Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
File:                     CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft (raw, json)
Hash identifier:          TTl4FgjouqxouaSYZVC/fJ9PgDeqDoy9ureOjPUvIyc=
Subject key identifier:   B4:8B:40:37:1F:14:A1:42:09:5D:D4:56:50:81:83:48:BF:AA:63:BD
Authority key identifier: CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF
Certificate issuer:       /CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF
Certificate serial:       12A3F3A2861938202182B1556CB09DFC419CE5D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
Manifest number:          3B
Signing time:             Wed 13 May 2026 01:07:58 +0000
Manifest this update:     Wed 13 May 2026 01:02:58 +0000
Manifest next update:     Thu 14 May 2026 03:41:58 +0000
Files and hashes:         1: 3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa (hash: xz6DsVEuqM9pTOuVhswZzVRnjy0nzplVOcgfUWt64lI=)
                          2: 323830343a366432303a3a2f33322d3438203d3e20323730353134.roa (hash: qf5QNhPzKrw8/RZQZNr8z6Ue32Ms3xSNTdvui6JgW80=)
                          3: CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl (hash: MlCLk4AO74Duoz3XVu33q8jEsRm+10uPMYAzCBiebik=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl
                          rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a3:f3:a2:86:19:38:20:21:82:b1:55:6c:b0:9d:fc:41:9c:e5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF
        Validity
            Not Before: May 13 01:02:58 2026 GMT
            Not After : May 14 03:41:58 2026 GMT
        Subject: CN=B48B40371F14A142095DD45650818348BFAA63BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:36:79:80:e0:8c:80:09:f1:81:e5:a7:6b:
                    3d:13:55:7e:b7:b0:9b:79:91:36:ff:61:c1:64:6b:
                    b3:69:43:81:f5:8e:3a:ea:a0:e9:b9:e8:0a:c8:25:
                    0f:fa:be:55:15:d9:05:d8:bf:f0:61:70:ce:2e:6e:
                    1a:ce:77:80:dd:21:66:90:a2:6d:8b:63:60:53:f3:
                    98:7c:08:3e:8a:0c:1c:13:0e:90:50:15:de:26:10:
                    c3:7b:7d:8c:ea:97:c4:5c:46:d9:96:8d:a9:c6:cd:
                    71:47:e8:2c:c0:85:1f:21:ad:c0:38:ee:43:3a:b0:
                    5d:94:c0:c1:1b:4e:f3:46:5b:c4:33:e9:a6:57:27:
                    29:33:3e:89:78:b1:72:c3:b0:8a:68:ee:58:f5:dd:
                    b9:8b:a8:6a:0a:aa:9a:be:5b:1b:11:32:db:6a:e7:
                    03:a5:87:c8:eb:33:65:db:fc:da:25:77:5a:48:21:
                    f8:4f:bb:99:c7:ee:a5:dc:c0:d9:97:4c:65:63:8e:
                    bc:cd:96:d1:c1:f5:d7:2a:c6:56:ae:b9:ee:f9:b6:
                    cd:14:85:cf:a0:fb:51:82:6f:10:bb:88:a6:1a:21:
                    ce:73:9c:d3:41:c4:39:af:a0:77:48:ad:a5:96:fa:
                    fa:62:5d:57:bd:17:57:cc:42:4d:97:78:18:cb:d9:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8B:40:37:1F:14:A1:42:09:5D:D4:56:50:81:83:48:BF:AA:63:BD
            X509v3 Authority Key Identifier:
                keyid:CA:5B:42:F9:98:EA:E2:E7:7B:3C:A3:87:E9:B6:D4:84:EB:39:52:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/CA5B42F998EAE2E77B3CA387E9B6D484EB3952DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:21:c1:da:64:9d:8c:51:64:38:48:3f:de:58:d9:8a:3b:b0:
         a0:97:a8:4b:41:82:32:73:d1:fd:73:7a:45:1c:02:ed:01:3d:
         60:1e:9f:99:6c:09:3d:0a:24:78:c8:7b:2f:d5:88:15:43:9e:
         ef:9a:c1:06:c0:d1:98:4a:e1:19:15:39:0e:9a:0a:db:29:97:
         2f:08:ed:32:15:1f:e8:b0:fc:88:7b:cb:59:94:c4:23:d1:b9:
         dd:6e:78:5d:9f:f8:cb:e2:58:e8:5a:10:2c:d3:a5:37:52:30:
         ac:b1:ba:dc:bc:b1:96:42:f3:3e:4a:09:89:cc:4b:d0:43:93:
         98:ca:d4:c7:1c:4a:86:8d:0a:be:77:66:32:3a:10:07:46:38:
         10:d8:ec:63:fd:fb:b7:07:0d:c9:ef:ba:3e:69:38:0b:02:ed:
         ac:0e:be:13:d7:6f:14:85:64:f7:64:96:1d:6e:61:87:dc:95:
         b9:8d:6a:04:a6:9e:51:ee:4d:63:21:74:84:e4:e4:cf:d8:2f:
         64:a2:40:f0:27:01:0e:4d:ef:79:51:98:41:6e:8e:81:80:dc:
         13:95:b5:72:1d:db:38:d9:c8:e5:66:52:68:a2:ab:b8:e9:07:
         ba:0e:9c:f4:73:ca:f1:7d:d8:7c:1c:f9:93:44:ee:8d:a7:da:
         f3:4e:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:34 2026 by rpki-client