Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
File:                     041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft (raw, json)
Hash identifier:          kumrLNrV/EyLMIurSEw2R8Vr4RSydTmQVKdvc3lRUqg=
Subject key identifier:   CD:0F:B5:F5:03:C0:B3:A8:09:3F:7A:0F:58:37:77:69:0A:6C:9E:4F
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Certificate issuer:       /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial:       379FC08453B7F1DF9259D534F7FA6327C6868CDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
Manifest number:          D5
Signing time:             Sun 01 Mar 2026 06:45:55 +0000
Manifest this update:     Sun 01 Mar 2026 06:40:55 +0000
Manifest next update:     Mon 02 Mar 2026 07:44:55 +0000
Files and hashes:         1: 041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl (hash: UF9jzyH2tvV6cdTFaxr+lkHi3N7GBFEqsccuLlnBFb4=)
                          2: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (hash: pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=)
                          3: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (hash: ff5fnWNx341MgcrmBHedmB9h7orSMUG+v/FPbvSdt9w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 07:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9f:c0:84:53:b7:f1:df:92:59:d5:34:f7:fa:63:27:c6:86:8c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
        Validity
            Not Before: Mar  1 06:40:55 2026 GMT
            Not After : Mar  2 07:44:55 2026 GMT
        Subject: CN=CD0FB5F503C0B3A8093F7A0F583777690A6C9E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:88:09:cb:f7:3f:a4:14:28:ac:b8:9b:c7:
                    55:0d:63:8d:05:d3:68:4a:8a:e0:59:32:69:ad:6a:
                    70:ac:c1:61:22:bf:71:0a:cd:45:f7:5e:e9:fa:72:
                    4a:01:b7:77:fb:fb:fa:d1:36:a7:8b:75:69:96:70:
                    ec:8f:ae:3b:7d:93:5c:e0:d9:64:a7:09:6e:ec:5b:
                    1b:9e:a0:43:bd:0c:7f:20:cf:ea:2f:44:15:ed:9e:
                    7b:07:21:91:22:9d:6d:5b:30:31:dd:7d:f2:ad:8f:
                    0b:93:45:2f:2f:bb:5c:78:02:3e:17:1a:d3:ec:de:
                    7a:be:fc:7e:a5:c6:76:2e:f8:b0:62:97:1f:42:4e:
                    89:6d:45:61:8c:a0:54:6d:7d:12:4b:5b:7d:54:6e:
                    67:eb:14:ca:3c:a6:2e:67:49:86:ec:43:7b:39:31:
                    e1:7e:ad:db:e7:b7:18:01:ca:7a:4b:dd:fc:e0:1d:
                    c2:72:eb:94:eb:ec:b7:51:32:df:21:58:ae:3e:ef:
                    be:33:59:bb:60:44:c8:f6:fb:3b:6e:e2:fd:f5:2f:
                    a3:ca:99:e5:0a:c2:81:1d:16:42:73:f2:7e:89:de:
                    1a:c7:48:b8:54:de:ae:26:6b:47:a1:75:0c:aa:b9:
                    a2:3a:55:91:7b:89:75:0b:b7:6a:b3:9d:69:95:7e:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:B5:F5:03:C0:B3:A8:09:3F:7A:0F:58:37:77:69:0A:6C:9E:4F
