Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          lkWjTFzZSAHdPsHqUUsoHLZHd74AxZdGCP0kJ7Qb23g=
Subject key identifier:   A4:09:6E:09:9C:4F:05:2F:53:B6:6D:85:8A:32:A7:45:BA:1E:21:79
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       450C46ED005E6FCB65680821DAEECC9E0320BB55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          0427
Signing time:             Sat 13 Jun 2026 09:59:45 +0000
Manifest this update:     Sat 13 Jun 2026 09:54:45 +0000
Manifest next update:     Sun 14 Jun 2026 13:30:45 +0000
Files and hashes:         1: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: ofZAm/63kBrJni85nV3EAwS8dF/47Y8JzdG2k1jrTX8=)
                          2: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: hQA6R0h91TqIbj3AMVH+4FPJsPb90jZdcN+YrspMbTw=)
                          3: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: JoBzHgvk4gU0QlDfWDCeRvYha95iC9WfxjjXOUvXdA4=)
                          4: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: Qu7I77PqdFliCjj3OW+cWIGsfVyEjBsvnuuQWFlj7rE=)
                          5: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: zOvLTOO6Vkcw7Ax1wO7Tx701RtFyCVCNyoFhhTy0S5I=)
                          6: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: iL8XLYncXiYWqu+lj4V4L53veMNeIOP1d6bwvkVpJlQ=)
                          7: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: pbg51lNDCoo04my7k10Os+fjguSaYJQdh10TOGVkS7U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0c:46:ed:00:5e:6f:cb:65:68:08:21:da:ee:cc:9e:03:20:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Jun 13 09:54:45 2026 GMT
            Not After : Jun 14 13:30:45 2026 GMT
        Subject: CN=A4096E099C4F052F53B66D858A32A745BA1E2179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:75:de:7f:94:78:91:b0:87:53:ed:cd:f2:
                    b2:a6:13:a1:b6:48:03:ac:9b:a5:b2:c7:cf:77:b3:
                    96:39:0d:97:1a:2f:55:d7:8b:ee:73:5e:96:b3:25:
                    fa:64:c6:e1:ad:a8:84:6b:16:7c:35:b6:01:bd:4b:
                    e1:a0:0e:fd:83:99:5e:4c:d6:e9:35:b3:96:3c:43:
                    f8:05:3a:00:3b:d6:bd:0e:5e:4f:50:e0:5c:1e:00:
                    e0:40:77:ba:88:d7:4b:97:36:c1:80:3a:a9:4c:8c:
                    3e:e5:4a:ea:9b:48:37:4c:26:78:fb:ba:12:ed:7d:
                    3a:ef:ee:31:13:36:5c:3f:a5:a8:e8:60:68:f1:be:
                    9c:f1:ba:04:db:44:ed:7b:3a:bf:cf:c3:a1:28:15:
                    63:d6:c2:43:20:05:9d:35:79:3c:b9:fb:2c:be:98:
                    58:85:9f:5a:3a:7d:72:cb:98:23:73:ac:fa:f1:bf:
                    a3:42:a2:fc:08:bd:bd:47:67:61:72:f5:ff:bc:96:
                    86:e2:7c:12:ae:99:03:1c:a5:51:0c:8b:23:ac:cd:
                    f1:ac:f9:b0:0d:3e:3f:b0:de:7e:2a:e9:2b:62:16:
                    0a:0b:4d:4d:f9:56:62:3e:47:09:d2:e8:85:5a:c7:
                    7f:52:4c:66:9a:52:46:90:a8:7c:a9:ff:4b:57:31:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:6E:09:9C:4F:05:2F:53:B6:6D:85:8A:32:A7:45:BA:1E:21:79
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:57:75:9a:98:7d:b3:b3:c0:e9:48:b6:91:49:cd:38:10:
         f4:d0:0c:40:26:ea:85:5e:f6:03:4a:ae:f5:b9:dc:f0:d9:66:
         31:6d:81:f5:82:34:23:c4:3e:32:04:50:39:d0:20:a9:97:b3:
         ac:fc:e9:e4:2e:3a:27:b4:5f:28:cb:63:c2:8e:cd:0b:c7:28:
         3f:8f:4a:c3:d6:d1:2e:f3:b8:ce:14:03:fa:28:8e:f9:a2:c7:
         c9:b3:9a:06:d9:16:00:da:c3:44:e6:1e:cc:e1:03:fb:d4:90:
         72:d0:ca:eb:5e:7d:48:0c:ca:86:90:24:40:78:f5:45:77:d6:
         01:5d:87:0a:31:68:2f:61:ae:b5:d2:95:07:9a:8d:22:07:2a:
         54:c0:1e:b4:01:f2:b7:c0:e9:12:17:e5:5a:1a:cd:ba:2e:5c:
         86:4e:2d:83:c3:27:b9:ee:aa:8d:6f:6d:d0:0c:83:ee:22:8e:
         12:82:c4:ee:58:71:2d:f4:d4:d7:22:5a:7c:53:1a:d5:fe:7d:
         c7:50:65:09:dd:12:c0:9a:15:92:e0:b9:c3:2a:85:59:ef:cf:
         a7:44:9c:6c:74:41:d1:32:ff:1a:71:27:8c:e1:96:e2:4a:26:
         c9:50:6b:08:10:cf:5f:db:87:70:e1:ce:d3:4e:74:48:36:be:
         37:91:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:44 2026 by rpki-client