Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
File:                     B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft (raw, json)
Hash identifier:          U5DEcgZR+4MxwFwy1b83JC2oZghVRTBDY4Yyw9u1etI=
Subject key identifier:   42:96:E8:17:22:71:54:3E:80:30:92:60:DE:40:DB:3F:F8:7B:89:39
Authority key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF
Certificate issuer:       /CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
Certificate serial:       20E505F915FCEDB56239DAF9F4611E33EE6364AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
Manifest number:          0588
Signing time:             Mon 02 Nov 2026 11:10:00 +0000
Manifest this update:     Mon 02 Nov 2026 11:05:00 +0000
Manifest next update:     Tue 03 Nov 2026 11:10:00 +0000
Files and hashes:         1: 323830343a373461343a3a2f33322d3334203d3e20323730393934.roa (hash: LCHT2Y+LBkaAUziO30unFPmixp/5lR6rBeVHq42aqOQ=)
                          2: B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl (hash: crhOXsHIw6asEvL/6YdnGUtgNbG+LMqLC9qI8WmKOuc=)
                          3: 3133382e35392e3133362e302f32322d3234203d3e20323730393934.roa (hash: U43h9Hi7u2Cg7va6RSXwjk2rc7JdJyIHoIFXhBbLhKY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl
                          rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e5:05:f9:15:fc:ed:b5:62:39:da:f9:f4:61:1e:33:ee:63:64:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
        Validity
            Not Before: Nov  2 11:05:00 2026 GMT
            Not After : Nov  3 11:10:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:31:7e:5c:a4:0d:cf:23:ac:b2:4a:c2:88:
                    2e:dd:75:bd:04:7a:d1:d5:ad:57:19:2d:c1:95:2d:
                    08:ef:ba:b4:b2:c9:63:5c:67:f9:85:df:1b:70:19:
                    03:3b:03:89:14:4c:04:24:a9:15:b9:e9:0e:58:be:
                    87:15:11:83:8d:2b:2a:c5:23:35:8f:2c:b0:bb:27:
                    32:55:2e:bd:75:59:d8:40:b8:66:d6:3f:f2:8d:7e:
                    4f:89:cc:ea:10:13:52:dd:d9:82:28:56:48:cc:57:
                    ad:95:a3:7b:56:94:49:e0:01:73:f0:c1:d4:2a:65:
                    64:1f:b9:64:c5:35:32:dc:09:4d:f1:61:af:57:ba:
                    7f:11:d8:5b:c6:52:90:97:11:5a:e8:34:e6:c8:f4:
                    de:17:ee:a7:3c:1c:85:bc:1d:6f:72:69:16:80:27:
                    4a:3a:ba:73:2e:9d:80:7c:ad:1f:ab:ef:a1:16:ab:
                    81:d7:66:01:8a:27:ab:36:ee:d0:fa:6d:f3:de:a9:
                    1a:f8:1d:6f:5f:95:05:a2:8d:f1:88:81:ac:ba:68:
                    23:3a:d5:38:6c:ec:e3:1b:55:71:52:0f:e1:8c:d3:
                    c3:3a:d3:2a:75:dc:5b:af:ee:b1:77:15:07:58:7b:
                    db:b4:2a:d7:4d:bb:9b:65:f8:73:6a:21:3f:59:a0:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:E8:17:22:71:54:3E:80:30:92:60:DE:40:DB:3F:F8:7B:89:39
            X509v3 Authority Key Identifier:
                keyid:B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:bd:bb:0b:fb:30:87:63:8e:d0:c8:d7:1b:64:a0:12:c4:
         d6:df:cf:7c:44:4b:60:49:e9:67:4f:50:c6:89:f2:45:76:ee:
         55:fe:98:ed:90:7c:58:e9:08:2e:1a:b1:02:29:23:05:f7:44:
         a2:f4:4e:65:cf:06:79:ab:77:97:e0:09:bf:68:09:92:af:81:
         c7:22:db:54:7a:65:94:9c:c9:72:d8:40:72:68:c6:8e:c0:ac:
         7a:a5:49:1b:6b:b2:6a:02:0d:b1:af:a1:83:a5:fe:58:cd:c3:
         a4:19:f4:7d:fa:e5:10:a2:68:26:ef:ed:db:ac:ee:a5:d9:32:
         30:e4:28:e9:be:73:3d:57:e7:07:9a:35:ea:d5:40:53:ef:b0:
         a0:ed:32:2b:00:6e:3d:55:61:22:26:82:36:69:93:ed:d1:7f:
         c4:c0:bb:68:30:0e:25:f1:8c:1c:d4:77:08:4a:e8:82:02:0a:
         b4:3b:24:dd:ed:5c:fc:73:34:4f:f5:d0:90:cb:64:84:81:5a:
         ac:ee:b7:d4:8a:84:a2:e9:2c:f8:8e:2f:56:a6:ae:b5:c2:43:
         52:8d:fa:e2:51:7b:3c:3e:46:42:99:1c:7d:3a:e6:9b:31:5e:
         2e:f0:a8:4d:a7:d5:4f:34:49:dd:47:2f:b0:2d:c5:94:d5:0c:
         21:4c:61:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----