Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.mft
File:                     A4EE038911DF33B6C5078A0D31896E9E63D13909.mft (raw, json)
Hash identifier:          pufPRZ0F8ZR02SDxsBzlocuby1U6k6iMQ8++v1MgdBI=
Subject key identifier:   30:80:43:1F:F4:1E:78:46:F0:4A:2C:6C:B9:CF:E7:D3:F7:B1:57:41
Authority key identifier: A4:EE:03:89:11:DF:33:B6:C5:07:8A:0D:31:89:6E:9E:63:D1:39:09
Certificate issuer:       /CN=A4EE038911DF33B6C5078A0D31896E9E63D13909
Certificate serial:       6D6927EF6D735D06CF70A5FBE0418BB4A0BF7954
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.mft
Manifest number:          29
Signing time:             Fri 17 Apr 2026 11:58:53 +0000
Manifest this update:     Fri 17 Apr 2026 11:53:53 +0000
Manifest next update:     Sat 18 Apr 2026 13:12:53 +0000
Files and hashes:         1: 3138362e3234392e39362e302f31392d3332203d3e203238323736.roa (hash: mtApJOZzkgyGCKjgy7Qqnnxugk8Obwa6bgLW7Fu39Nw=)
                          2: 323830343a353661343a3a2f33322d313238203d3e203238323736.roa (hash: zMJruwhfW1DIc8vprCern3PlKwl8daIb6lGuoGxI2RY=)
                          3: 3138372e3130322e3130382e302f32332d3332203d3e203238323736.roa (hash: IqlWN/8hZ4kWaWhoeRu8AyVjK29BFkc8sjIaCDue3+M=)
                          4: 3138372e3130322e3130342e302f32322d3332203d3e203238323736.roa (hash: cve/5bxauhLbkey64wrOXxW5nkcM1SeOjRry7/sxvRY=)
                          5: 3138392e31342e36342e302f32302d3332203d3e203238323736.roa (hash: +kGE/xcLf25u09ygj8IODGpMkIuXfxTp7W64sj7a1+Y=)
                          6: 3138372e3130322e3131302e302f32342d3332203d3e203238323736.roa (hash: LMQi8wGEfRZx6SU1hUutQ6D00sAI7q8a9yzhWx94WJ0=)
                          7: A4EE038911DF33B6C5078A0D31896E9E63D13909.crl (hash: Oyhl+ivKLSIWa27Ml2gXY2utvITy/LIDAO1L+djKwng=)
                          8: 3138372e3130322e39362e302f32312d3332203d3e203238323736.roa (hash: ueA1k14CYSOs5udtcNaVkSYjUs4JWLbg9iuYRKK5kz0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:69:27:ef:6d:73:5d:06:cf:70:a5:fb:e0:41:8b:b4:a0:bf:79:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EE038911DF33B6C5078A0D31896E9E63D13909
        Validity
            Not Before: Apr 17 11:53:53 2026 GMT
            Not After : Apr 18 13:12:53 2026 GMT
        Subject: CN=3080431FF41E7846F04A2C6CB9CFE7D3F7B15741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:37:7f:79:7d:42:40:08:5c:4d:5e:1f:b4:
                    33:35:ae:84:25:00:96:19:2e:0c:3b:b8:78:45:88:
                    42:8d:d9:3d:ba:a2:af:1a:00:fa:0f:e6:c4:30:8d:
                    0f:10:a7:26:f3:4d:90:d3:96:d7:60:92:20:a9:fc:
                    cd:64:e1:2e:11:69:39:70:5e:e3:60:9a:1c:4a:2d:
                    bd:be:9c:d3:be:41:c3:ba:66:21:f5:3b:d8:93:19:
                    db:7e:e5:79:6a:b2:b3:76:1b:d4:62:d7:ff:c7:0d:
                    56:ea:4f:a8:da:dc:8d:1c:aa:e2:e0:7f:4f:24:11:
                    5f:a0:f4:ac:82:ca:0f:9e:e3:1f:60:51:24:dd:46:
                    5a:32:c3:21:e0:99:55:14:0f:f5:4e:7f:b5:e3:77:
                    08:46:e9:d6:eb:e7:c9:22:a7:e6:ec:9c:5a:ba:84:
                    58:e4:91:a2:c8:b3:df:63:6e:2b:d3:18:29:15:a2:
                    58:f8:8b:90:00:5a:37:8a:a5:0d:a7:b4:e4:d4:11:
                    db:3e:b1:83:fb:23:d2:8e:7d:74:67:8d:2e:15:eb:
                    9d:ea:15:1c:7a:d4:d9:0b:96:c9:57:7a:22:41:cb:
                    72:6d:31:83:3c:e3:5b:4a:a5:3e:dc:79:35:78:10:
                    ac:3a:66:bc:f8:8a:fb:a5:72:d5:70:40:70:14:59:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:43:1F:F4:1E:78:46:F0:4A:2C:6C:B9:CF:E7:D3:F7:B1:57:41
            X509v3 Authority Key Identifier:
                keyid:A4:EE:03:89:11:DF:33:B6:C5:07:8A:0D:31:89:6E:9E:63:D1:39:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:c9:74:23:6a:4c:67:56:dd:ef:ea:b0:bf:c4:1a:fc:42:
         61:f7:5b:ed:da:18:ab:ef:a7:c5:fc:30:85:d6:5f:ca:8a:ab:
         e3:e7:99:1b:52:b1:a6:c7:e6:57:07:cd:8f:de:47:75:f5:38:
         df:97:13:58:64:74:95:35:82:dd:82:42:27:a9:8e:6f:4a:1c:
         8b:5a:83:6b:52:ae:a5:61:9b:31:6e:d6:0e:21:a7:a3:7e:71:
         ca:97:b9:f2:47:8c:99:59:e8:b0:fc:9d:54:31:e6:12:4a:ba:
         4c:0d:df:83:bf:3a:87:3e:1c:e2:43:2c:09:c0:83:e1:a4:05:
         2c:ac:79:9b:9a:04:be:23:e4:d5:9a:01:fb:e7:da:ba:8e:dd:
         ad:07:66:a4:db:f4:27:e5:d0:f1:ff:16:c5:a3:c6:6f:54:67:
         71:ac:96:a6:e7:34:13:00:5d:d0:76:68:a0:93:85:fd:3d:3e:
         33:8d:97:45:eb:d1:42:92:2d:f0:4a:44:82:40:f8:4a:24:f3:
         fc:87:95:cf:de:93:2d:9a:d1:e1:97:88:b4:1d:40:69:32:f7:
         a2:6a:d5:1c:ae:af:c0:22:38:8c:8d:b5:1e:df:9b:9f:a1:78:
         7a:aa:5c:13:97:2f:72:ce:e9:83:09:9a:80:7b:06:3a:d4:67:
         84:52:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:36 2026 by rpki-client