Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File:                     2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier:          Rq6wOLZfQefdd9bzmRVKDorCFhLQavUPFdTzeVWxVLw=
Subject key identifier:   1D:0B:35:E2:78:78:2B:3E:7F:E6:DE:1E:07:3A:6B:FD:B5:48:61:1D
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       5B8C0B5BF7BB82EDDF6B602B022E81A8B49C140B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number:          04D5
Signing time:             Sat 31 Oct 2026 13:17:35 +0000
Manifest this update:     Sat 31 Oct 2026 13:12:35 +0000
Manifest next update:     Sun 01 Nov 2026 17:07:35 +0000
Files and hashes:         1: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: s/6BsoFV6DlEj43A1uUgBuwsEY01eiulnkS4P6GXEro=)
                          2: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: 0CLnFOABznFCgpqED1YRRgWwVd9EY7KFJPcomWKy2Xw=)
                          3: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: waDWoGUrewSIWVtjdn3kZ/ri7CRdPTZeWGcZu8gPHW0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
                          rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 17:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8c:0b:5b:f7:bb:82:ed:df:6b:60:2b:02:2e:81:a8:b4:9c:14:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Oct 31 13:12:35 2026 GMT
            Not After : Nov  1 17:07:35 2026 GMT
        Subject: CN=1D0B35E278782B3E7FE6DE1E073A6BFDB548611D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:cf:40:23:a5:b4:3c:e0:76:60:e8:3c:28:
                    4f:76:bb:4e:7a:a5:c8:81:3c:20:3e:29:44:4e:a6:
                    a8:12:95:c6:c2:1e:a1:ac:62:cd:31:c6:08:e1:8b:
                    6d:9b:40:b6:70:59:4b:9c:77:32:f5:19:1f:a8:66:
                    2c:97:3b:0b:76:6d:5e:a5:16:06:50:10:1f:7d:67:
                    6e:07:7d:8f:9d:70:0e:8b:94:7c:fd:11:f7:d3:97:
                    91:20:dc:ac:53:3d:c4:0c:79:bf:a9:8b:28:8f:51:
                    78:d1:90:ad:05:d7:84:b3:35:3a:06:14:ac:9c:2a:
                    38:0b:7a:7b:2e:b7:4c:db:a7:ec:a7:6b:15:16:62:
                    69:bb:cc:9a:bc:c5:7e:fa:e1:85:a4:ed:d6:75:bd:
                    ca:ba:d3:a6:da:42:ac:61:de:ff:8d:27:b4:a0:62:
                    cf:96:e8:45:93:63:33:87:0c:ce:ef:09:96:49:f8:
                    72:9b:03:1a:b1:84:ea:12:82:0d:23:2b:14:79:50:
                    1e:be:c9:90:e4:cd:3b:c7:ce:4a:c9:85:90:0c:5e:
                    2e:3e:17:db:3d:71:51:5a:68:2a:81:4b:21:ca:54:
                    ae:47:00:27:c0:c4:a8:b8:a6:1d:12:02:91:1b:0c:
                    3a:c6:e0:cf:73:ea:76:1a:83:e9:da:3f:8f:28:33:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0B:35:E2:78:78:2B:3E:7F:E6:DE:1E:07:3A:6B:FD:B5:48:61:1D
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:44:8a:d7:73:65:47:7e:86:53:4b:cc:3b:5e:fd:13:ef:1b:
         8e:ec:0d:67:f4:69:fa:fc:ca:cc:f9:c7:8f:3a:bb:40:56:a7:
         01:4e:ce:c5:67:a2:a1:bc:f4:b1:ce:0f:eb:61:32:2e:31:25:
         99:81:3d:13:0b:91:ad:f0:c2:c6:24:bc:af:3d:af:ef:b7:fb:
         09:b4:57:bb:c0:7a:5e:c7:bf:3a:c3:b2:78:ab:70:a5:0c:65:
         de:82:06:21:e1:89:00:c0:37:e1:eb:8a:25:83:14:bb:ab:39:
         52:b4:72:66:dc:03:1c:80:26:ab:ef:99:3a:f8:87:5e:60:ce:
         82:25:c3:fc:7d:d6:30:b6:56:7a:94:0d:2b:91:1a:c4:eb:74:
         da:8f:ea:f4:4e:aa:16:f0:5e:83:c0:47:34:28:b5:a4:5e:45:
         19:97:97:19:7c:2a:cd:81:c7:51:ef:d3:75:93:6c:34:e5:e3:
         fb:92:c6:5a:b4:bc:45:34:f2:b1:8e:03:19:2f:b6:a8:da:49:
         6f:1e:85:d7:af:13:eb:ed:09:70:dd:f4:16:dd:79:ed:a0:d2:
         ff:52:ff:f7:12:af:c7:10:8e:64:4f:d4:22:29:5a:56:bd:43:
         bd:c0:e3:09:54:df:aa:bf:95:7b:49:ce:0e:90:ba:45:66:53:
         44:93:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----