Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft
File:                     2A549864E803339874E3627EE1589BC2DA6DE41A.mft (raw, json)
Hash identifier:          OHHj9H4kA6L9K7LiLk8qWfCbCGpJE0pca9ckm/9psao=
Subject key identifier:   8E:70:CA:F1:35:5C:9F:2A:5C:24:A7:30:F2:AB:E8:6E:F3:00:E5:A9
Authority key identifier: 2A:54:98:64:E8:03:33:98:74:E3:62:7E:E1:58:9B:C2:DA:6D:E4:1A
Certificate issuer:       /CN=2A549864E803339874E3627EE1589BC2DA6DE41A
Certificate serial:       0D4CFE90C0012179BBF9540AA46F2DC93C2EADBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A549864E803339874E3627EE1589BC2DA6DE41A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft
Manifest number:          10
Signing time:             Tue 13 Oct 2026 04:10:36 +0000
Manifest this update:     Tue 13 Oct 2026 04:05:36 +0000
Manifest next update:     Wed 14 Oct 2026 05:08:36 +0000
Files and hashes:         1: 323830343a393965633a3a2f33322d3438203d3e20323735383133.roa (hash: yBV+9qCBW7Co3twX6CM1QRHteIY0vIW2wWIKa8smgxI=)
                          2: 2A549864E803339874E3627EE1589BC2DA6DE41A.crl (hash: IFC617fillsFbhZs4LwP8PPAQuasp44TaqU+i3MrSFg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.crl
                          rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A549864E803339874E3627EE1589BC2DA6DE41A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 05:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4c:fe:90:c0:01:21:79:bb:f9:54:0a:a4:6f:2d:c9:3c:2e:ad:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A549864E803339874E3627EE1589BC2DA6DE41A
        Validity
            Not Before: Oct 13 04:05:36 2026 GMT
            Not After : Oct 14 05:08:36 2026 GMT
        Subject: CN=8E70CAF1355C9F2A5C24A730F2ABE86EF300E5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:56:63:9d:0e:97:48:9b:45:8f:09:e7:b6:
                    eb:01:25:72:62:e0:0f:34:10:ea:34:c4:0f:ff:65:
                    4c:3c:a0:b6:be:5c:7d:d7:2e:0e:9f:7f:4f:45:f4:
                    6e:29:e5:cc:11:87:11:20:e7:bc:e1:67:0d:3a:9f:
                    ba:a8:54:e0:95:32:f2:c9:99:13:ef:3c:8a:16:3b:
                    f7:72:a1:2e:88:81:49:a5:1b:0b:44:bc:ad:e3:54:
                    07:54:ce:8a:fb:fd:e8:77:3a:42:35:c3:e6:9e:53:
                    96:43:ac:d3:d1:b1:3b:4e:b5:89:95:c4:77:9e:89:
                    56:d1:14:dc:91:d4:7a:18:ad:5f:9c:8e:9d:f5:0a:
                    e8:c0:2a:6f:9a:19:12:16:6f:d2:ef:35:2d:14:e8:
                    09:9a:62:fa:e4:4d:79:b0:b3:63:be:ad:85:a7:39:
                    57:bf:6a:92:38:f0:44:4d:b1:4e:03:47:be:21:6c:
                    d2:7d:cd:4d:eb:ca:4b:35:36:75:34:dc:31:b0:b0:
                    31:dc:06:3b:e1:94:e4:4f:ed:85:bd:8b:d9:93:da:
                    6c:22:88:f4:0e:a3:64:e9:19:f3:87:69:76:d6:f6:
                    f0:79:09:ef:ff:15:2c:e1:d4:0e:ad:6f:de:ee:54:
                    71:17:fb:4f:cd:52:a6:78:01:b2:96:35:92:32:94:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:70:CA:F1:35:5C:9F:2A:5C:24:A7:30:F2:AB:E8:6E:F3:00:E5:A9
            X509v3 Authority Key Identifier:
