Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
File:                     457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft (raw, json)
Hash identifier:          IAaIVopAH8cbY/0NnVM4Icp/CnvbPc/GzhFYTA3WWZ8=
Subject key identifier:   21:92:1C:10:83:5E:AA:99:63:D2:FD:CB:F8:B2:9E:32:D9:7E:B3:92
Authority key identifier: 45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C
Certificate issuer:       /CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
Certificate serial:       4BC20991ED4097D6F397A3E0E8D53D0F8A8F51AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
Manifest number:          40
Signing time:             Wed 13 May 2026 02:54:30 +0000
Manifest this update:     Wed 13 May 2026 02:49:30 +0000
Manifest next update:     Thu 14 May 2026 03:22:30 +0000
Files and hashes:         1: 323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (hash: nUQyjMloJCS/+EcGR8sFzwwYNGyOM0O5TkGmhJotCfw=)
                          2: 457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl (hash: SGlB+oAQQ2yJW7tSGLxP7casqoamEgqqpJRM2sDDLzU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl
                          rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c2:09:91:ed:40:97:d6:f3:97:a3:e0:e8:d5:3d:0f:8a:8f:51:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
        Validity
            Not Before: May 13 02:49:30 2026 GMT
            Not After : May 14 03:22:30 2026 GMT
        Subject: CN=21921C10835EAA9963D2FDCBF8B29E32D97EB392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:79:44:f4:b2:9d:b6:c9:e4:d6:23:f9:3b:
                    ab:1f:7b:ef:8d:04:6c:06:da:0f:85:3a:af:bc:9f:
                    8a:4d:1d:8c:7a:07:7f:a2:06:a2:e3:e0:ec:f2:69:
                    1c:2e:f6:1c:a3:86:fb:39:b3:e7:1c:71:ec:ec:be:
                    fa:a1:9b:8f:9b:5f:87:5f:f5:a7:6f:a0:5a:7e:6c:
                    8a:c8:56:8d:b9:b0:34:d1:a4:5c:0c:f4:73:f1:a7:
                    42:24:89:d5:75:90:c4:de:ff:7f:ac:54:f5:c0:08:
                    48:e7:a0:9b:13:9b:fe:2a:6b:9e:c0:27:37:52:90:
                    31:d6:99:fd:6b:4d:9e:49:fe:1f:8d:04:c0:ce:a1:
                    1a:5e:5c:d1:fd:83:7e:a8:ac:88:d9:fe:b7:1d:72:
                    f0:7f:47:75:33:bf:07:d2:f8:0b:61:64:1c:5d:64:
                    1b:c8:81:bc:ec:2c:a0:fd:6f:19:e1:6d:f3:6e:32:
                    06:2b:71:70:89:b9:42:be:e4:03:ea:bf:ff:bb:41:
                    e8:ff:7c:14:26:8a:58:2e:cf:6a:91:ad:39:22:57:
                    07:f3:09:8d:ad:46:08:cc:05:42:86:1f:70:db:19:
                    43:2a:9d:b6:7c:60:40:af:eb:bc:20:7c:8b:14:1e:
                    d9:5d:88:a2:f6:16:2d:6a:dc:7c:5d:8a:50:8c:4c:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:1C:10:83:5E:AA:99:63:D2:FD:CB:F8:B2:9E:32:D9:7E:B3:92
            X509v3 Authority Key Identifier:
                keyid:45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c3:2d:94:36:d7:05:ca:b7:97:9a:68:54:65:98:12:74:8a:
         ad:9e:68:2f:30:0f:f5:7f:f3:8f:bd:ea:fa:fa:31:0a:b4:7a:
         d0:5d:16:9f:53:42:fc:00:c9:39:f2:11:a7:6a:dd:26:45:d7:
         88:dc:f6:d3:6e:c4:78:84:9e:ca:f8:14:de:7d:39:f4:d6:18:
         8c:b7:fa:b7:ca:7a:7d:a0:4f:e2:a2:2c:92:77:c9:bb:7a:6d:
         ff:90:a1:be:0d:b1:e2:18:be:8c:e3:9c:e5:c0:43:61:0b:49:
         c5:99:25:b8:1a:27:a0:8f:71:0c:f6:fb:05:53:30:0c:b2:0b:
         83:73:e9:fb:60:15:c0:31:29:62:a5:f4:2d:71:ec:e3:77:56:
         21:e3:a7:84:09:ce:9a:5e:9f:0e:d5:dd:84:c2:5f:e0:ba:00:
         80:4b:19:be:05:8f:41:24:47:0f:a6:d6:f5:54:86:16:cf:8f:
         4e:98:62:1e:9f:a5:38:a3:d2:b2:fd:65:f3:88:cb:32:38:eb:
         09:6a:25:0b:95:50:e5:76:e0:9b:45:d4:a2:cf:ee:35:ed:75:
         8e:56:aa:80:51:51:c7:4c:9b:f6:75:71:16:ee:2c:07:55:b7:
         f9:08:90:75:e7:b6:41:2c:5d:14:18:bd:0b:89:65:71:ba:c8:
         ec:7c:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:58 2026 by rpki-client