Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
File:                     4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json)
Hash identifier:          yDoGCn10J1LPWC57PRnXp7svdnTggHY0rByOscF0H6E=
Subject key identifier:   0D:1F:40:B3:EB:9A:E8:02:FE:85:AF:E7:32:AB:F8:66:CC:BE:DE:46
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       555E3AB4BB924E1712DAFDB6E40449D5C1917096
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
Manifest number:          02BB
Signing time:             Sun 20 Sep 2026 09:05:23 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:23 +0000
Manifest next update:     Mon 21 Sep 2026 10:48:23 +0000
Files and hashes:         1: 3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa (hash: ZIrz1nDyOgw9DL/Cn4VcYzDTXSlfJne+sphMDrtPGvI=)
                          2: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 5kLhybl24AOxKrKqNUo78ON3LjewIgoUurgRdbYZj3I=)
                          3: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: DmzsObsrsiYZ4OK3Z0PwJDOKvtBM6IpTL3fvwt7Ze2E=)
                          4: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: tAPmnAQc6qgGcIkdBLhqVM03y081O5X9GQ511uPs4vc=)
                          5: AS263509.asa (hash: rFmj0qgkRzo+dZnUTWdq4PTlsjp0iMSBPFOL0EFMTkU=)
                          6: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: PnlRhvcAbWpprsjTQ+t1SYUVrs72aNfkdI9Tn6VRsSc=)
                          7: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: zJIEvaM0WJcxrr33cCNOh+VZsaf0oLfi9pDp+uNU3vQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 10:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5e:3a:b4:bb:92:4e:17:12:da:fd:b6:e4:04:49:d5:c1:91:70:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Sep 20 09:00:23 2026 GMT
            Not After : Sep 21 10:48:23 2026 GMT
        Subject: CN=0D1F40B3EB9AE802FE85AFE732ABF866CCBEDE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:6d:01:88:c2:92:79:e8:c9:33:90:4f:6c:
                    e3:a0:b8:d9:c9:8f:60:ae:a9:26:a3:e3:e9:eb:22:
                    b8:41:b2:01:5c:3f:06:41:a4:fd:75:58:45:fd:56:
                    b5:11:8f:c7:26:1b:73:57:77:b2:e6:82:f9:0f:2d:
                    d8:16:99:35:2b:60:49:71:71:a6:71:ec:53:84:e7:
                    d1:c2:f0:a8:13:06:65:cb:b6:c1:16:b5:dc:5a:00:
                    90:08:a5:fc:8b:1d:d6:4b:80:32:19:cf:95:7b:c9:
                    ea:e6:de:b1:ef:fa:3e:33:c8:74:5a:76:2d:fe:33:
                    38:53:c4:b0:3b:8f:9e:2b:f3:27:44:bd:17:bd:c1:
                    3c:31:fd:9f:78:ed:4e:ff:9c:85:1f:b9:d3:48:65:
                    fa:18:fe:da:d2:3f:c7:a1:87:03:5a:d8:5e:f4:a8:
                    6a:7d:85:63:3a:e0:0a:68:8e:1d:41:5a:73:d7:1c:
                    29:81:f1:85:1b:1e:f8:4a:f8:d9:7a:e0:9f:35:87:
                    2f:f0:71:d2:9f:6d:f9:bf:d3:c3:90:3b:87:3b:2b:
                    39:bc:23:eb:ce:28:77:ab:f4:36:98:5b:b5:d3:fb:
                    09:fc:de:57:53:e8:66:63:97:78:05:ad:04:80:b7:
                    13:5e:5c:1e:de:26:94:da:96:6d:96:24:e2:9d:60:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:40:B3:EB:9A:E8:02:FE:85:AF:E7:32:AB:F8:66:CC:BE:DE:46
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:22:35:3d:e7:52:87:82:a2:51:5f:10:5f:4a:7e:6a:dd:
         5b:52:0f:41:e8:b8:d4:fc:8f:55:5f:48:94:a6:70:0f:08:97:
         6f:c9:e7:a9:a6:cd:77:08:f2:10:a1:70:bc:8a:59:70:84:93:
         c3:55:bb:fb:da:7e:32:48:aa:cb:bb:46:86:02:13:2c:d3:db:
         47:be:39:38:8c:3f:d7:d9:8f:49:64:f5:da:18:8a:44:72:51:
         a6:8e:a1:2d:81:00:e8:7b:d5:47:0a:b9:e8:3d:85:75:9e:25:
         2f:a9:42:d7:bd:23:cc:85:95:0f:1f:e7:fe:bd:39:d6:92:7e:
         4b:9e:03:47:71:34:32:58:36:8a:82:91:89:91:85:87:fa:05:
         ed:a8:70:26:d7:50:f7:02:a7:38:e2:11:0c:96:4a:f7:3d:b9:
         68:44:3b:b8:c9:d4:9a:cb:a2:95:c3:4a:70:c4:eb:07:66:8e:
         7b:52:e4:be:e5:49:34:67:9a:bb:8e:57:8f:fa:71:33:1e:b5:
         d7:55:8d:73:ae:49:57:60:26:11:6f:4c:f5:61:a4:9b:c4:6c:
         5e:a8:c9:11:cf:50:54:03:93:40:01:ed:1a:ea:96:e6:af:1d:
         bb:70:82:5c:c5:15:45:df:03:93:7a:58:94:82:8e:fb:68:3e:
         33:84:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:15:37 2026 by rpki-client