Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
File:                     4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft (raw, json)
Hash identifier:          Nkp8BSw/lbkAt2TImRk9kcT5fd48c7bopg3bXhvFrkg=
Subject key identifier:   C9:94:8C:4E:0A:42:13:F0:89:3D:93:F9:AA:9C:95:3A:48:E6:11:29
Authority key identifier: 4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64
Certificate issuer:       /CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864
Certificate serial:       3A7F386DB1B669BABA3A2D7F802C186AF3E8B9DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
Manifest number:          4E
Signing time:             Wed 13 May 2026 01:29:46 +0000
Manifest this update:     Wed 13 May 2026 01:24:46 +0000
Manifest next update:     Thu 14 May 2026 04:36:46 +0000
Files and hashes:         1: 4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl (hash: UUFQQHY9JZKVMf7vPzY11sURun97h3xIW5rakv6ha/w=)
                          2: 323830343a363164633a3a2f33362d313238203d3e20323639323631.roa (hash: 3IV1UExwtWAtKrXnJvnh4k9jHtimZokTtJndoiNoD/0=)
                          3: 323830343a363164633a343030303a3a2f33362d313238203d3e20323639323631.roa (hash: vUWX6YYonafEiAWevLQ5MLrt4A2dhz4ewplvWyRMDho=)
                          4: 323830343a363164633a633030303a3a2f33362d313238203d3e20323639323631.roa (hash: tqJHoYFtZyhQiHPQM6YCU9Q+XvYfSc7hQ0VFl6F+sTk=)
                          5: 323830343a363164633a363030303a3a2f33362d313238203d3e20323639323631.roa (hash: VSakZdJ0r1lqw1cD2hhJATLiK6eSAiosRxLeP8iKSOE=)
                          6: 34352e3138322e31362e302f32322d3332203d3e20323639323631.roa (hash: HBfEvOLwV+a+06GBKwzwPe5QQiQVtbmFvCko9OyYUO8=)
                          7: 323830343a363164633a643030303a3a2f33362d313238203d3e20323639323631.roa (hash: opEw8Ds1rSXQDtQtzJ3ta2GnYH9fFslGeFEUtpjL0Wg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7f:38:6d:b1:b6:69:ba:ba:3a:2d:7f:80:2c:18:6a:f3:e8:b9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E2C31B12010C9D0C76033F64426C6A4E5DBD864
        Validity
            Not Before: May 13 01:24:46 2026 GMT
            Not After : May 14 04:36:46 2026 GMT
        Subject: CN=C9948C4E0A4213F0893D93F9AA9C953A48E61129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:9a:8c:b3:f0:ad:e9:e3:49:31:df:97:23:
                    9c:a9:53:31:ca:c6:a3:dd:25:b3:29:ed:fc:80:76:
                    59:b8:6f:7f:e7:55:24:24:64:62:fc:d3:3a:2d:08:
                    fb:f8:3b:7f:ce:90:f2:23:d7:a3:3e:ce:f0:5c:cd:
                    46:18:92:8a:25:10:ed:41:53:9b:d5:21:e4:f0:ac:
                    72:fb:f6:6b:1a:50:4b:da:d0:fe:42:24:20:1d:ea:
                    3f:ed:38:54:e7:ec:bd:b2:37:7f:34:bb:6a:ce:29:
                    79:df:a0:58:57:0e:df:3c:ab:4b:1e:3e:90:a3:a7:
                    14:5b:e2:ad:32:dc:3b:a6:8d:43:37:13:72:88:48:
                    f3:6c:d9:46:de:9c:d3:01:5e:48:8b:ee:b7:dd:8f:
                    80:1e:8c:99:27:17:ff:35:d2:0f:76:6c:28:84:89:
                    68:af:98:fb:c3:ca:af:29:45:3b:4c:6d:92:b3:84:
                    be:90:52:3e:3e:ad:8d:99:5e:77:f0:18:75:ef:e8:
                    94:96:a0:a0:2f:9f:1b:5a:a6:87:38:43:23:40:33:
                    a4:26:40:94:4c:40:13:bf:69:97:9a:e2:80:1a:65:
                    3b:0e:ca:8c:5d:89:d5:a1:41:74:5f:1a:eb:1e:0b:
                    a9:0f:82:e0:c2:1c:7b:fb:e3:74:83:bb:7d:29:92:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:8C:4E:0A:42:13:F0:89:3D:93:F9:AA:9C:95:3A:48:E6:11:29
            X509v3 Authority Key Identifier:
                keyid:4E:2C:31:B1:20:10:C9:D0:C7:60:33:F6:44:26:C6:A4:E5:DB:D8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/4E2C31B12010C9D0C76033F64426C6A4E5DBD864.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:14:c4:7a:4b:9f:e6:56:d2:e3:a4:3a:d1:8a:ee:40:02:
         bc:d6:bf:32:2e:e7:09:ba:10:4c:2e:1b:9e:24:71:ff:39:e1:
         46:1b:51:4c:23:f7:cb:ee:e2:a5:9c:f9:aa:1c:62:03:ff:10:
         d5:e3:70:00:fc:4f:c3:e6:74:81:04:3f:66:4d:53:6b:ae:7b:
         2c:60:27:e2:fe:30:58:96:3a:ef:1b:e9:18:7c:fa:c4:52:76:
         3c:45:79:80:d1:1d:67:2a:6b:be:b6:50:b5:5d:02:57:14:49:
         17:65:8d:e7:c6:4c:05:8f:31:6e:b6:f9:16:ef:cb:81:31:0f:
         2b:25:8b:63:da:45:92:49:79:1d:a7:a4:ec:10:c2:45:3e:ae:
         d2:de:03:07:5f:b6:9f:5e:04:63:4b:fc:a1:ad:ca:1c:81:4f:
         ec:c4:70:07:21:17:b2:1e:04:79:14:3f:fe:bc:50:90:e2:63:
         54:9c:00:11:43:cb:28:37:17:02:81:1d:9b:82:8d:37:be:27:
         92:7d:64:92:d5:76:68:f4:6f:b4:bd:c3:26:03:95:39:84:cd:
         11:12:fc:05:5b:45:e7:dc:53:22:7c:ee:a5:c4:93:bd:59:a3:
         6a:4b:40:94:76:28:ad:5f:4b:bb:4f:07:6b:03:08:cd:d8:d5:
         68:43:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:29:29 2026 by rpki-client