Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
File:                     24433D21977FD690D9A22FE9B7A0D866F38A662D.mft (raw, json)
Hash identifier:          oyyg6duowaoS5+Ew6OwixfWunaYfWE2N4BiS2VcgHpc=
Subject key identifier:   20:B4:9A:D2:68:64:6B:8C:C0:5F:41:4F:51:B1:3F:5A:D2:9C:08:F5
Authority key identifier: 24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
Certificate issuer:       /CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
Certificate serial:       0472B03D26665D4566BDF31B3737BE51CBF6FF15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
Manifest number:          21
Signing time:             Fri 17 Apr 2026 23:07:01 +0000
Manifest this update:     Fri 17 Apr 2026 23:02:01 +0000
Manifest next update:     Sun 19 Apr 2026 00:52:01 +0000
Files and hashes:         1: 323830343a373337303a3a2f33322d313238203d3e20323730393135.roa (hash: jZYoQdTQfom+0sI79xqowlSObfE7p/Ep3Qqy1pznBtU=)
                          2: 3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (hash: neLDLxoA7Qh2iy+WwgpFav7BGrCV/fuOmrMo/OfWIKw=)
                          3: 24433D21977FD690D9A22FE9B7A0D866F38A662D.crl (hash: YSpSugoMwYvrbdlvhNoyYNoNWnUBnpyLg1ORM/+Bhfw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 00:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:72:b0:3d:26:66:5d:45:66:bd:f3:1b:37:37:be:51:cb:f6:ff:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
        Validity
            Not Before: Apr 17 23:02:01 2026 GMT
            Not After : Apr 19 00:52:01 2026 GMT
        Subject: CN=20B49AD268646B8CC05F414F51B13F5AD29C08F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:e5:d2:d3:f4:bc:ad:cf:bb:9a:4a:90:05:
                    28:66:56:f2:a3:fb:56:78:d6:fc:e3:bd:a5:67:81:
                    ef:4d:19:02:4c:5e:01:73:31:24:a0:1f:34:4e:38:
                    ea:02:76:08:4c:c9:90:00:a0:0a:41:29:3b:e7:de:
                    6e:fa:30:b2:eb:aa:3b:4f:9b:36:9c:12:43:2c:e7:
                    ae:d7:70:60:82:00:9e:92:62:9a:d9:e4:eb:c3:d6:
                    fb:9a:a8:4f:0a:fb:24:07:e6:0b:8b:97:a6:6e:b2:
                    c6:31:72:72:1f:b8:37:c6:7d:cd:9f:57:7c:cf:d7:
                    1f:c5:bd:0f:29:b1:3a:2d:59:75:fa:cf:85:2f:7a:
                    9e:02:ed:0e:2b:42:0a:04:4c:67:ce:6d:58:f4:2a:
                    88:50:98:ac:0e:65:d3:b2:6a:f3:dc:94:6e:60:6a:
                    0a:81:d9:80:df:f9:9e:1c:7b:93:76:fe:2c:70:09:
                    e0:ec:70:29:dc:63:1c:85:e6:6e:26:90:fa:5d:71:
                    e0:ea:38:d6:e6:a5:bd:3c:42:3b:87:3f:08:b5:0d:
                    53:0a:39:ca:75:14:6e:94:09:5e:b3:43:59:17:f3:
                    72:7f:e3:4c:49:53:0c:3a:72:be:29:9e:25:66:7d:
                    01:8e:60:d4:e8:e2:fb:c6:9f:27:53:1c:cb:ed:60:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:9A:D2:68:64:6B:8C:C0:5F:41:4F:51:B1:3F:5A:D2:9C:08:F5
            X509v3 Authority Key Identifier:
                keyid:24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:69:91:35:2d:f1:b3:1d:9a:0f:51:a4:c2:8f:44:25:e9:
         a2:56:e4:c4:f8:50:a7:e6:f5:6e:74:a5:90:15:cf:f3:bd:cb:
         8f:0c:4e:b8:35:ae:6f:6e:fd:bd:19:7a:00:93:11:60:60:f5:
         fe:15:7c:67:6d:09:b5:5e:e0:4b:92:ba:80:a1:c8:cc:ad:98:
         62:09:2f:46:f9:77:1d:36:ba:5a:b1:2f:8a:d1:cf:6c:66:b3:
         fd:5b:3e:2c:af:6a:76:8e:d2:bc:ee:93:cc:f7:5a:f1:ec:e1:
         bf:e7:9d:29:08:21:b3:95:02:3d:11:ec:d2:6f:e8:cf:82:2a:
         00:50:f3:91:da:4f:3d:e3:3f:99:7d:e9:71:b8:1b:2c:ea:d6:
         76:d6:f6:9f:d2:62:15:db:be:bc:eb:44:7f:c4:85:9b:06:e8:
         8b:77:7a:1a:40:38:ea:c8:2e:d9:72:35:18:3c:65:8a:ab:7a:
         ac:eb:0c:c4:eb:4a:c0:d6:40:88:e8:06:fb:c1:8c:57:ef:7e:
         86:08:5f:34:15:c1:0f:45:b2:2f:45:d9:36:0e:ca:ba:5c:78:
         79:3f:93:3a:bb:92:9d:d6:1c:5e:21:33:a4:73:b0:09:f1:a6:
         e3:ac:30:9f:48:91:5f:9f:53:47:5f:22:b5:4f:6d:35:04:3f:
         4e:ea:dd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:27 2026 by rpki-client