Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
File:                     8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft (raw, json)
Hash identifier:          PjobDDKiaiX4HcHuvCzv+HH22/mqaFStp4vK86Hgetg=
Subject key identifier:   BA:F3:E5:6F:13:4B:5A:D2:3B:D9:68:D6:8A:5F:7A:B7:F5:AB:95:6B
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Certificate issuer:       /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial:       60CE44E094F0E74209957C57FB6A6F9FF50C9F02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
Manifest number:          04DA
Signing time:             Mon 19 Oct 2026 18:20:13 +0000
Manifest this update:     Mon 19 Oct 2026 18:15:13 +0000
Manifest next update:     Tue 20 Oct 2026 20:11:13 +0000
Files and hashes:         1: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (hash: Kbpv8kUnzf5az+pCSyJ9NVCmqhxQYv9hK3Ucdq4YVWU=)
                          2: 3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (hash: 4p8TTYA6CohQDNLOFM1JNtmKJl01U4tB/4HuWZa5Xv8=)
                          3: 3133312e302e34342e302f32322d3234203d3e20313938393439.roa (hash: KL/RirT659qr2cYiYysDMZCYu1/dbH1Lr0UF+97slQ8=)
                          4: 3137372e38362e33322e302f32322d3234203d3e20313938393439.roa (hash: 8tGsYATeBYGcrz62TMStiMnlW9X911Vo1z1doJxibOo=)
                          5: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl (hash: VrSJCSk5BmQNNnnt6B6dghIDAL5op7Gj+JtMT/XEjE8=)
                          6: 323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (hash: 387xzk9amVofYO5ZMB/wMAqJKQSe9wFogKsEwXMaigY=)
                          7: 323830343a3732303a3a2f33322d3438203d3e20313938393439.roa (hash: 7hN8AzuP0FzNJCEVeJslaqlAsudTs85gl0B4zSn/YFY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
                          rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 20:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ce:44:e0:94:f0:e7:42:09:95:7c:57:fb:6a:6f:9f:f5:0c:9f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
        Validity
            Not Before: Oct 19 18:15:13 2026 GMT
            Not After : Oct 20 20:11:13 2026 GMT
        Subject: CN=BAF3E56F134B5AD23BD968D68A5F7AB7F5AB956B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:c3:70:1e:c9:25:71:dc:31:fc:0e:1c:ec:
                    36:25:39:ef:99:6b:d3:cf:9b:6d:9d:4c:1b:84:4b:
                    1c:fa:70:92:e1:e2:3f:5e:95:71:4c:33:1a:3a:93:
                    50:e3:cb:b7:2c:07:68:5a:63:2a:fe:f6:2b:d9:01:
                    a5:be:8c:7f:86:63:1f:26:3b:08:22:29:18:42:18:
                    09:a0:65:eb:32:73:af:35:90:bd:79:b7:5d:ef:df:
                    9a:65:e5:2b:98:84:d0:eb:c3:56:09:c5:f2:93:1e:
                    53:e3:de:1a:ae:07:d2:a9:1f:67:c1:47:d0:18:c3:
                    35:bd:0d:5a:3d:e1:e6:57:10:21:bc:fc:64:85:c3:
                    1e:ad:7c:c6:9d:66:08:f7:3d:b7:30:e4:1a:41:2c:
                    87:1f:6b:3b:6c:b0:e2:ac:ba:8f:43:e7:16:9c:d9:
                    9a:5b:13:c4:fd:b5:25:b2:99:c6:cd:42:b1:29:c4:
