Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          YEkci4ZPLoCH/+I+l6Iv3r14C4SWUBdjTm6HoGzuQOQ=
Subject key identifier:   5C:02:93:FE:7E:45:F1:E9:52:B4:30:30:9F:A1:6C:7B:15:17:87:61
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       05B41021E4D42AE586AA8DEA4553DF81BC378F0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          01EC
Signing time:             Fri 17 Apr 2026 12:37:05 +0000
Manifest this update:     Fri 17 Apr 2026 12:32:05 +0000
Manifest next update:     Sat 18 Apr 2026 13:11:05 +0000
Files and hashes:         1: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 5kLhybl24AOxKrKqNUo78ON3LjewIgoUurgRdbYZj3I=)
                          2: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: /v3WaT5dp4rEelylsz9uQHujR/gFtqDkdXBpn1pM+QQ=)
                          3: AS263509.asa (hash: bDEnHWclBpX3OBaJAIS7jn5pOlMpHjPlCGUIuncdBH4=)
                          4: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: zJIEvaM0WJcxrr33cCNOh+VZsaf0oLfi9pDp+uNU3vQ=)
                          5: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: PnlRhvcAbWpprsjTQ+t1SYUVrs72aNfkdI9Tn6VRsSc=)
                          6: 3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa (hash: ZIrz1nDyOgw9DL/Cn4VcYzDTXSlfJne+sphMDrtPGvI=)
                          7: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: DmzsObsrsiYZ4OK3Z0PwJDOKvtBM6IpTL3fvwt7Ze2E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b4:10:21:e4:d4:2a:e5:86:aa:8d:ea:45:53:df:81:bc:37:8f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Apr 17 12:32:05 2026 GMT
            Not After : Apr 18 13:11:05 2026 GMT
        Subject: CN=5C0293FE7E45F1E952B430309FA16C7B15178761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:86:2c:81:5c:30:6b:3a:ba:89:d9:1a:ff:
                    ce:83:fd:fd:4b:d8:57:a5:6d:27:73:13:f2:6a:d0:
                    11:3b:4d:d3:94:15:e0:3d:0b:46:f6:90:ca:ce:42:
                    e6:fc:e1:74:16:22:52:e9:fa:a4:63:a4:d3:01:f1:
                    4f:e0:c0:72:27:d1:0a:b2:db:8e:aa:ac:99:3c:33:
                    bd:e4:bd:5a:07:82:03:6a:50:f8:12:41:5a:e3:4a:
                    60:2c:0a:24:81:65:54:e7:24:7d:4c:da:ec:66:80:
                    8e:ae:da:ce:db:cf:7b:33:6c:5f:fd:8b:d1:7c:7e:
                    c3:a1:5e:47:42:5d:0b:70:f5:3d:d7:1a:e9:67:44:
                    f4:06:b7:f7:67:34:b7:55:ac:89:19:d6:f6:5b:9f:
                    a7:e9:3a:10:cf:89:e5:02:4b:89:1a:c5:fa:76:ed:
                    40:2e:61:5d:d8:39:8e:e9:35:0b:3f:61:f5:b6:2f:
                    b2:e3:06:0e:cb:b4:21:7e:fb:93:eb:04:2b:06:df:
                    91:5a:a4:03:55:09:af:49:a1:c7:34:04:1f:3d:37:
                    ac:dc:0e:07:95:b4:3e:a8:89:a2:2d:bc:42:73:13:
                    13:ed:06:62:ad:6e:dd:8e:b4:fd:03:5e:2c:2d:37:
                    6f:cf:60:48:4f:25:95:f7:56:fa:81:e4:14:f0:3d:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:93:FE:7E:45:F1:E9:52:B4:30:30:9F:A1:6C:7B:15:17:87:61
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e9:ac:89:0b:b5:fc:b4:6a:17:19:98:82:9e:67:ce:6b:82:
         7c:1a:07:9a:98:16:3b:85:c9:53:69:cb:f8:b7:9f:9c:65:ef:
         be:e7:31:e1:3a:b0:f3:6e:61:e1:92:fb:c0:68:d1:26:f2:e6:
         e5:c5:f8:11:0a:40:21:cb:c8:50:0f:90:30:f2:8d:37:32:db:
         7a:bd:c9:62:26:d9:4f:cd:80:35:e8:60:15:8b:bb:3e:e4:9a:
         15:9d:6c:98:49:2c:f9:a9:39:ef:7a:4a:43:df:44:9b:70:ac:
         36:9a:e5:11:97:47:d8:6f:ad:ab:2b:02:53:2e:9a:b8:8a:b7:
         35:0b:a1:a9:97:5e:71:ca:a0:f1:64:6b:39:eb:bf:52:fc:76:
         7b:db:81:3b:40:93:74:19:eb:53:92:2e:06:3f:72:9d:38:1f:
         3f:0e:15:21:05:d1:77:7f:d1:8b:67:09:c2:3a:b7:1a:f3:92:
         80:36:10:72:1e:bb:4b:3e:af:93:e3:51:6a:28:b2:a2:fa:92:
         30:4b:61:d1:54:b2:81:04:be:ad:56:09:58:d4:2c:67:6d:04:
         a6:7e:76:a3:97:d2:82:65:0f:46:d8:31:40:0c:03:a0:6f:c9:
         f0:dc:8d:73:3b:0b:16:96:4f:90:55:f1:81:02:9d:17:5a:a3:
         fa:f1:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:59 2026 by rpki-client