Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
File:                     D7F3F67EA800504F23795E22991815F9E686C811.mft (raw, json)
Hash identifier:          hClkpmxrkE8ExrTE4t2vuV31Q4IL+S2clTuTLvSI/fs=
Subject key identifier:   0D:1A:AA:77:7A:47:6A:C8:CB:F9:C3:C5:01:7B:5C:9F:AF:64:1A:BE
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       032479C3457DEAB37D49C199138C0040A03C0F19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
Manifest number:          0489
Signing time:             Sun 23 Aug 2026 23:30:00 +0000
Manifest this update:     Sun 23 Aug 2026 23:25:00 +0000
Manifest next update:     Tue 25 Aug 2026 01:40:00 +0000
Files and hashes:         1: 323830343a313262303a3a2f33322d3332203d3e20323633343932.roa (hash: w6x88Y8F2UoFOh2FhmiIRYRACnZ/8l1VFzDF5p6L8sY=)
                          2: 3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (hash: ztuK1y6TzrnBV2BGxQ4WtWxNXu99oTuXmP5v0i65W/U=)
                          3: 3139312e3234332e33362e302f32322d3232203d3e20323633343932.roa (hash: q9bc6giK5SahvFhYN5/MsoRGDnh41j9MifCw7Cd12SM=)
                          4: 3139312e3234332e33372e302f32342d3234203d3e20323633343932.roa (hash: gGjNDilJvHg9VXQ5PJNA0dI2kci5BKyslQM81R+6iSk=)
                          5: 3139312e3234332e33362e302f32332d3233203d3e20323633343932.roa (hash: MdX+ghWTHdaghn/+1f289WsoGie1puCHwMvayR6UBbo=)
                          6: 3139312e3234332e33392e302f32342d3234203d3e20323633343932.roa (hash: dT/OQ0caLNJNzu5vr5CsHKBQnF7R/bkS8yGTDfRmzw0=)
                          7: D7F3F67EA800504F23795E22991815F9E686C811.crl (hash: BuztVpY2ud4qhrEndb/adrKDvSZiWa6/CA5Yf5oO654=)
                          8: 3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (hash: 5MtUrib3S8mt5AG/RoO3Nf7Xe8+aMtCoYcP1KGRKM5M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 01:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:79:c3:45:7d:ea:b3:7d:49:c1:99:13:8c:00:40:a0:3c:0f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Aug 23 23:25:00 2026 GMT
            Not After : Aug 25 01:40:00 2026 GMT
        Subject: CN=0D1AAA777A476AC8CBF9C3C5017B5C9FAF641ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a2:4a:01:74:52:af:74:8c:ea:b6:b3:76:b0:
                    c7:09:70:72:f4:ce:ab:fc:fd:4c:8b:ff:fd:9e:f2:
                    91:ce:13:36:5f:cc:3c:fd:36:8a:c8:12:88:cb:78:
                    54:35:a3:25:26:0c:d2:ea:d2:6c:48:bd:83:3e:e6:
                    f1:3f:6a:e3:76:dd:18:53:60:c7:5e:43:4e:6a:bd:
                    92:5e:21:2a:42:3c:22:01:4f:3b:53:cf:e3:b1:54:
                    fc:53:f2:63:5c:e6:8e:03:c4:3f:5b:49:35:df:a2:
                    0f:c5:06:a5:1e:41:7f:0d:7b:ac:05:e8:68:b4:8f:
                    32:a6:2c:df:67:49:37:a0:26:86:79:a4:70:e1:91:
                    25:42:5c:ab:e0:55:47:d7:a9:83:90:b9:43:5b:d2:
                    f3:a9:81:ce:bc:35:6e:dd:bd:58:48:ff:13:14:2c:
                    e5:38:de:da:ea:94:e8:6e:06:9f:fc:a2:3e:37:6f:
                    49:dc:f9:4a:98:89:6c:c5:0d:f6:7e:ac:40:9a:76:
                    5d:3c:49:88:75:66:36:60:06:97:99:00:15:91:64:
                    cb:13:5f:84:ba:a5:a9:3c:dd:82:f7:99:c7:88:f5:
                    a1:3a:83:cf:c0:87:5e:86:fb:dd:55:36:0a:83:c5:
                    a5:e4:1c:9f:59:d2:23:35:ec:78:1b:51:99:a2:0a:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:AA:77:7A:47:6A:C8:CB:F9:C3:C5:01:7B:5C:9F:AF:64:1A:BE
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:c7:d6:f5:90:89:37:c1:72:ae:8d:07:c2:5e:f6:94:36:
         11:84:e2:78:fd:1d:57:38:b8:1d:4f:34:02:a9:9a:c7:69:f5:
         39:70:27:47:b7:ac:79:94:7b:36:c4:ad:47:f4:cf:04:52:4a:
         28:98:e4:37:ab:d3:bf:37:62:36:bb:aa:7f:9e:e7:86:14:51:
         fe:89:61:fd:e7:4a:d9:e7:ec:6f:c0:08:b8:99:d6:65:fa:41:
         be:41:90:2f:c9:c5:13:4a:ba:54:4d:07:61:e6:3f:d2:b7:4a:
         0e:74:9a:60:40:97:99:d3:13:33:d8:ff:63:b5:c6:0a:55:b4:
         31:ea:ba:85:f6:e8:b5:a7:a2:aa:f7:e6:92:f9:58:bb:61:60:
         33:fc:37:8a:f2:49:b6:6e:bc:96:83:d5:b2:dd:8e:5a:e2:93:
         b6:65:59:06:14:12:92:fe:db:4c:f6:27:9a:52:2a:a2:d1:5c:
         19:09:3a:a5:b5:79:ef:19:02:05:d4:c8:88:ad:3e:3c:56:bc:
         36:ef:db:dc:ce:6a:2a:96:45:eb:df:e7:34:ff:11:55:bc:b1:
         ff:d9:84:de:1c:8a:e2:76:16:55:e0:ed:6d:9b:a0:e8:2a:8d:
         96:54:60:d0:28:3d:84:dc:87:7d:22:26:f7:86:ce:da:88:3b:
         f9:aa:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----