Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File:                     B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier:          kg1RrnAPj4Yne0IHdM6MCuxamVNZc22wiTFh8KjOxiI=
Subject key identifier:   3B:AD:80:00:A1:DF:4C:9B:33:FC:15:81:60:78:20:1F:A3:04:B6:59
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       4F145DB01F3049982EE3C563306A2701638E04B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number:          04DF
Signing time:             Sun 01 Nov 2026 05:28:19 +0000
Manifest this update:     Sun 01 Nov 2026 05:23:19 +0000
Manifest next update:     Mon 02 Nov 2026 05:50:19 +0000
Files and hashes:         1: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: E0mm5H41TvScwOcOe5w7cjdX1EEr8NIanmEU/MMieS4=)
                          2: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: PKGVa0L+swMi+O3jto7r5DSG35H4tJns957ocZd1fek=)
                          3: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: VYej78JcpqPEEZLXLzhwSPB2VlOIApr/1pd6s3ifVWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:14:5d:b0:1f:30:49:98:2e:e3:c5:63:30:6a:27:01:63:8e:04:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Nov  1 05:23:19 2026 GMT
            Not After : Nov  2 05:50:19 2026 GMT
        Subject: CN=3BAD8000A1DF4C9B33FC15816078201FA304B659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:85:bb:9d:8b:62:2f:46:bc:81:5d:f6:76:
                    45:7c:07:d8:74:e9:1a:ca:89:9d:d5:7a:e9:31:32:
                    1d:4f:f5:96:d2:8f:6b:60:09:f0:95:b8:1a:c2:3b:
                    e6:33:b6:f0:57:f7:c2:e0:59:f9:b7:d5:88:ab:2b:
                    bb:90:5d:b8:69:77:0d:4a:ec:29:ed:9a:2d:a6:85:
                    c0:58:d3:0f:43:5e:d3:6b:45:76:33:47:3a:7c:e3:
                    f7:20:cb:23:ae:55:6c:f3:0c:3b:a5:8d:9d:9d:91:
                    b7:fd:f1:9e:5a:39:5a:96:5f:29:58:31:64:7e:75:
                    a8:75:45:b4:9b:fb:d8:c0:2b:67:a1:2f:31:38:34:
                    92:8f:91:56:b3:90:78:9a:97:af:0f:37:4a:cd:6a:
                    15:cd:8e:7a:0a:31:ac:e2:5a:dd:bb:a5:55:f5:a8:
                    ea:ae:c6:de:08:4b:d4:e4:a6:4b:20:be:10:9f:86:
                    41:76:8d:a0:ef:ad:33:fd:7d:8c:c9:39:d8:bb:7f:
                    e0:c0:20:c2:e2:1f:7a:ae:c4:a4:01:9d:d6:ea:70:
                    1c:59:1e:40:fe:cc:e8:d8:c2:6f:ed:56:66:9e:5d:
                    56:c0:e5:8f:78:62:a9:fe:fb:79:4f:05:9d:88:cd:
                    b9:2b:33:86:4c:cf:40:aa:8d:59:20:7b:71:59:d8:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:80:00:A1:DF:4C:9B:33:FC:15:81:60:78:20:1F:A3:04:B6:59
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:56:4a:86:39:a5:fa:21:a1:d5:37:c3:af:fa:85:66:4e:93:
         00:60:9a:7b:d0:77:e0:23:de:52:ad:78:25:be:5b:df:62:44:
         ed:6b:36:5c:a8:10:ce:63:39:85:b3:15:65:91:29:57:14:79:
         c1:ab:73:9e:86:d7:53:34:78:c8:0c:ff:63:c1:b7:56:3c:d5:
         b1:17:a3:d2:bd:a3:67:e3:42:29:9c:42:8d:4c:4e:6a:df:f4:
         42:15:03:01:19:5f:70:53:80:a6:12:c7:06:6d:77:6f:fa:ad:
         43:b2:8f:a2:18:2b:c8:ef:8b:ed:c2:1d:38:ec:e4:72:ef:54:
         ef:52:f8:1a:37:e4:20:9a:eb:56:75:7e:8a:8c:6f:b4:72:74:
         16:7c:5e:d6:b8:e0:c6:b4:4e:da:50:89:b7:9c:b2:ae:09:d4:
         27:58:37:30:01:b0:7f:1e:71:ef:95:1a:97:0e:73:f8:a1:ad:
         af:5a:8f:6f:33:5c:fa:9c:2e:9d:3b:c7:98:ce:ce:e2:6d:a8:
         0e:ce:5f:0d:02:1b:6e:3d:44:63:56:63:2d:ce:5b:b7:87:0f:
         c0:79:ce:c6:ea:85:eb:f5:6a:c5:eb:0a:eb:7b:6b:8e:d0:92:
         ca:7d:b8:47:06:8a:af:d8:2d:17:fd:21:b2:a1:04:06:80:03:
         f5:e4:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----