                keyid:2A:54:98:64:E8:03:33:98:74:E3:62:7E:E1:58:9B:C2:DA:6D:E4:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A549864E803339874E3627EE1589BC2DA6DE41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzPKPJFm2vyPbuYjkcPX1KYE3C8ssz9ghuX4ZEFHGXsf/0/2A549864E803339874E3627EE1589BC2DA6DE41A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:70:20:ac:44:4c:c0:8e:53:ce:d4:51:88:90:f9:ed:65:
         d3:18:0f:39:aa:1a:23:b7:26:60:d0:4f:dd:d0:9e:97:e1:d6:
         87:63:d3:bc:e6:87:b0:de:01:b9:2e:f4:7d:7c:40:9d:95:8c:
         2d:c3:c2:c5:59:9c:2d:21:4a:ef:cd:89:9c:bb:ac:8c:1b:6d:
         ad:23:27:f6:aa:ce:38:5d:44:be:41:be:76:1d:db:52:5b:4f:
         ea:b0:05:4a:0a:2f:f7:20:66:f6:97:90:f9:60:09:86:ae:c4:
         36:fa:b5:bc:bd:41:0e:e9:dd:eb:82:ca:1e:81:bb:fc:ce:57:
         27:e5:fd:e9:64:1e:ee:d8:0c:9f:26:c2:10:10:c7:02:2c:e0:
         0d:33:0b:ff:ca:5a:fc:92:5f:d6:39:ec:71:80:a0:7a:6a:90:
         f2:46:4e:d8:5e:77:ca:f7:45:48:34:96:04:c6:98:6f:7c:50:
         db:6d:e8:8d:11:d9:4d:29:a1:ea:8d:4b:04:dd:16:fa:43:16:
         cd:dc:df:c3:00:1a:5e:d9:25:27:b3:c9:e9:be:f1:d1:97:89:
         4f:87:09:d8:0c:3b:f4:a8:b3:e0:ed:36:06:3b:d4:b7:8d:21:
         4c:58:74:4a:d3:31:a0:59:f0:d0:ad:9e:a5:6a:fa:d6:52:1b:
         72:82:b1:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDUz+kMABIXm7+VQKpG8tyTwurb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE1NDk4NjRFODAzMzM5ODc0RTM2MjdFRTE1ODlCQzJE
QTZERTQxQTAeFw0yNjEwMTMwNDA1MzZaFw0yNjEwMTQwNTA4MzZaMDMxMTAvBgNV
BAMTKDhFNzBDQUYxMzU1QzlGMkE1QzI0QTczMEYyQUJFODZFRjMwMEU1QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDallZjnQ6XSJtFjwnntusBJXJi
4A80EOo0xA//ZUw8oLa+XH3XLg6ff09F9G4p5cwRhxEg57zhZw06n7qoVOCVMvLJ
mRPvPIoWO/dyoS6IgUmlGwtEvK3jVAdUzor7/eh3OkI1w+aeU5ZDrNPRsTtOtYmV
xHeeiVbRFNyR1HoYrV+cjp31CujAKm+aGRIWb9LvNS0U6AmaYvrkTXmws2O+rYWn
OVe/apI48ERNsU4DR74hbNJ9zU3ryks1NnU03DGwsDHcBjvhlORP7YW9i9mT2mwi
iPQOo2TpGfOHaXbW9vB5Ce//FSzh1A6tb97uVHEX+0/NUqZ4AbKWNZIylNRFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjnDK8TVcnypcJKcw8qvobvMA5akwHwYDVR0j
BBgwFoAUKlSYZOgDM5h042J+4Vibwtpt5BowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pQS1BKRm0ydnlQYnVZamtjUFgxS1lFM0M4c3N6OWdodVg0WkVGSEdY
c2YvMC8yQTU0OTg2NEU4MDMzMzk4NzRFMzYyN0VFMTU4OUJDMkRBNkRFNDFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNTQ5ODY0RTgwMzMzOTg3
NEUzNjI3RUUxNTg5QkMyREE2REU0MUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R3pQS1BKRm0ydnlQYnVZamtjUFgxS1lFM0M4c3N6OWdodVg0WkVGSEdYc2YvMC8y
QTU0OTg2NEU4MDMzMzk4NzRFMzYyN0VFMTU4OUJDMkRBNkRFNDFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmlZwIKxETMCOU87UUYiQ+e1l0xgPOaoaI7cmYNBP3dCel+HWh2PTvOaHsN4B
uS70fXxAnZWMLcPCxVmcLSFK782JnLusjBttrSMn9qrOOF1EvkG+dh3bUltP6rAF
Sgov9yBm9peQ+WAJhq7ENvq1vL1BDund64LKHoG7/M5XJ+X96WQe7tgMnybCEBDH
AizgDTML/8pa/JJf1jnscYCgemqQ8kZO2F53yvdFSDSWBMaYb3xQ223ojRHZTSmh
6o1LBN0W+kMWzdzfwwAaXtklJ7PJ6b7x0ZeJT4cJ2Aw79Kiz4O02BjvUt40hTFh0
StMxoFnw0K2epWr61lIbcoKxJw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:45:40 2026 by rpki-client