Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
File:                     40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json)
Hash identifier:          ZM2FIlUkaEDNy1FEO1ydp6FfdT0Vq0NptFclM9SswoE=
Subject key identifier:   54:D5:3B:D9:E6:32:87:29:32:AD:17:97:4D:4A:08:97:BC:99:62:6F
Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE
Certificate issuer:       /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
Certificate serial:       6A69E26B241DFCF6EB09C1468B112FD9F59B6A2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
Manifest number:          01D7
Signing time:             Fri 17 Apr 2026 17:17:08 +0000
Manifest this update:     Fri 17 Apr 2026 17:12:08 +0000
Manifest next update:     Sat 18 Apr 2026 18:21:08 +0000
Files and hashes:         1: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=)
                          2: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: GUnuNUq25OqK8U34niiFHmYG8FgYW5BaLNMMEqea2oU=)
                          3: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=)
                          4: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: eKMv22IVOxxguiqksCRMXS9NAY1MhABH5nL+QkbIqCg=)
                          5: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: dVjcviFWXYeWBqHTTFPwdaZwhjw7qRSb+GF5EQiZphc=)
                          6: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: p2dC/IT2fTkJC2ewPgYMujQ3PuAPQWrcJ9rPtP+ZBfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl
                          rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:69:e2:6b:24:1d:fc:f6:eb:09:c1:46:8b:11:2f:d9:f5:9b:6a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
        Validity
            Not Before: Apr 17 17:12:08 2026 GMT
            Not After : Apr 18 18:21:08 2026 GMT
        Subject: CN=54D53BD9E632872932AD17974D4A0897BC99626F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:b3:8b:68:92:9e:fb:04:e3:56:82:ed:e6:
                    5a:80:fd:11:9d:a6:eb:09:ec:1c:41:fa:72:6a:0b:
                    df:6d:41:9a:6e:a9:ed:1c:d7:e0:e7:e6:0f:a1:2d:
                    5b:1a:1c:fb:fd:fe:24:ff:a0:d6:9a:86:0e:48:a5:
                    10:27:ba:10:3a:c2:74:8d:46:55:90:05:d1:8b:25:
                    5d:24:54:be:dc:3f:09:3c:5b:61:a0:6c:4a:77:fe:
                    83:6d:09:a2:12:91:ed:72:23:d1:43:63:88:40:94:
                    72:84:41:3e:78:e7:b8:15:6b:ab:14:d7:30:e2:5a:
                    98:c2:dd:51:72:3a:7a:d1:28:16:1c:27:e5:3e:2b:
                    25:29:d7:63:d9:6e:e3:9f:a2:19:33:a0:70:cc:48:
                    37:84:6c:b2:e9:4a:47:07:ab:51:9b:02:7d:29:f8:
                    b8:41:75:3b:95:8f:88:17:bc:c3:18:95:83:e2:4d:
                    13:18:02:79:6f:45:8b:f0:ea:e5:18:1b:b8:67:1f:
                    c6:0f:9d:14:94:9a:f8:85:b6:74:9e:ce:1c:35:ac:
                    fc:fb:38:28:8c:97:b3:b8:54:85:8f:23:e0:4d:31:
                    45:c0:17:09:c4:7c:df:d4:92:50:c4:55:41:dc:de:
                    08:51:d0:8d:8e:e6:eb:10:19:d6:ec:f0:e3:35:ab:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:3B:D9:E6:32:87:29:32:AD:17:97:4D:4A:08:97:BC:99:62:6F
            X509v3 Authority Key Identifier:
                keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:30:31:b1:98:92:76:77:d2:1c:f5:07:98:47:ef:61:73:1c:
         56:c2:16:08:00:4a:d3:89:ac:53:eb:22:20:b0:2a:e9:98:8b:
         0c:62:d7:36:90:88:3b:b9:b8:00:3f:43:e3:0e:43:e4:69:6a:
         a6:fb:11:ec:36:8f:6b:bc:5d:31:a4:2b:25:46:f7:df:e5:be:
         e5:77:b8:97:da:c3:51:70:82:71:d0:7f:f3:b1:93:67:8b:08:
         01:54:b4:2c:e7:c4:b5:ee:0a:f0:f6:50:18:d5:03:7c:6f:de:
         b8:fd:d4:3d:67:93:41:5c:ca:ce:f8:52:a1:3b:ad:6a:8c:c8:
         03:db:24:8d:d0:25:c3:28:cc:2f:0d:d8:1c:74:4b:dd:a8:22:
         65:29:39:8f:4c:9f:b7:37:db:61:a8:47:9a:4a:a2:c8:ea:da:
         07:ac:1f:eb:35:c5:64:85:7c:74:36:fa:c7:3e:1b:d2:bd:fd:
         b8:37:f9:be:9d:2c:a3:f6:07:d3:2c:80:a7:3f:d3:31:33:3e:
         76:42:e0:96:79:17:26:f1:9b:1f:0d:21:bc:9b:e0:44:f8:8c:
         19:26:b2:3e:f7:b4:19:b4:0d:e5:a6:4c:a0:a5:27:1d:2e:b7:
         20:38:36:4b:f8:11:13:bb:ab:42:5b:b1:2c:75:62:c6:f5:30:
         a8:37:63:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUamniayQd/PbrCcFGixEv2fWbaiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw
QUNGOEFGRTAeFw0yNjA0MTcxNzEyMDhaFw0yNjA0MTgxODIxMDhaMDMxMTAvBgNV
BAMTKDU0RDUzQkQ5RTYzMjg3MjkzMkFEMTc5NzRENEEwODk3QkM5OTYyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6LOLaJKe+wTjVoLt5lqA/RGd
pusJ7BxB+nJqC99tQZpuqe0c1+Dn5g+hLVsaHPv9/iT/oNaahg5IpRAnuhA6wnSN
RlWQBdGLJV0kVL7cPwk8W2GgbEp3/oNtCaISke1yI9FDY4hAlHKEQT5457gVa6sU
1zDiWpjC3VFyOnrRKBYcJ+U+KyUp12PZbuOfohkzoHDMSDeEbLLpSkcHq1GbAn0p
+LhBdTuVj4gXvMMYlYPiTRMYAnlvRYvw6uUYG7hnH8YPnRSUmviFtnSezhw1rPz7
OCiMl7O4VIWPI+BNMUXAFwnEfN/UklDEVUHc3ghR0I2O5usQGdbs8OM1qxo/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVNU72eYyhykyrReXTUoIl7yZYm8wHwYDVR0j
BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2
NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz
MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80
MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvjAxsZiSdnfSHPUHmEfvYXMcVsIWCABK04msU+siILAq6ZiLDGLXNpCIO7m4
AD9D4w5D5GlqpvsR7DaPa7xdMaQrJUb33+W+5Xe4l9rDUXCCcdB/87GTZ4sIAVS0
LOfEte4K8PZQGNUDfG/euP3UPWeTQVzKzvhSoTutaozIA9skjdAlwyjMLw3YHHRL
3agiZSk5j0yftzfbYahHmkqiyOraB6wf6zXFZIV8dDb6xz4b0r39uDf5vp0so/YH
0yyApz/TMTM+dkLglnkXJvGbHw0hvJvgRPiMGSayPve0GbQN5aZMoKUnHS63IDg2
S/gRE7urQluxLHVixvUwqDdjhw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:07:54 2026 by rpki-client