Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft
File:                     4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft (raw, json)
Hash identifier:          Uslmgg3Kdw2ZP2MlnsqLwQbJ5s5KgC7KLVeZzIa08IU=
Subject key identifier:   89:17:98:1A:E8:D1:19:17:14:35:72:77:EE:E6:2C:94:55:B1:77:6F
Authority key identifier: 4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB
Certificate issuer:       /CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB
Certificate serial:       0EA233C3CF322D138F7D53C54EED7F49D9D02110
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft
Manifest number:          016B
Signing time:             Fri 17 Apr 2026 09:15:17 +0000
Manifest this update:     Fri 17 Apr 2026 09:10:17 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:17 +0000
Files and hashes:         1: 323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (hash: RA5I+vzoQlcGK0NMw5Qd6CqIjhtm9+nKDVEJJYgQHJ8=)
                          2: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl (hash: 1bSF1ZVIvMtgdvDAp2VRxonN/H03y9kVWM4qWZnyx7s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl
                          rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a2:33:c3:cf:32:2d:13:8f:7d:53:c5:4e:ed:7f:49:d9:d0:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB
        Validity
            Not Before: Apr 17 09:10:17 2026 GMT
            Not After : Apr 18 12:01:17 2026 GMT
        Subject: CN=8917981AE8D1191714357277EEE62C9455B1776F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:66:a0:92:88:63:3e:63:4d:f9:0c:e2:a4:
                    e6:33:62:5c:3e:d1:9a:28:7c:1b:7a:f4:79:34:7f:
                    cc:f6:c6:a0:12:fe:72:61:e2:ef:6b:74:7b:f7:59:
                    fe:15:2b:fb:23:20:23:c0:34:e2:9d:12:cc:86:a9:
                    4e:c1:28:f1:2d:af:4e:92:1e:e2:b4:ee:35:13:09:
                    bd:50:5f:71:17:f2:69:f8:c7:95:74:e4:b7:75:5f:
                    90:96:e6:62:5f:ae:5f:b9:fe:83:50:ec:ac:cb:c6:
                    72:e1:bd:8d:86:71:50:92:fc:a1:40:f8:7c:7b:e8:
                    0a:3f:63:e3:c7:b0:2d:5c:d3:f7:62:48:bd:0b:68:
                    b6:b5:ca:64:5b:b0:6e:76:32:d6:dd:f6:02:71:9f:
                    64:c0:70:24:38:8c:ec:05:e8:00:d7:13:c8:50:56:
                    0a:6f:e4:c8:94:8e:28:07:34:6d:41:18:56:f2:ba:
                    2a:51:71:5b:19:be:ba:4f:c2:6f:28:f6:9a:db:6e:
                    7c:75:29:df:aa:9d:ba:28:5c:a9:92:82:7e:3b:af:
                    81:22:77:d9:ac:ad:7b:14:b5:c7:8b:fa:52:8e:bd:
                    e7:88:cf:23:2e:40:bd:ed:bb:00:46:c7:23:be:78:
                    85:6e:63:67:4d:b0:54:25:01:56:eb:eb:e4:61:a3:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:98:1A:E8:D1:19:17:14:35:72:77:EE:E6:2C:94:55:B1:77:6F
            X509v3 Authority Key Identifier:
                keyid:4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:e6:27:0f:1f:06:aa:af:9f:78:19:21:ee:3f:34:59:6f:
         15:41:57:c6:db:df:e8:78:04:45:6e:0d:4c:63:67:3f:92:9e:
         ef:15:01:30:3d:06:81:b7:b9:4d:a1:1e:e7:c3:f3:8c:63:6c:
         17:a8:ec:0c:32:3a:7d:62:90:33:10:27:d1:39:f8:79:01:52:
         74:c3:be:dc:fd:2c:8e:33:c7:9a:65:65:64:7a:1b:76:64:62:
         46:b4:4d:b0:e6:44:65:96:33:59:b2:49:24:98:7b:f0:55:ef:
         d2:c4:dc:73:61:19:e1:5b:33:6c:e6:52:bb:cb:c4:52:a6:c3:
         14:67:14:17:c0:95:20:df:07:92:f3:bc:76:36:d1:37:73:e2:
         3c:11:1d:65:5d:19:95:90:de:97:8f:3e:fa:2f:7c:b5:55:48:
         7f:b9:94:f2:74:f9:8b:d8:10:a1:35:74:69:fb:f7:37:39:39:
         1e:ca:ee:08:df:bb:1f:b8:fb:32:5e:41:cd:d4:9b:3a:9f:57:
         d9:7c:c7:a1:64:26:da:79:14:12:53:63:a5:1e:d1:a5:2c:f1:
         f8:74:6d:32:2d:c4:cb:90:c7:2d:26:21:05:5f:1d:46:39:6a:
         79:99:01:65:ad:d8:00:e2:4d:8b:2f:6b:69:8c:b7:42:9e:67:
         4f:b3:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:38 2026 by rpki-client