Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
File:                     A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft (raw, json)
Hash identifier:          EfGM6u+gBIazo5AP6ftHPtFe/R7KEl0qDATEkstjTfw=
Subject key identifier:   74:E5:FB:AF:0B:A6:42:1B:5C:85:60:80:F0:00:BB:5E:9A:59:E6:0B
Authority key identifier: A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07
Certificate issuer:       /CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
Certificate serial:       2656D3FAF1653E7BFD064B915FD627D9025BD818
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
Manifest number:          53
Signing time:             Wed 28 Oct 2026 11:46:50 +0000
Manifest this update:     Wed 28 Oct 2026 11:41:50 +0000
Manifest next update:     Thu 29 Oct 2026 12:47:50 +0000
Files and hashes:         1: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: tordLdfSPY/TsAEGrpNnLj2I2gTFnUFq1OxqhuGQio4=)
                          2: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 2xZ6f8licPKZN8HjAZ6LYkJH4paB6xtcY0S1ND1oRQY=)
                          3: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: OwPdljTSyfAiT9kmulHzFCTC5RjM8P3fypRZLkYr81E=)
                          4: A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl (hash: BHRvdW9ZtiuPd/XWbY+LwxcIRVTflM6oCrnTbcT9NgQ=)
                          5: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: 14JNPLlGNe4bCAFFnTkQkEvPJfNnZh/7wEKHWuKM5LU=)
                          6: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: FdBdwU/n9JawoRw4eXvf6ovePqNnMdPh/3kLmZpQrM0=)
                          7: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: HXVZ+nq/8qA+MRp7WOSzg9zbOtvgYNZdsaFrEZ3kXLE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 12:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:56:d3:fa:f1:65:3e:7b:fd:06:4b:91:5f:d6:27:d9:02:5b:d8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
        Validity
            Not Before: Oct 28 11:41:50 2026 GMT
            Not After : Oct 29 12:47:50 2026 GMT
        Subject: CN=74E5FBAF0BA6421B5C856080F000BB5E9A59E60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:6a:c4:00:5a:81:73:b3:0e:96:ba:d6:da:
                    41:a6:51:47:a8:92:d2:71:9b:ef:1a:e5:28:05:0e:
                    cc:ec:5a:b8:3a:a8:99:b6:ac:5f:9e:e3:b8:23:f9:
                    40:63:91:2c:83:e5:f1:60:ea:5b:04:b6:48:23:2e:
                    39:0c:37:5e:c8:d0:5f:d3:15:86:09:c3:f2:02:f6:
                    32:3d:49:77:18:2f:0a:a0:cb:ae:ed:fd:63:6a:58:
                    f4:c6:3f:70:54:ca:31:1b:ad:d8:fa:8b:dc:c5:d7:
                    b1:63:37:7d:64:b8:93:25:f1:b7:db:2f:b3:3c:6f:
                    e9:f8:ed:80:a0:90:ca:e3:8a:9b:20:36:91:03:36:
                    61:83:21:f7:2e:4b:23:44:42:bb:98:6a:28:b9:a8:
                    c1:9e:61:7a:c7:84:32:2c:90:bc:14:33:f9:ff:57:
                    b5:5b:a3:e1:41:9b:93:8f:57:1a:92:c2:0a:c6:d2:
                    21:bc:8b:24:9e:03:e5:90:16:07:37:7d:a2:17:12:
                    ce:68:5c:8a:eb:d4:dd:3c:00:a8:9b:c4:8c:64:41:
                    ec:32:25:0b:db:d1:5f:61:77:1f:42:77:36:be:6a:
                    87:86:9d:ee:79:54:e0:1c:a2:75:24:07:f6:ec:b5:
                    dc:66:62:3c:c6:82:02:f6:ca:71:c3:f5:52:5c:e2:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E5:FB:AF:0B:A6:42:1B:5C:85:60:80:F0:00:BB:5E:9A:59:E6:0B
            X509v3 Authority Key Identifier:
                keyid:A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:78:f2:fc:a8:4c:c9:a9:f1:7f:f7:b8:e5:ae:08:a2:8f:
         96:67:93:de:cd:26:db:59:ad:6b:cb:e6:a8:b6:74:6a:e1:bc:
         ef:f3:7c:8c:67:63:27:26:03:6a:d4:63:44:ab:47:36:91:b5:
         c0:cb:93:ee:e5:c9:c1:3d:da:c7:d5:a6:01:b5:1b:25:7f:7e:
         cc:2a:d5:55:ac:45:ad:8d:f6:1b:46:dd:0c:a7:d0:c0:2c:94:
         e0:df:87:5c:71:2a:5c:35:26:30:18:4e:8f:a2:53:be:e7:1e:
         1a:34:27:1c:0a:86:8c:b9:64:78:ca:9f:45:29:5e:ff:8f:db:
         8e:a5:2c:30:18:cf:2d:29:b4:9d:97:0f:ea:2e:28:63:9a:09:
         af:19:82:46:ae:62:33:03:e7:d6:18:f9:6b:10:ec:16:e2:90:
         b3:18:cf:ef:a5:fc:75:72:d8:ee:db:87:8c:a9:06:e9:77:b4:
         1d:8b:19:ac:e8:2a:3f:36:3e:fd:50:1f:47:c2:72:f4:92:d1:
         94:eb:65:68:ae:3b:2d:7d:1d:f2:b1:ae:6b:b1:01:67:4b:de:
         50:41:83:5f:c2:0a:1e:fd:35:3b:de:ab:48:fe:2f:7a:f4:d4:
         39:18:de:87:99:58:f7:88:77:05:82:f8:be:7e:1a:a4:22:b6:
         2d:8f:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:51:08 2026 by rpki-client