Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
File:                     AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft (raw, json)
Hash identifier:          01JP3E3VkWgXXgSlRPqJXqGFLIw37tu3hrlirnpDDjo=
Subject key identifier:   2D:24:B6:CD:56:60:30:2F:48:C8:83:01:31:23:92:00:A4:34:E7:C1
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       217A6580F8FC836FA119949F264B0336E4797FF4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
Manifest number:          022C
Signing time:             Sun 01 Nov 2026 12:42:32 +0000
Manifest this update:     Sun 01 Nov 2026 12:37:32 +0000
Manifest next update:     Mon 02 Nov 2026 15:26:32 +0000
Files and hashes:         1: 323830343a373636633a3a2f33342d3334203d3e20323731313131.roa (hash: Qqde9CZ7Ml69zShucIFINAAA1qZssLIEpsCKcdaEvyc=)
                          2: 323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa (hash: g9bO9Z0kWBNFy1g+jrPS8umEbUrK4XIJ/sx6+K73bGA=)
                          3: 3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (hash: eXMgw2oMwjKojZaUUELblZ06zkvuXTJUVZB7yNWQ6lc=)
                          4: 3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa (hash: cmUKJNv24LfBVC422N2KOKTjU/76+RFP9x7ioanqrT0=)
                          5: 3139322e3134302e38342e302f32332d3233203d3e20323731313131.roa (hash: FcI68fr3ZU/m62c+k6ahnW3J4sclCt3Pdv+Dt1hKSus=)
                          6: 323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa (hash: KD0xJP8hE3HQ4BUH2PFCpbgHzoEpz2KY/gYf4D4+HDA=)
                          7: 323830343a373636633a343030303a3a2f33342d3334203d3e20323731313131.roa (hash: 9SJMEbUjJ2NHTEtnVGwUbKIxBjS8KaF9GZmz81cdIOc=)
                          8: 3139322e3134302e38342e302f32342d3234203d3e20323731313131.roa (hash: BtLK6F0bx8fPAzrT1MPWy5w46M06TJw0OiDjxdz3NnE=)
                          9: AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl (hash: 9ngtDmr0p4CKuhEFeTCIF/AsNdPLHxuEvRCZv/IPvec=)
                          10: 323830343a373636633a3a2f33322d3332203d3e20323731313131.roa (hash: SOEKx1AUWxX1qztE2iAKavo9h9LLioedYhRapcigokc=)
                          11: 323830343a373636633a3a2f33332d3333203d3e20323731313131.roa (hash: 0HnQ9vLhZK8G1LbpwGN3Byqn/xJHA1EBqXOtC7/CpMw=)
                          12: 323830343a373636633a383030303a3a2f33342d3334203d3e20323731313131.roa (hash: krtzuXy0DIYihZzsSvq0USvomHGoktcpHxnhO+FrLbU=)
                          13: 3139322e3134302e38362e302f32332d3233203d3e20323731313131.roa (hash: oEdNMSdx4UebV3INiGxYgNfKHLDCEtoez1ga1IJqsdE=)
                          14: 3139322e3134302e38372e302f32342d3234203d3e20323731313131.roa (hash: fbgaj8k5xQ6B4UpIdIBWiHZQ5aiiNLZnRsvkFvC2DtE=)
                          15: 3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (hash: 8GjOTL0jKYix2tWeOEsNC3nmfxhWqAVhpd3LRu2Eu6w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 15:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7a:65:80:f8:fc:83:6f:a1:19:94:9f:26:4b:03:36:e4:79:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Nov  1 12:37:32 2026 GMT
            Not After : Nov  2 15:26:32 2026 GMT
        Subject: CN=2D24B6CD5660302F48C8830131239200A434E7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:14:e4:62:c1:4a:b3:24:8f:18:97:9e:fd:c4:
                    bb:b3:1e:a0:2c:39:3b:af:cc:c2:f5:ba:9e:0c:09:
                    21:c4:65:d9:d6:f6:40:04:ac:78:2c:a0:cc:a8:7b:
                    9a:97:d4:1b:4d:44:29:5d:95:fe:30:39:36:1b:e2:
                    d6:4e:03:d4:8c:48:b0:81:c1:35:02:e9:44:b2:de:
                    e4:a1:0d:3d:a4:3b:27:56:26:d6:79:e4:0d:e5:e7:
                    14:5c:91:43:a3:3c:7b:83:8e:91:d3:b2:76:cd:58:
                    d5:13:39:b9:67:67:3b:56:08:82:77:a3:c5:47:28:
                    27:46:e5:93:10:f7:a7:05:15:3a:b4:5c:3e:15:f3:
                    b1:bc:85:e0:d8:cb:77:db:40:c9:a5:a2:a5:e3:d5:
                    04:5d:93:5e:7a:c9:17:70:77:ea:d0:e8:36:b6:82:
                    d5:78:00:44:08:13:5d:fd:a7:c7:ed:ac:5f:fe:f6:
                    aa:d6:84:02:1c:62:72:d8:3c:1e:38:36:db:78:58:
                    89:99:a7:9d:d7:80:f1:db:5c:a9:a7:5d:8a:45:3b:
                    45:8a:4a:f4:6b:db:d4:42:99:3b:a9:69:0d:a8:c6:
                    47:58:db:be:08:13:c2:da:91:33:0d:9e:26:7c:89:
                    51:d9:98:d3:f2:81:c5:7c:c3:d1:d5:4b:84:b0:73:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:24:B6:CD:56:60:30:2F:48:C8:83:01:31:23:92:00:A4:34:E7:C1
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:02:77:da:c2:8e:d2:78:10:15:3e:4d:26:31:2a:15:eb:
         1b:12:fe:1e:83:3f:02:3b:3b:88:ed:e4:30:c0:5a:87:5d:24:
         28:ce:cf:65:d5:61:12:3d:bb:d0:42:c4:f2:25:dd:9c:f0:29:
         00:15:d5:8f:63:97:17:e3:f0:b6:9d:7b:29:60:8c:97:22:18:
         73:cc:17:5e:d8:b2:c8:97:c8:96:24:98:85:be:dc:44:a2:ea:
         5a:92:84:5f:1b:6b:19:40:b3:54:d6:d0:80:d0:d1:15:03:71:
         0e:7f:d7:19:40:47:b8:14:4f:5d:c2:e4:f6:99:31:7c:1f:06:
         6d:59:83:3c:67:61:b3:24:33:3c:f6:13:6e:61:c5:7f:a0:5f:
         b1:a4:db:85:45:59:87:01:6c:94:99:24:75:30:0e:0f:da:3c:
         c5:62:f8:c1:1a:09:a9:8e:9b:2f:ec:72:fd:8e:79:a2:20:9e:
         28:49:b6:fd:86:0b:c4:d4:13:2c:bb:5e:1c:2b:ff:0b:bd:08:
         64:e4:9d:19:e5:3e:45:b4:8f:89:e9:34:68:16:df:58:22:f9:
         7e:5f:c5:2b:1b:71:91:4d:16:a9:4a:00:ef:dc:87:3c:d9:46:
         ce:cf:9e:f1:fe:0c:5e:69:b1:48:20:95:d3:ee:c2:4c:7b:ab:
         94:08:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:17:57 2026 by rpki-client