Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft
File:                     68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft (raw, json)
Hash identifier:          NRbp166Tql+fPiHdEaBKrK1fhscoSmRHHsrEpHzIkYI=
Subject key identifier:   5E:E7:08:B3:FE:B8:9F:B4:30:DE:DD:F8:6D:BC:76:11:40:FB:F6:A6
Authority key identifier: 68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C
Certificate issuer:       /CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C
Certificate serial:       03BF66AE1931488D1EB91FE50ACAB29FD942744E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft
Manifest number:          02FA
Signing time:             Fri 30 Oct 2026 22:01:22 +0000
Manifest this update:     Fri 30 Oct 2026 21:56:22 +0000
Manifest next update:     Sun 01 Nov 2026 01:24:22 +0000
Files and hashes:         1: 34352e3233362e3230342e302f32322d3232203d3e20323638323435.roa (hash: JVItFV+lIcVSUReNEeTarUErv4mS1dVjoCe80ASHw6s=)
                          2: 323830343a346533303a3a2f33322d3332203d3e20323638323435.roa (hash: WNs0g7bvyzm07UxiX886evYVYRWBLo3Im4+Wy0wlH0o=)
                          3: 68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl (hash: MeToZui1yB+MnsBFdFGPlDdhJ17UlnEEDuOaVG3F3vM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl
                          rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 01:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bf:66:ae:19:31:48:8d:1e:b9:1f:e5:0a:ca:b2:9f:d9:42:74:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68381282EE8DA4C004BD63329B8F39CB17F85C0C
        Validity
            Not Before: Oct 30 21:56:22 2026 GMT
            Not After : Nov  1 01:24:22 2026 GMT
        Subject: CN=5EE708B3FEB89FB430DEDDF86DBC761140FBF6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:fd:bd:39:e2:c1:93:81:d2:cb:32:f6:2b:
                    b0:ee:31:2f:29:20:af:9a:d0:07:82:ec:7c:55:89:
                    e8:54:d9:ee:3c:3a:a2:75:3c:49:3d:7e:05:f6:64:
                    1d:bd:da:d9:98:64:de:2c:64:b0:cd:5c:59:68:1d:
                    c4:f8:d4:b9:85:6f:25:44:b7:56:20:52:2f:fd:ff:
                    cb:c6:a7:82:22:ba:db:2d:c4:92:8a:5c:1d:9f:a1:
                    e7:da:19:02:62:98:79:98:ad:03:a3:04:3b:3c:01:
                    3f:f0:f6:c3:da:64:40:eb:28:86:17:b1:e2:a5:44:
                    73:9b:bf:7f:d7:b6:97:31:1a:0a:29:d3:5b:33:d0:
                    39:be:53:49:07:b6:4d:bd:86:96:f7:cd:2c:11:79:
                    4e:b4:f3:a0:6e:88:bd:57:ee:ea:8b:e0:22:4e:b0:
                    d0:67:df:ff:e9:4e:74:77:da:b4:bc:ea:66:ce:99:
                    61:3a:02:ab:de:2c:15:e0:28:32:fc:e7:fe:45:40:
                    13:55:40:63:8c:98:8f:63:ea:7e:c7:1e:88:fe:19:
                    44:52:aa:b9:6b:78:99:a3:e2:d1:24:2a:6c:3e:13:
                    5e:b2:46:47:b2:fc:c7:26:3c:74:1e:c7:94:32:87:
                    8c:f5:04:a1:b0:96:c4:a9:b2:c7:db:ad:a3:81:57:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:08:B3:FE:B8:9F:B4:30:DE:DD:F8:6D:BC:76:11:40:FB:F6:A6
            X509v3 Authority Key Identifier:
                keyid:68:38:12:82:EE:8D:A4:C0:04:BD:63:32:9B:8F:39:CB:17:F8:5C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68381282EE8DA4C004BD63329B8F39CB17F85C0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/0/68381282EE8DA4C004BD63329B8F39CB17F85C0C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:3f:ab:19:09:91:a4:a6:09:7a:aa:3a:97:51:69:d3:61:
         79:a0:89:26:3f:10:8e:bb:ba:49:dc:43:3d:6a:4d:c2:ed:aa:
         90:35:64:c4:bb:4b:9f:df:0e:7f:d1:18:29:f6:b0:10:44:e7:
         fd:3f:3c:39:5a:59:07:38:4f:54:2f:1f:4d:8e:30:b5:5f:f2:
         36:46:87:97:34:db:41:17:e8:cc:d8:eb:39:d6:ca:bb:f7:df:
         81:64:cf:28:26:0a:d6:97:bd:c9:92:3d:75:d7:ca:4a:bf:74:
         45:30:ee:df:e2:24:ca:3e:63:23:ad:d0:48:0c:43:74:95:9b:
         49:17:ba:f6:7c:7f:d9:1b:f1:8a:df:92:cf:39:0e:2a:2e:95:
         f3:55:d2:66:76:b3:f1:3a:ff:b1:7a:ab:b9:37:2c:7e:48:56:
         6b:41:e3:15:f2:51:fd:db:7d:4f:58:cf:c5:50:5a:8c:e3:ee:
         ab:ea:b9:4b:f1:a7:66:c4:29:a7:dd:da:78:69:73:fd:1a:98:
         c5:44:d9:ef:ef:a0:09:f0:bb:aa:ac:c1:52:e3:70:a1:cb:32:
         30:e5:07:f6:48:e1:2d:a1:2f:9b:e0:6f:6d:b9:65:e1:be:79:
         e7:db:a6:78:d0:6b:30:5b:8d:fd:bd:3e:ae:86:2a:69:f2:3f:
         4f:7d:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:05:13 2026 by rpki-client