Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.mft
File:                     403CA1A62E64E3260D780AB48304F8821DA8B3C0.mft (raw, json)
Hash identifier:          OvBAOZ2SadzgoOhsria1AY4gxIP5E64O7/q6nXaA7Do=
Subject key identifier:   4C:A6:21:3F:9C:7D:E8:F4:B8:61:03:92:3C:5B:72:FD:48:77:BB:A5
Authority key identifier: 40:3C:A1:A6:2E:64:E3:26:0D:78:0A:B4:83:04:F8:82:1D:A8:B3:C0
Certificate issuer:       /CN=403CA1A62E64E3260D780AB48304F8821DA8B3C0
Certificate serial:       19660D27B40DAD7CFD035ACFE03F9FDADC55728B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403CA1A62E64E3260D780AB48304F8821DA8B3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.mft
Manifest number:          21
Signing time:             Tue 28 Jul 2026 16:01:17 +0000
Manifest this update:     Tue 28 Jul 2026 15:56:17 +0000
Manifest next update:     Wed 29 Jul 2026 18:59:17 +0000
Files and hashes:         1: 323830313a38313a3237303a3a2f34382d313238203d3e20323735373836.roa (hash: a1ttJxqneiB8GAZqpsOe8PcmR9BlgSvMSRyZz94FD0I=)
                          2: 403CA1A62E64E3260D780AB48304F8821DA8B3C0.crl (hash: Y+p4tWfIF7xUb3TXd/1SQqQntUgPbQ/6YZxV7YFaULM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.crl
                          rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403CA1A62E64E3260D780AB48304F8821DA8B3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 18:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:0d:27:b4:0d:ad:7c:fd:03:5a:cf:e0:3f:9f:da:dc:55:72:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403CA1A62E64E3260D780AB48304F8821DA8B3C0
        Validity
            Not Before: Jul 28 15:56:17 2026 GMT
            Not After : Jul 29 18:59:17 2026 GMT
        Subject: CN=4CA6213F9C7DE8F4B86103923C5B72FD4877BBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:51:84:fa:60:c4:fe:24:8a:c9:ee:46:f2:
                    86:59:21:2c:2f:5d:01:cf:d4:b8:04:58:4d:9e:04:
                    64:2a:c5:eb:ae:6d:06:4a:90:7a:05:93:6c:42:ff:
                    0c:e7:e0:86:93:59:05:bb:fb:86:77:af:89:5c:32:
                    b0:78:aa:50:58:fa:fc:6f:4e:2f:bd:0a:e6:fe:d5:
                    ec:86:ec:cd:ce:b1:aa:5a:b3:c3:2f:dc:8d:84:62:
                    1b:dc:57:18:c6:6e:7e:f7:14:12:e8:71:17:df:94:
                    c3:ce:df:34:09:ee:61:15:12:24:d4:6e:12:2d:7a:
                    b4:48:56:eb:a4:1f:c6:2a:c4:ba:9f:55:5f:ed:97:
                    f5:2c:26:02:3f:27:00:98:c0:4e:09:75:71:c8:76:
                    d3:0b:74:25:d0:68:c7:ef:b1:0c:89:91:f9:c9:e6:
                    4a:f6:37:a1:44:00:20:f5:3f:ac:31:d2:63:b9:0a:
                    c0:ef:f1:55:d0:61:98:95:af:99:0e:93:60:29:14:
                    36:61:6f:83:24:65:b4:bf:1c:98:76:33:c0:49:86:
                    b4:20:57:d5:97:a9:7f:b2:52:c9:81:54:3f:21:c4:
                    5d:08:22:c4:19:f0:6e:c6:2b:34:81:3b:de:05:92:
                    06:b0:46:ba:0a:fc:d7:1e:06:d2:18:8a:c4:a1:31:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:21:3F:9C:7D:E8:F4:B8:61:03:92:3C:5B:72:FD:48:77:BB:A5
            X509v3 Authority Key Identifier:
                keyid:40:3C:A1:A6:2E:64:E3:26:0D:78:0A:B4:83:04:F8:82:1D:A8:B3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403CA1A62E64E3260D780AB48304F8821DA8B3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAw1KYPKmJWLqE3ujN5XKU55ikFYW3C8xvHqM9MLZe7M/0/403CA1A62E64E3260D780AB48304F8821DA8B3C0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:6c:77:b8:05:9c:e6:d9:df:b4:ef:64:40:9b:be:9f:8d:
         84:4c:44:91:71:3e:42:42:46:ea:67:8f:2a:fb:7b:d8:83:11:
         4c:7a:75:2e:b9:b4:17:9a:4a:94:4e:a9:ed:3b:93:e3:f4:0b:
         2f:50:7f:35:6a:99:3b:14:95:12:b5:d3:34:d6:bb:e5:65:2f:
         9f:62:4c:e2:e3:b3:46:b8:d9:9b:d6:2f:95:7d:40:9e:e0:c0:
         cd:a6:a3:26:2d:9c:14:d4:07:4f:be:d2:e2:7e:af:15:66:8f:
         64:de:4c:34:41:82:60:c7:9e:26:e7:05:a4:0e:a8:21:fc:27:
         a9:7b:52:f6:e6:53:5f:6c:22:d5:e5:c1:b3:25:23:07:e8:07:
         4a:fd:8e:ee:cd:47:19:45:e3:3a:7b:91:d2:de:f5:40:f1:2b:
         89:b2:79:95:e9:38:02:9b:a7:01:49:44:2f:cb:c6:af:6e:c2:
         e3:e6:e9:0c:4a:d5:e9:64:f0:21:41:9a:ef:f9:54:97:b2:63:
         be:76:20:15:7b:db:53:a0:a3:73:be:33:e2:13:d0:53:2b:d8:
         be:bb:41:91:e8:1f:f4:32:2c:6a:2c:6b:79:1b:fe:33:14:5c:
         13:15:96:da:75:90:0d:c6:0f:88:56:3b:c5:93:86:8d:1c:d3:
         e2:86:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:27:31 2026 by rpki-client