Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
File:                     BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json)
Hash identifier:          NDZmijGboUhhsjjMT1F9F6rmvIXJax8Gbkwt4XzlLRg=
Subject key identifier:   40:AA:F3:A2:2A:D8:A6:48:A2:DE:C9:DA:4B:25:9F:C6:1D:12:90:8F
Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46
Certificate issuer:       /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
Certificate serial:       0AB04A90EB9093C9BDE93485F06739BA22FB6DEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
Manifest number:          0195
Signing time:             Wed 13 May 2026 01:14:56 +0000
Manifest this update:     Wed 13 May 2026 01:09:56 +0000
Manifest next update:     Thu 14 May 2026 03:53:56 +0000
Files and hashes:         1: 3133382e3138362e31362e302f32322d3234203d3e203631363233.roa (hash: JWwJnqFVLfb7s0xn8ymrfclHa6+SS+4LbQrsuCJSidU=)
                          2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=)
                          3: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: wCPj9uk4sMgGdu9Zh0yRN0r3e1E4b6qpikA+YMcgFns=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl
                          rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b0:4a:90:eb:90:93:c9:bd:e9:34:85:f0:67:39:ba:22:fb:6d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46
        Validity
            Not Before: May 13 01:09:56 2026 GMT
            Not After : May 14 03:53:56 2026 GMT
        Subject: CN=40AAF3A22AD8A648A2DEC9DA4B259FC61D12908F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:f0:69:9d:41:e7:2a:df:a8:d8:41:0f:fc:
                    47:90:05:22:5b:fb:90:ad:48:ed:ff:1c:fb:a2:81:
                    cf:9b:fe:5e:3a:f3:20:22:6a:6b:06:55:58:d9:a5:
                    00:e5:6d:21:23:b2:48:03:9a:48:e9:e6:6e:80:f9:
                    48:e8:14:42:c9:e3:bb:65:7a:6e:37:e3:3a:77:af:
                    c7:d3:30:46:83:b9:c2:2a:81:18:ae:34:95:3d:f7:
                    36:17:ca:65:20:eb:85:fb:6d:9f:f6:a6:df:65:02:
                    14:ce:17:1b:fa:5e:5b:92:51:93:ea:6c:92:f4:07:
                    d7:c8:f1:f4:e2:96:e3:8f:0b:66:19:87:7d:8d:cf:
                    b6:f6:e3:49:e7:aa:fb:a9:90:e9:7f:27:fb:66:fb:
                    da:01:72:bb:c9:b2:2c:55:62:98:82:2a:87:bf:c9:
                    3a:0f:8c:79:9a:f1:e6:b8:dc:b9:10:fd:76:d4:78:
                    be:dd:5d:b5:cc:f3:4b:08:e9:c6:34:01:66:be:ad:
                    e3:3e:29:2d:3f:9c:b5:e1:61:69:2e:97:33:9c:f5:
                    a1:d7:79:c8:1f:ad:94:4d:18:36:82:68:63:db:3d:
                    92:4b:72:9d:9b:93:dc:8c:78:b3:0a:9d:fa:44:82:
                    35:9b:9c:70:1a:9b:95:f6:8c:0b:15:80:70:29:56:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:F3:A2:2A:D8:A6:48:A2:DE:C9:DA:4B:25:9F:C6:1D:12:90:8F
            X509v3 Authority Key Identifier:
                keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:87:f7:e3:2c:d4:d8:65:64:38:07:d8:6d:b9:da:64:1b:aa:
         2f:3f:22:99:00:75:15:df:a6:8d:f9:cd:74:0b:b3:d7:94:6a:
         72:60:66:8a:a6:e1:a2:f2:46:1f:af:6f:38:07:f0:b7:99:d6:
         b4:ae:8f:a0:8f:34:79:16:d3:41:2e:fe:01:ef:8a:93:a1:ea:
         97:87:85:94:b3:27:94:67:e3:80:46:17:08:cc:f6:20:7e:f7:
         4c:aa:4c:24:46:ae:d2:c9:cc:24:de:4d:f1:3f:4a:7d:2e:b3:
         ea:2c:ff:6e:f4:e4:6a:76:51:8c:67:03:c6:ed:a9:2e:d8:6a:
         be:37:f1:7b:a6:1c:4f:34:fe:4f:bd:1a:e9:3b:a0:ff:e2:15:
         eb:6d:78:2d:00:c5:7d:3b:af:bf:09:d9:47:db:12:35:73:ef:
         f5:d0:47:5e:32:f7:04:40:9f:d7:5d:64:34:c1:5e:b4:fc:1a:
         99:0c:75:83:62:50:46:4d:32:46:6c:81:21:39:b5:03:e2:01:
         cb:44:8e:d8:e5:07:56:85:00:13:68:61:45:8f:a3:55:90:e1:
         c1:e1:49:2a:8d:5d:b8:34:66:02:39:c8:26:a6:71:5b:ac:e4:
         96:aa:8b:05:5a:48:42:3e:df:73:be:75:28:21:39:9b:b2:84:
         bf:48:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:04:24 2026 by rpki-client