Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
File:                     4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft (raw, json)
Hash identifier:          mPJJETUDI46E4Qbmy0QSXga2IF1qc9ySTd0jJbV0nhU=
Subject key identifier:   5C:AE:93:03:5A:A7:6F:7A:09:F2:E8:58:32:6D:9C:36:99:84:A4:B1
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       418F9CE6ADE882D6E3F3C60381330B1BCBF3B24F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
Manifest number:          03E0
Signing time:             Fri 17 Apr 2026 12:10:14 +0000
Manifest this update:     Fri 17 Apr 2026 12:05:14 +0000
Manifest next update:     Sat 18 Apr 2026 12:36:14 +0000
Files and hashes:         1: 3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (hash: 0hzauCV0wT/MtZnP9UvS6g3zV0qIZFtSS0+M16KdCig=)
                          2: 3138362e3235312e3134342e302f32322d3234203d3e20313938393439.roa (hash: TI+xbECcd0ssnEUdmmE4CRRNLGYoyZJTQxH3bQZJABA=)
                          3: 3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (hash: omx3Go0xEFfn9d46a5ZS7lvGySxA23rM99rpi91rI/U=)
                          4: 3138372e31392e39362e302f32302d3234203d3e203238313330.roa (hash: FdHO8n/Cw9Tf5Q6J4PKxz18H6a7RJMaFmJr1S1UfhUA=)
                          5: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (hash: FI2pqfToMX8taegBaUKnnWSZoRkgfYYeD0Wm3SgQ2UI=)
                          6: 3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (hash: OEu9n/LrBCkl9Fru/02oN45kLw6bxKnNlcp4REf0G9E=)
                          7: 3134332e3230382e34302e302f32322d3234203d3e20313938393439.roa (hash: 4Qi0aLvcavk+XvJgKsPFCEwgWnot/utUq1Fz3BuRK7k=)
                          8: 323830343a3163633a3a2f33322d3438203d3e203238313330.roa (hash: Kne6QM8DQbSR/zgmLOoLRyaupfqmCeV0gbVUI5cBqso=)
                          9: 4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl (hash: Re5Q8rxgu4GfvS8mIfnOx4rHYmRUklEYepdoelMgeWU=)
                          10: 3138362e3235312e3134382e302f32322d3234203d3e20313938393439.roa (hash: vm/gPaGTpZPD9kYfzKAuvj9V92Tmc55qNWhLrxuEQlw=)
                          11: 3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (hash: q6WyP+0wXnvtz8TBjO6FuJlIl6JE0dp4RvztsVXxGLQ=)
                          12: 3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (hash: UAFAwG0hGkP1SBdxAkjQd4ojfnY8SzZy73NlOzMeo7k=)
                          13: 3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (hash: 5SPcMRkHPjy1RvcG/dN0d8mdz4GS720G0SsAuaz4x1E=)
                          14: 3133382e39392e3234382e302f32322d3234203d3e20313938393439.roa (hash: JFgOAfaCkDvhO3DvTS0Qbkh4hqxcjc4Mkh93PAg9Yak=)
                          15: 3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (hash: 9Rp2TO7BTKMKfkwKNLeNyOVcWIkqKv52BNlNVld9FO0=)
                          16: 3138372e31392e39362e302f32302d3234203d3e20313938393439.roa (hash: Ujx4iveKIGyW/dLSj5iqqN7kW9U1qM2i08ZFZz1KnbQ=)
                          17: 3138362e3232372e39362e302f32302d3234203d3e20313938393439.roa (hash: QxqX7sUYkj9/cMLOk2t81C5D5tq3JmGCVhoBTqOLW24=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8f:9c:e6:ad:e8:82:d6:e3:f3:c6:03:81:33:0b:1b:cb:f3:b2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr 17 12:05:14 2026 GMT
            Not After : Apr 18 12:36:14 2026 GMT
        Subject: CN=5CAE93035AA76F7A09F2E858326D9C369984A4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:76:74:37:e5:98:86:87:90:3a:bc:ad:70:
                    06:a3:49:d1:89:22:c7:05:bc:f6:22:ea:ac:8e:c3:
                    da:58:e8:79:e0:d4:bd:15:b8:31:30:fd:40:4b:e9:
                    80:d4:29:b0:42:d2:48:6c:07:d4:a1:e6:c7:6b:70:
                    d3:a7:c1:06:5d:de:32:49:e2:8f:46:44:50:43:1e:
                    c9:b6:30:2d:9c:0a:91:59:ac:71:9b:e8:6d:b6:7f:
                    c1:ff:0a:be:1a:45:39:df:66:51:fc:d1:e2:4d:0d:
                    c4:a7:2b:72:81:9c:42:47:43:e8:62:9b:58:6f:c4:
                    68:a0:05:f2:70:b4:d2:be:97:82:20:f3:07:c0:2e:
                    e5:8a:82:ee:3f:4a:e4:0c:69:2b:02:ec:68:01:34:
                    7f:0f:bd:6b:07:1f:83:db:21:2f:6f:cf:56:e2:e7:
                    36:a7:0c:f9:c0:20:d7:53:71:3a:5a:ba:2e:d5:cb:
                    dc:71:49:bc:7d:c9:05:f4:16:11:3d:24:32:e4:35:
                    e2:e5:75:6a:cb:61:57:93:95:bc:ef:0d:b8:fa:ec:
                    f2:9a:38:cd:27:1b:51:1b:35:de:a3:d5:e7:1a:7f:
                    65:b3:c1:c5:d2:7f:e9:2c:56:2b:53:73:f1:a9:9c:
                    f5:c0:10:87:32:7e:dd:25:bf:91:d5:3e:e6:f5:96:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:93:03:5A:A7:6F:7A:09:F2:E8:58:32:6D:9C:36:99:84:A4:B1
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:74:e9:27:2e:9c:00:0a:eb:5a:03:60:51:45:fa:f9:8e:b0:
         02:a6:0f:e0:d7:7e:f7:a3:ff:c2:15:f8:0b:cf:29:67:ce:3b:
         ad:b2:cd:ea:ec:9d:e8:12:eb:bf:3f:67:ef:e0:7f:3d:d5:23:
         8c:db:d2:84:38:5c:60:08:db:fe:1b:a2:fc:f5:e1:d7:ba:d0:
         63:9d:69:9d:a0:20:fe:d9:59:45:50:4d:87:b9:09:db:3a:a2:
         4d:19:6c:26:12:1d:8f:58:b0:c6:41:a4:f5:a3:90:dd:43:dc:
         9f:70:41:85:c7:8a:eb:03:df:4c:fa:d7:d6:63:2a:a9:38:4f:
         3e:8d:90:05:10:70:5f:b9:c4:3c:da:49:a5:8a:99:f2:6f:81:
         ec:a7:fe:b0:d1:d7:c0:da:33:39:52:4b:f8:a5:c2:a6:7d:9f:
         59:af:dc:fb:41:5e:11:f6:20:01:01:2c:9a:6c:0e:84:15:eb:
         02:04:68:ac:63:62:0d:ba:3d:f3:12:e0:93:ce:92:a5:b6:1c:
         3c:72:f7:b7:31:36:0b:32:5f:a4:04:b0:bc:47:77:7d:5d:25:
         96:6a:80:b1:37:0c:8f:3d:21:9d:7d:82:94:75:b4:9a:a2:76:
         29:3c:4e:a6:51:7e:c8:94:58:ec:5b:50:3f:c0:07:c5:ba:a8:
         a5:17:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:44:19 2026 by rpki-client