Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
File:                     BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft (raw, json)
Hash identifier:          4EBIkJKL4U+Mbx50KuTKxTQVlgeGH6JCRmpaHRCKUzo=
Subject key identifier:   0D:C8:A1:42:23:A1:58:10:14:1E:C6:E0:42:EF:0C:4B:E3:B8:17:3C
Authority key identifier: BD:11:E0:8A:DC:67:69:95:5F:3D:67:39:11:82:42:DE:BF:A4:8D:A7
Certificate issuer:       /CN=BD11E08ADC6769955F3D6739118242DEBFA48DA7
Certificate serial:       458DC3042B539A020DF3F344BB605C436761A355
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
Manifest number:          4B
Signing time:             Mon 02 Mar 2026 19:42:49 +0000
Manifest this update:     Mon 02 Mar 2026 19:37:49 +0000
Manifest next update:     Tue 03 Mar 2026 22:35:49 +0000
Files and hashes:         1: 323830343a383239343a3a2f33322d3438203d3e20323732353237.roa (hash: 1OnUECnkyQmog7XazHCHWrwvBR0ZMrSzL9SvhnkwK3k=)
                          2: BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl (hash: OHG4A2jB5vB+1dmilpWhyviKogO/mXfF6unmLfCFYEE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl
                          rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:c3:04:2b:53:9a:02:0d:f3:f3:44:bb:60:5c:43:67:61:a3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD11E08ADC6769955F3D6739118242DEBFA48DA7
        Validity
            Not Before: Mar  2 19:37:49 2026 GMT
            Not After : Mar  3 22:35:49 2026 GMT
        Subject: CN=0DC8A14223A15810141EC6E042EF0C4BE3B8173C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:5f:28:03:f4:f7:8f:10:13:c0:67:9c:b4:
                    39:8c:a5:3f:22:45:bb:8f:f1:6e:02:5b:06:4c:da:
                    13:d4:ec:3a:b8:89:fc:62:6a:2b:2d:01:9b:42:16:
                    5d:bc:c9:11:1b:4c:92:7c:0f:f7:8c:1e:ca:8f:40:
                    ba:03:9b:5a:eb:81:f8:2e:81:f6:9a:8c:37:89:0d:
                    70:0f:1e:d3:4e:a6:35:64:91:1d:a2:c2:e2:c9:17:
                    8f:08:cf:7c:0e:15:d3:2c:f5:60:a2:56:1b:37:b1:
                    90:3d:3f:a3:3e:b7:d6:d6:da:84:96:66:a6:d7:1d:
                    a6:6c:e1:06:b4:a4:88:ae:3f:f9:48:10:6f:78:a1:
                    5f:74:36:b5:ef:40:65:9a:3b:5c:9d:ae:84:f7:cc:
                    62:b0:51:37:89:ef:5e:6e:10:70:1c:9e:44:30:59:
                    a5:1f:d8:0c:85:29:c5:32:aa:c4:f8:82:c2:0d:f8:
                    af:70:10:33:c7:cf:b3:05:38:96:07:bd:67:31:17:
                    c6:f9:ce:6e:0c:56:95:a3:fd:e2:0f:dc:68:02:94:
                    6b:a3:20:6f:9a:10:85:14:20:4f:3c:a3:6c:7e:6c:
                    ec:af:82:6c:b8:e7:8d:e3:58:30:c3:a7:f2:2d:58:
                    81:13:41:40:5d:c7:93:af:c4:19:4f:0c:4a:9c:11:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:A1:42:23:A1:58:10:14:1E:C6:E0:42:EF:0C:4B:E3:B8:17:3C
            X509v3 Authority Key Identifier:
                keyid:BD:11:E0:8A:DC:67:69:95:5F:3D:67:39:11:82:42:DE:BF:A4:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD11E08ADC6769955F3D6739118242DEBFA48DA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5FHFXawCVaGbiCVnjkahT9FEgax4R5WwFUVtMGzaF4h/0/BD11E08ADC6769955F3D6739118242DEBFA48DA7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:c1:d7:d5:de:f6:d5:3c:b8:d0:f2:53:60:95:a1:ff:e9:
         aa:94:e2:a1:40:60:3d:e5:4c:b0:24:79:a5:e4:60:a9:01:35:
         41:f0:48:7d:6a:3a:84:41:a7:b4:e1:ef:e2:76:5a:b0:64:c2:
         cb:79:48:96:98:0c:19:2e:34:6e:b4:02:9e:14:fe:78:a9:5c:
         df:07:b8:ac:c8:16:3b:6b:27:69:49:e2:e2:6b:4d:16:63:3b:
         1f:19:c2:d6:80:07:05:18:64:13:2d:4b:67:f1:7b:e2:d0:ff:
         ed:a6:f6:89:d6:bf:46:36:af:e8:44:1c:c3:4a:98:c9:32:9e:
         3e:52:51:57:3f:d3:67:bd:0e:3f:83:cb:65:7c:13:4c:a4:30:
         2f:00:ee:fa:7b:72:39:ce:69:82:3e:a5:6d:ff:40:21:96:0c:
         c7:2a:d6:1b:e9:39:aa:7f:ae:d0:7a:3e:17:17:aa:5f:f4:6b:
         27:55:38:c8:21:ac:c6:99:4f:f4:f1:55:ed:07:a8:01:cd:6c:
         ba:71:06:59:c4:ae:38:5e:17:ae:32:30:2e:21:7a:a0:02:07:
         68:33:21:0a:96:bb:78:af:4a:0e:17:f6:a3:ab:66:9c:b6:2d:
         ae:d4:eb:03:53:e1:e2:4a:fc:bd:93:22:4d:b6:7b:aa:40:6f:
         1c:98:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:45:32 2026 by rpki-client