Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
File:                     713D42750562117CA0DB7D96A623898EF91F6ADA.mft (raw, json)
Hash identifier:          Uz7WNHc9ulBqBlQ2PH1ANguePrj6rEUO+biYMPhCLi0=
Subject key identifier:   92:7C:CE:96:71:6E:29:C4:5C:D8:80:B7:6A:65:BA:A0:86:86:15:0A
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       5239A399E8362D324D904D09E7C9C69E3821A446
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
Manifest number:          04E5
Signing time:             Sat 31 Oct 2026 16:00:08 +0000
Manifest this update:     Sat 31 Oct 2026 15:55:08 +0000
Manifest next update:     Sun 01 Nov 2026 16:28:08 +0000
Files and hashes:         1: 3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (hash: Sbr3GGSxs/TpbJEnxyaf9FEO3XI7W7CSYVMWuuULCdo=)
                          2: 3138392e32382e302e302f32302d3234203d3e203238323739.roa (hash: xvmiqgJDueaOrERZQBqX3QrW4BkncokeMWQA4yWvoyA=)
                          3: 3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (hash: uy5+Ub0+wbd3yZfZJgQXFp+3E71SDlBX3bZO2L6OdKk=)
                          4: 713D42750562117CA0DB7D96A623898EF91F6ADA.crl (hash: 2aOe81xHSFJjL3gbPMfw+n4WoRAXvZmGGVQDQy92Z+A=)
                          5: 3137372e39322e3232342e302f32302d3234203d3e203238323739.roa (hash: TMDin3rnGrIeVp3qSYo7fJ1XJvh8Ex/25wlB3Azmy+E=)
                          6: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (hash: AyCjLshGl+F2l6obwdLA39w5CL9l+QsiCviQdQCNpX8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:a3:99:e8:36:2d:32:4d:90:4d:09:e7:c9:c6:9e:38:21:a4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Oct 31 15:55:08 2026 GMT
            Not After : Nov  1 16:28:08 2026 GMT
        Subject: CN=927CCE96716E29C45CD880B76A65BAA08686150A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:1c:0a:9e:ef:97:2d:19:a6:99:21:19:e8:
                    34:53:24:dd:ed:92:52:a0:e9:4b:91:84:59:a5:ba:
                    f5:01:9d:cf:11:53:04:d9:d3:5e:c2:44:1c:93:59:
                    de:cc:e3:19:44:b5:80:b7:8b:94:39:8b:0b:af:06:
                    e4:b3:76:66:bc:9e:50:f4:4c:1b:1f:31:5a:70:bb:
                    38:b9:f1:2b:7f:8a:1f:54:75:ef:22:df:6d:fc:e4:
                    b6:7b:f1:05:f9:33:ce:e9:5b:3d:e8:33:ba:a5:48:
                    24:86:71:29:f7:59:cd:8e:1f:02:9d:4a:24:6c:42:
                    0c:7a:a1:07:07:11:87:4f:64:73:00:2d:7d:f0:de:
                    18:d5:af:6e:e5:2a:2d:81:76:3d:f6:0b:9e:91:2f:
                    25:a5:35:54:bc:22:64:18:5e:d4:80:a1:b2:2c:80:
                    7b:51:de:e3:c7:c0:a6:8b:a2:36:5e:50:25:bc:f1:
                    55:89:ce:1c:1d:43:7b:ff:f9:23:56:6c:af:11:52:
                    0b:9d:64:71:25:16:f2:4b:70:3f:6b:97:53:d6:a1:
                    23:d1:17:bd:11:34:f4:96:65:d8:88:6e:a3:d3:7e:
                    cc:8a:f6:78:b5:e3:e0:81:69:e2:2d:8f:3c:b6:45:
                    36:ae:b2:4d:b5:13:13:8b:21:ee:50:b5:e8:f1:4c:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7C:CE:96:71:6E:29:C4:5C:D8:80:B7:6A:65:BA:A0:86:86:15:0A
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:53:a7:a1:b8:81:51:50:d2:52:65:2d:7f:e5:73:67:05:a0:
         66:1b:2b:71:6f:47:b5:46:dc:87:01:64:44:c2:b5:46:ae:c6:
         cc:f7:2e:c1:27:ec:a7:fe:cc:16:2a:18:46:c5:b6:cc:09:7d:
         3c:a8:53:6e:a8:b3:ac:f8:70:d1:b5:0a:21:13:80:48:f2:60:
         0f:93:69:c2:e5:af:c0:4d:3a:cf:04:82:de:46:98:fe:c7:4a:
         02:da:fe:e1:60:3d:87:94:12:50:10:41:3d:d6:31:d0:26:f0:
         67:e7:d3:32:a2:49:20:a6:37:f8:67:d0:d1:2d:1e:3e:20:0b:
         fa:28:36:13:9a:e3:d2:c5:df:9e:c1:85:a1:79:02:ec:57:af:
         30:f6:5e:29:1a:89:d9:1c:a8:a6:ee:c6:29:ed:07:e3:28:7b:
         29:aa:d8:2f:16:1a:cc:30:05:b6:00:77:1c:30:2a:a6:55:43:
         81:64:16:e8:c0:ba:27:ae:a2:7a:5a:45:54:87:fe:6a:c4:e3:
         3b:dd:b5:55:f9:3a:3c:af:14:24:13:92:f7:d6:c8:c9:47:62:
         56:b3:7c:80:0f:2d:3d:52:0a:35:a7:81:0e:05:5c:fe:2a:ea:
         a6:bc:a4:7d:87:a6:48:25:ab:23:71:69:35:22:8b:df:27:57:
         40:1b:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----