                    3d:9e:b1:c7:94:55:85:e3:a5:90:26:4a:2f:85:9c:
                    46:2b:a7:ae:90:9b:ca:f5:c6:3e:63:4f:a4:57:0c:
                    54:96:1e:ef:12:0f:7d:6d:6f:ec:62:9d:d1:c3:c5:
                    8f:73:d8:26:ea:e8:4a:08:85:ee:47:62:05:c3:e1:
                    56:dc:ed:a7:52:51:48:78:4b:b8:52:66:a4:98:49:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:E5:6F:13:4B:5A:D2:3B:D9:68:D6:8A:5F:7A:B7:F5:AB:95:6B
            X509v3 Authority Key Identifier:
                keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:27:ed:68:05:5f:e0:4a:9e:7d:f7:ad:5b:4d:c4:ac:6f:93:
         67:39:99:e7:9f:ff:5a:7b:79:54:d3:fa:83:fa:ce:3a:7e:b3:
         47:4c:41:47:05:9b:ae:b5:b2:9c:68:9b:dd:5b:12:7f:3e:66:
         a4:93:0b:dd:83:b1:2e:27:81:7e:c6:e0:62:12:aa:76:a0:04:
         76:6b:e3:d5:b8:b0:9d:46:cc:42:b6:66:08:ea:bc:e8:5e:48:
         32:52:bb:1f:c2:a3:b8:d2:b9:be:6f:3c:4c:b2:15:65:cc:08:
         b2:95:8d:f7:ee:54:f9:52:1c:2a:06:a4:5a:db:b7:0c:16:72:
         5c:53:c4:62:ad:49:f2:02:c0:cd:1a:f5:dc:16:aa:d0:90:42:
         db:b5:b3:aa:8b:6e:db:39:61:23:7c:b3:1e:d2:dd:22:60:c3:
         50:6d:15:e5:c3:ba:13:47:71:60:4e:63:05:c9:fd:52:a3:53:
         ac:e0:b4:ad:bd:12:f6:c1:7d:3d:bd:06:75:19:28:01:18:5b:
         93:b3:d7:e6:a7:22:f7:60:0e:93:d0:ae:51:d5:98:19:79:3e:
         01:9c:04:1b:56:25:22:d0:c8:48:a7:dc:43:26:75:71:a1:1c:
         c7:3d:cc:cd:4a:37:a3:60:f7:f0:ca:b4:36:ad:ca:d9:5f:f5:
         a1:fd:0a:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYM5E4JTw50IJlXxX+2pvn/UMnwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2RkQ3M0I3RTI0RTcwNzcxMkVDMDA2MDQ3MUQ0NkVE
REMxRDBBNTAeFw0yNjEwMTkxODE1MTNaFw0yNjEwMjAyMDExMTNaMDMxMTAvBgNV
BAMTKEJBRjNFNTZGMTM0QjVBRDIzQkQ5NjhENjhBNUY3QUI3RjVBQjk1NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGE8NwHsklcdwx/A4c7DYlOe+Z
a9PPm22dTBuESxz6cJLh4j9elXFMMxo6k1Djy7csB2haYyr+9ivZAaW+jH+GYx8m
OwgiKRhCGAmgZesyc681kL15t13v35pl5SuYhNDrw1YJxfKTHlPj3hquB9KpH2fB
R9AYwzW9DVo94eZXECG8/GSFwx6tfMadZgj3Pbcw5BpBLIcfaztssOKsuo9D5xac
2ZpbE8T9tSWymcbNQrEpxD2esceUVYXjpZAmSi+FnEYrp66Qm8r1xj5jT6RXDFSW
Hu8SD31tb+xindHDxY9z2Cbq6EoIhe5HYgXD4Vbc7adSUUh4S7hSZqSYSa3JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuvPlbxNLWtI72WjWil96t/WrlWswHwYDVR0j
BBgwFoAUjG/XO34k5wdxLsAGBHHUbt3B0KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlN
OGUvMS84QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkZENzNCN0UyNEU3MDc3
MTJFQzAwNjA0NzFENDZFRERDMUQwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlNOGUvMS84
QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2CftaAVf4EqeffetW03ErG+TZzmZ55//Wnt5VNP6g/rOOn6zR0xBRwWbrrWy
nGib3VsSfz5mpJML3YOxLieBfsbgYhKqdqAEdmvj1biwnUbMQrZmCOq86F5IMlK7
H8KjuNK5vm88TLIVZcwIspWN9+5U+VIcKgakWtu3DBZyXFPEYq1J8gLAzRr13Baq
0JBC27Wzqotu2zlhI3yzHtLdImDDUG0V5cO6E0dxYE5jBcn9UqNTrOC0rb0S9sF9
Pb0GdRkoARhbk7PX5qci92AOk9CuUdWYGXk+AZwEG1YlItDISKfcQyZ1caEcxz3M
zUo3o2D38Mq0Nq3K2V/1of0KSg==
-----END CERTIFICATE-----