Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
File:                     DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft (raw, json)
Hash identifier:          AKLa/5Y0O1QR4+HkSrJqoQb62mAozFYQQRPdDHTxpIo=
Subject key identifier:   9C:19:F7:57:12:68:42:04:13:BF:E0:E7:03:62:E8:77:F5:26:10:B5
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       35547D42AFEBB760158CCDB829C6ECAC53852123
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
Manifest number:          019E
Signing time:             Fri 17 Apr 2026 05:03:01 +0000
Manifest this update:     Fri 17 Apr 2026 04:58:01 +0000
Manifest next update:     Sat 18 Apr 2026 07:19:01 +0000
Files and hashes:         1: 3230302e3139362e3132382e302f32322d3234203d3e20323632343632.roa (hash: cdispQTU1cVRLuAz+PRDv8CZspkNXhKwr4EGkfJ5pYg=)
                          2: 3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (hash: 4/+FiCpqhe0pqGebJBI6FjvqOISfVkVksI5QIDOq0ts=)
                          3: 3137372e35342e3232342e302f32302d3234203d3e20323632343632.roa (hash: NL5UChad3D3kO5Z9uIJgxdGPe6eumtA7egOI8i/0y+Y=)
                          4: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (hash: hTq5kYbe7EChfFPH0YoNTIhAVdA6/gu4xucbyFP6WNc=)
                          5: 3137372e33372e302e302f32302d3234203d3e20323632343632.roa (hash: a4ssljEsbwL9HJl8228xBg9pmX2mbPTcJZOkVlwVYkY=)
                          6: DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl (hash: VzK7VNm0XkS32sDgxI12YV58euqvO4EdsQmzVB5YHi0=)
                          7: 3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (hash: TphvTaSRWcqNUR6m3SXRxlFwpI6OotYh1k9iH59ay5I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 07:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:54:7d:42:af:eb:b7:60:15:8c:cd:b8:29:c6:ec:ac:53:85:21:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Apr 17 04:58:01 2026 GMT
            Not After : Apr 18 07:19:01 2026 GMT
        Subject: CN=9C19F7571268420413BFE0E70362E877F52610B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:5c:4a:87:46:54:9c:46:ed:a0:29:1f:0e:
                    97:3e:07:26:8f:e8:44:d8:75:89:25:ba:21:67:b9:
                    78:d3:e0:f2:22:eb:a0:0c:f2:97:d6:09:79:fb:59:
                    31:0f:ba:4d:d3:e4:67:92:ed:2d:ac:3a:ce:0e:5c:
                    74:70:d1:e9:7c:71:8a:24:39:9c:d7:d5:2a:ce:89:
                    84:0b:7a:ce:00:47:da:e5:00:fe:00:ee:13:6d:13:
                    d3:fe:c5:cd:b0:23:e3:59:7f:6c:4f:07:83:2f:8d:
                    44:c0:21:e0:8c:6f:58:35:a0:7d:4c:8e:d8:a9:59:
                    b6:4a:ef:e7:5a:e6:83:72:5f:35:6d:a0:e3:c1:63:
                    5a:c6:04:01:f1:b3:71:49:b3:3a:da:41:61:ea:68:
                    46:22:01:12:34:76:e7:52:6b:39:a5:dc:e1:b8:af:
                    47:b0:8d:69:b8:f2:99:4a:f2:b6:14:ab:38:a5:f6:
                    ae:39:4d:4f:b1:7e:06:81:eb:76:7b:f0:d1:d1:f7:
                    b9:7c:8b:30:5f:2a:76:c8:78:8b:db:12:ce:db:11:
                    cd:64:9f:54:be:24:d2:94:d1:31:78:ee:10:07:2f:
                    2c:99:78:07:c0:62:8a:a4:62:5b:cf:fa:07:5a:1f:
                    37:5e:58:fd:4f:8e:26:47:02:36:dc:85:9f:2d:f5:
                    96:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:19:F7:57:12:68:42:04:13:BF:E0:E7:03:62:E8:77:F5:26:10:B5
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:82:9f:d3:47:af:6c:66:2e:28:6d:71:da:55:1d:b2:ac:
         99:64:2f:66:a6:78:24:99:8f:50:35:a7:ce:9d:de:cf:dd:09:
         61:ff:a1:79:e7:31:67:78:e4:12:c7:ea:80:51:fd:bb:a6:e3:
         78:c8:8d:4f:6f:d9:d0:3d:4d:f6:51:45:0e:4a:50:43:ef:b1:
         e5:d1:4d:5a:7f:5a:fd:62:47:81:18:62:25:89:fe:c4:87:f4:
         90:45:f9:41:8d:e9:c8:e3:eb:4d:49:1c:90:52:7f:a4:cb:d8:
         b0:07:e3:06:e5:eb:87:b5:5c:68:17:95:06:37:db:5e:ff:11:
         31:d3:60:d6:b2:8f:bd:e1:65:9a:ef:47:f4:6c:8d:d2:ce:48:
         1e:dc:30:b7:bd:f2:3d:01:09:a0:9c:2c:56:ee:f7:db:c9:db:
         97:1c:8e:56:0e:80:8a:15:53:9c:1b:67:f0:ab:29:26:9d:2f:
         71:63:c3:bf:00:e8:fd:98:55:df:1e:4e:0d:b6:30:27:35:02:
         01:8c:c1:95:f9:72:f6:65:d3:9c:8d:aa:af:96:8b:d4:af:a8:
         fe:1e:5f:1a:5a:4a:e9:1b:79:b1:47:8b:62:20:1d:1c:5c:fd:
         96:20:42:75:f6:ae:45:65:33:9f:e6:16:14:25:ad:a1:ca:4f:
         da:1a:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:28 2026 by rpki-client