Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
File:                     4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft (raw, json)
Hash identifier:          QMSyKQHaUO/c7Sms5tSoh+Ng96fzA9kTn5RQT4dAucA=
Subject key identifier:   DB:A2:96:FB:DF:A7:F9:1C:F5:B4:31:5A:39:E7:F3:59:D4:8B:44:C0
Authority key identifier: 4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64
Certificate issuer:       /CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864
Certificate serial:       231A9F84F776F4814EDD1D269038049F45D32416
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
Manifest number:          2C
Signing time:             Fri 17 Apr 2026 17:43:53 +0000
Manifest this update:     Fri 17 Apr 2026 17:38:53 +0000
Manifest next update:     Sat 18 Apr 2026 20:52:53 +0000
Files and hashes:         1: 323830343a363164633a343030303a3a2f33362d313238203d3e20323639323631.roa (hash: vUWX6YYonafEiAWevLQ5MLrt4A2dhz4ewplvWyRMDho=)
                          2: 323830343a363164633a3a2f33362d313238203d3e20323639323631.roa (hash: 3IV1UExwtWAtKrXnJvnh4k9jHtimZokTtJndoiNoD/0=)
                          3: 34352e3138322e31362e302f32322d3332203d3e20323639323631.roa (hash: HBfEvOLwV+a+06GBKwzwPe5QQiQVtbmFvCko9OyYUO8=)
                          4: 323830343a363164633a363030303a3a2f33362d313238203d3e20323639323631.roa (hash: VSakZdJ0r1lqw1cD2hhJATLiK6eSAiosRxLeP8iKSOE=)
                          5: 4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl (hash: wR2qpSJ3XPX1y5p69spFhFWt2l0B63K/M3/cOZrhlOc=)
                          6: 323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa (hash: opEw8Ds1rSXQDtQtzJ3ta2GnYH9fFslGeFEUtpjL0Wg=)
                          7: 323830343a363164633a633030303a3a2f33362d313238203d3e20323639323631.roa (hash: tqJHoYFtZyhQiHPQM6YCU9Q+XvYfSc7hQ0VFl6F+sTk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1a:9f:84:f7:76:f4:81:4e:dd:1d:26:90:38:04:9f:45:d3:24:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864
        Validity
            Not Before: Apr 17 17:38:53 2026 GMT
            Not After : Apr 18 20:52:53 2026 GMT
        Subject: CN=DBA296FBDFA7F91CF5B4315A39E7F359D48B44C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:4e:f4:07:e7:a4:c5:17:f1:aa:e1:47:b2:
                    1d:b1:e9:ef:53:61:dc:4d:92:04:49:5b:7d:4b:31:
                    1c:4c:ff:0d:c2:20:39:8a:81:ac:16:5e:62:58:3c:
                    f7:06:9e:af:80:0c:a9:4a:56:9d:3c:d9:f9:31:6f:
                    8d:cb:82:0f:81:db:8b:ac:19:3a:33:2e:d7:47:71:
                    ff:ab:52:f6:3d:8d:45:d1:05:01:d5:c3:ad:da:c1:
                    f1:9e:de:9f:1c:27:d9:5f:31:ae:be:a0:1b:19:5c:
                    d0:36:44:ed:da:bf:26:f9:1f:1f:d6:6d:ef:29:aa:
                    9d:da:3c:71:d5:26:f4:cb:cd:61:5b:25:c8:1e:64:
                    29:a3:db:30:42:42:2f:b0:23:ed:c9:dd:02:21:fb:
                    69:f1:1f:10:bb:54:3c:a8:18:6f:74:aa:8f:72:c7:
                    56:9e:cf:dd:af:07:a9:58:52:4b:0c:58:a9:36:9e:
                    38:f3:29:9d:09:71:75:fa:a0:ff:3a:73:9b:a9:b1:
                    ef:5e:f1:20:33:a4:69:74:97:1b:0e:fd:6a:da:bc:
                    ac:be:5d:e8:09:eb:5f:4d:15:a5:eb:fa:0d:7f:bf:
                    6e:f6:ec:f7:8a:f7:f5:03:aa:1c:8a:71:37:a8:55:
                    d4:99:43:43:d8:f0:a8:6b:1a:0f:db:df:5c:bb:19:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A2:96:FB:DF:A7:F9:1C:F5:B4:31:5A:39:E7:F3:59:D4:8B:44:C0
            X509v3 Authority Key Identifier:
                keyid:4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:b8:2b:ba:c3:79:2c:77:7e:68:d7:c4:89:5f:e9:24:3c:
         a1:a7:c4:bb:e2:bb:ed:37:e4:8b:30:f6:4d:c3:f3:16:14:ac:
         4a:f0:02:ea:81:33:db:b8:2b:f8:dd:ec:78:43:cf:f3:e3:17:
         c0:94:a0:6b:01:7d:f7:a4:77:04:9a:3b:59:76:58:08:7d:4f:
         ab:79:64:bf:3a:04:c2:c0:27:14:73:1a:0d:10:40:3c:83:3e:
         38:26:2a:df:1f:25:4c:98:1b:bd:57:39:86:17:ae:7d:23:c0:
         2e:d5:3a:b8:7a:e8:b5:32:6a:32:5e:e8:74:f9:d3:f7:f6:ba:
         37:3f:37:2e:dd:b9:b5:f7:5d:d3:bf:4e:df:75:13:40:1d:ba:
         b6:55:0f:b3:c3:cb:9c:6e:4a:46:7b:bf:ef:07:18:da:f3:ed:
         4a:3c:2c:a6:5c:76:35:7a:4b:f8:1b:83:0c:df:99:76:cb:5d:
         cf:05:1c:ae:ee:85:66:bb:ae:e5:bd:d1:a8:fd:19:68:f1:db:
         c8:5b:6c:7b:4d:b4:d6:4c:86:c4:ef:76:78:44:a4:8d:8b:50:
         15:af:a5:c4:1d:e4:c4:41:26:71:d2:69:4e:76:01:25:04:5e:
         bd:43:5b:c8:c4:8c:e9:aa:e4:bc:68:c9:c6:14:f0:75:39:16:
         d5:87:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:55 2026 by rpki-client