f6EWJ43mkicWwO/
2p4Z9xH0cIHfLzoPmPhlZehEZR07dGa2IeAc3fMTxAchsSJgp0C12bEe2Gjt20z+
6YmiN8C/XxFT7jfVKADO6zaEvqkePFzhGG+eDFVpctZ9UceDUatH9LdZZDT9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiR3GYj/Ko4aGf73iwX5TvJBIby8wHwYDVR0j
BBgwFoAUhDmJdjImkZiMq6ZAu7KFSuzfa4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpm
MzUvMS84NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0Mzk4OTc2MzIyNjkxOTg4
Q0FCQTY0MEJCQjI4NTRBRUNERjZCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpmMzUvMS84
NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgXMt57Gctk6KKRLCBYt2kiOeFXOauqdDiTVFCL7+rJFZRjZ2442ZoufVcsjN
lUR+yhJyeJBuF9YMlDRk1sCVU7rxuqXHdsh4SS+cgR3qGhtNiGXTyyZKHV5dxUcV
0PhTLgTHSYJ+a4pCbzt4x1TrCV+9XUpYNItrqjFSsPIoYf7a/YbCPQuKEnaJ/SsP
meRE8SoXofXGVjWra6bYb15IcR0p1VaRoa18R66XUbgTvWFssxBtQsPwkoPAEZfG
/XNjXADyLfi+9J3/CajfZ1xFAh7nQTHKLXbzkUhTWgdkxbZ1asvF0Xb8r+mY1bjo
SsoFoDThrf/dXIcqng+2EdOnAw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:34:05 2026 by rpki-client