            X509v3 Authority Key Identifier:
                keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0e:79:e7:59:79:10:dc:a7:51:ae:72:ae:9f:f3:95:dc:f4:
         ac:b9:63:2d:9e:7f:17:72:aa:f9:3f:19:49:3b:39:23:55:36:
         19:e5:4c:d6:7b:06:36:9d:ea:4d:19:b6:3b:d6:ea:d4:e7:a5:
         40:39:3e:73:67:2e:53:3a:8d:01:85:a6:9c:0c:56:fa:ce:38:
         31:6b:a8:b0:16:32:98:7f:99:56:c0:3c:64:15:a4:db:e3:42:
         63:cd:a7:64:05:d0:d3:44:23:46:3f:02:4a:96:0b:a2:3e:b4:
         b3:6a:a2:98:90:94:7c:7a:be:e6:4c:e1:fa:61:d0:05:53:fc:
         87:ae:f7:0f:b7:7c:08:8a:b1:c3:9b:b2:ff:c5:90:2b:c3:70:
         11:94:bf:6a:8f:d7:74:06:20:af:5a:46:1b:2b:81:e3:0f:33:
         8f:c5:ac:e3:e2:8f:ef:c3:99:ab:2f:85:bb:81:0d:c9:83:4e:
         9a:3e:97:51:82:42:98:a3:de:55:61:5f:82:eb:6d:0a:a8:2d:
         9f:25:90:d5:45:45:8b:9a:db:3d:74:b7:bb:dd:31:f6:bc:8e:
         80:12:6e:e0:fa:02:31:6e:ed:85:49:74:4e:6c:15:51:a1:ed:
         e4:43:d4:17:a1:50:fb:00:7c:e8:7c:fd:4e:dc:6d:03:ab:7b:
         b6:4d:83:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN5/AhFO38d+SWdU09/pjJ8aGjNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxRkEwQTQwOEFENTdFOTM4NERBMzMxQjMwNDBCOTFG
REUwMEJFMzAeFw0yNjAzMDEwNjQwNTVaFw0yNjAzMDIwNzQ0NTVaMDMxMTAvBgNV
BAMTKENEMEZCNUY1MDNDMEIzQTgwOTNGN0EwRjU4Mzc3NzY5MEE2QzlFNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCYgJy/c/pBQorLibx1UNY40F
02hKiuBZMmmtanCswWEiv3EKzUX3Xun6ckoBt3f7+/rRNqeLdWmWcOyPrjt9k1zg
2WSnCW7sWxueoEO9DH8gz+ovRBXtnnsHIZEinW1bMDHdffKtjwuTRS8vu1x4Aj4X
GtPs3nq+/H6lxnYu+LBilx9CToltRWGMoFRtfRJLW31UbmfrFMo8pi5nSYbsQ3s5
MeF+rdvntxgBynpL3fzgHcJy65Tr7LdRMt8hWK4+774zWbtgRMj2+ztu4v31L6PK
meUKwoEdFkJz8n6J3hrHSLhU3q4ma0ehdQyquaI6VZF7iXULt2qznWmVfjMdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUzQ+19QPAs6gJP3oPWDd3aQpsnk8wHwYDVR0j
BBgwFoAUBB+gpAitV+k4TaMxswQLkf3gC+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVv
QTkvMC8wNDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUZBMEE0MDhBRDU3RTkz
ODREQTMzMUIzMDQwQjkxRkRFMDBCRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q1FYdjdXM2NTSlM0eXRkNmhxbTFDRkhURmFqaktZVUh0WDVZcWh5eFVvQTkvMC8w
NDFGQTBBNDA4QUQ1N0U5Mzg0REEzMzFCMzA0MEI5MUZERTAwQkUzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALw5551l5ENynUa5yrp/zldz0rLljLZ5/F3Kq+T8ZSTs5I1U2GeVM1nsGNp3q
TRm2O9bq1OelQDk+c2cuUzqNAYWmnAxW+s44MWuosBYymH+ZVsA8ZBWk2+NCY82n
ZAXQ00QjRj8CSpYLoj60s2qimJCUfHq+5kzh+mHQBVP8h673D7d8CIqxw5uy/8WQ
K8NwEZS/ao/XdAYgr1pGGyuB4w8zj8Ws4+KP78OZqy+Fu4ENyYNOmj6XUYJCmKPe
VWFfguttCqgtnyWQ1UVFi5rbPXS3u90x9ryOgBJu4PoCMW7thUl0TmwVUaHt5EPU
F6FQ+wB86Hz9TtxtA6t7tk2DJw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:21 2026 by rpki-client