Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft
File:                     444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft (raw, json)
Hash identifier:          NBeycsNVmsvSR4YIp3UXowCVvfQvY5zkJqOiuzVt6dU=
Subject key identifier:   22:49:CB:1F:43:DA:07:0A:A8:59:B3:BA:2B:74:F7:77:AB:1E:98:69
Authority key identifier: 44:4E:CC:C9:A5:8C:62:DF:43:E3:EA:52:76:90:63:D3:18:C9:1E:DA
Certificate issuer:       /CN=444ECCC9A58C62DF43E3EA52769063D318C91EDA
Certificate serial:       530E145547558FD824F035ACC1BD6AF4A5E2CBF7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444ECCC9A58C62DF43E3EA52769063D318C91EDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft
Manifest number:          1F
Signing time:             Fri 17 Apr 2026 15:40:22 +0000
Manifest this update:     Fri 17 Apr 2026 15:35:22 +0000
Manifest next update:     Sat 18 Apr 2026 15:50:22 +0000
Files and hashes:         1: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: U7CWo12F8Q1GWrsGZSv5yKc6Fyd1ngAI9h6IvX/nWI0=)
                          2: 444ECCC9A58C62DF43E3EA52769063D318C91EDA.crl (hash: lmM7k23/XZ3pU6XS52ug+BMlpX7G3BvU4SanWqpcsxY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.crl
                          rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444ECCC9A58C62DF43E3EA52769063D318C91EDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0e:14:55:47:55:8f:d8:24:f0:35:ac:c1:bd:6a:f4:a5:e2:cb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444ECCC9A58C62DF43E3EA52769063D318C91EDA
        Validity
            Not Before: Apr 17 15:35:22 2026 GMT
            Not After : Apr 18 15:50:22 2026 GMT
        Subject: CN=2249CB1F43DA070AA859B3BA2B74F777AB1E9869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:b3:17:12:05:11:59:d8:72:bc:86:d7:30:
                    fb:20:7e:7c:ed:52:24:24:73:65:d9:4e:04:f7:58:
                    1d:05:cf:4e:98:9d:f2:cc:d5:a1:a0:dd:23:42:06:
                    a0:50:aa:0c:f0:34:16:34:e0:9d:f7:9d:9e:24:44:
                    21:f8:4d:74:97:ba:f0:5a:ac:8c:45:51:16:fb:b0:
                    96:38:e4:ee:de:23:b0:94:52:88:0c:e8:88:44:ca:
                    d9:1a:dc:ca:84:e0:38:ee:dc:50:9f:9f:7a:42:8a:
                    40:31:0f:5b:76:ea:db:01:5c:39:d3:58:5b:c3:54:
                    eb:8d:08:a6:94:ae:6d:66:6d:3f:bb:62:f8:7f:c9:
                    42:8b:40:ec:3c:75:d9:50:96:1c:d9:20:b9:e6:4e:
                    a5:e4:78:f9:2d:04:36:c7:bb:cf:dc:ac:59:7b:3e:
                    6a:3c:9c:99:9a:a4:4e:c6:99:a1:c6:ee:fc:56:28:
                    ca:f3:ae:5f:dd:0a:29:a0:e2:ad:e4:71:7a:c1:a2:
                    8b:9e:b5:91:7d:cd:f4:b8:ba:91:c6:f0:94:dc:b6:
                    12:68:63:d8:b6:ca:95:1c:f4:41:dd:6f:f1:a5:d9:
                    7d:0f:68:43:2f:73:52:5d:63:02:a9:8e:b3:67:88:
                    05:38:b7:1a:81:db:80:ba:4f:ab:9a:9c:c6:51:58:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:CB:1F:43:DA:07:0A:A8:59:B3:BA:2B:74:F7:77:AB:1E:98:69
            X509v3 Authority Key Identifier:
                keyid:44:4E:CC:C9:A5:8C:62:DF:43:E3:EA:52:76:90:63:D3:18:C9:1E:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444ECCC9A58C62DF43E3EA52769063D318C91EDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/444ECCC9A58C62DF43E3EA52769063D318C91EDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:4c:69:ef:a2:94:a5:1b:d2:d0:e6:91:bc:db:29:ff:7c:9e:
         b0:6e:c9:08:63:d5:94:00:31:cc:ab:37:aa:c4:1c:a6:9c:3d:
         f3:94:8d:2c:b2:ca:86:7d:3b:95:10:8c:ee:c1:7a:fb:15:db:
         54:82:e1:f1:f7:43:d4:60:f7:c9:3a:66:d7:58:73:10:6f:47:
         08:35:e4:35:e6:7a:c7:1c:99:75:c2:ff:dc:07:95:53:c8:7f:
         5c:bf:94:82:f8:99:b4:85:ae:f4:87:3b:21:ef:86:b6:b5:a0:
         13:d2:3d:6f:93:a0:39:a3:db:15:d8:fc:f3:65:be:66:43:e1:
         01:2e:68:b9:35:f7:08:9e:2c:9a:bb:13:ca:44:6b:dd:7a:02:
         60:ec:2a:d7:73:39:39:21:e7:9a:51:70:30:d2:4b:7c:0d:a2:
         03:65:7d:0d:ab:26:b2:c2:09:7a:22:2b:2b:fb:4d:20:a1:b3:
         39:62:88:ac:cc:37:e1:ac:ab:a9:9e:31:f1:45:14:74:3a:5e:
         96:4f:0e:75:77:de:e6:54:f3:27:d1:1b:f6:bd:e1:d8:cb:5b:
         d2:4a:1f:30:b9:11:91:b4:05:75:42:74:36:6b:7c:83:c4:36:
         89:eb:be:48:73:c5:93:81:2d:71:ce:48:cb:ae:06:79:7d:23:
         b8:f4:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:43 2026 by rpki-client