Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File:                     2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier:          UZBvNtBJ/7qyXgjTesn4Vajk7yngcchEKZgzsUAUd3w=
Subject key identifier:   91:33:E7:37:3C:66:2C:37:65:84:90:86:CA:16:B0:EC:D9:6E:4D:DF
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer:       /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial:       6D2828F09ECCEBCD4470D7FABF51705EC69A6E3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number:          0452
Signing time:             Fri 24 Jul 2026 12:44:53 +0000
Manifest this update:     Fri 24 Jul 2026 12:39:53 +0000
Manifest next update:     Sat 25 Jul 2026 15:09:53 +0000
Files and hashes:         1: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: 0CLnFOABznFCgpqED1YRRgWwVd9EY7KFJPcomWKy2Xw=)
                          2: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: jlig1EPT5cyy5wg0NyGcv4DRhyGVBHFRB8Z1Peg3ttQ=)
                          3: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: s/6BsoFV6DlEj43A1uUgBuwsEY01eiulnkS4P6GXEro=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
                          rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:28:28:f0:9e:cc:eb:cd:44:70:d7:fa:bf:51:70:5e:c6:9a:6e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Validity
            Not Before: Jul 24 12:39:53 2026 GMT
            Not After : Jul 25 15:09:53 2026 GMT
        Subject: CN=9133E7373C662C3765849086CA16B0ECD96E4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:9f:40:06:d2:4e:f8:a9:0a:37:ea:94:12:
                    1f:6b:87:b7:af:f6:9d:1d:19:55:d0:f4:50:1b:be:
                    8e:9a:1b:2a:c3:ca:63:4c:d0:dc:9d:cb:c0:12:bb:
                    88:ca:2e:1b:3f:03:71:c3:94:24:fb:f0:ec:a6:c8:
                    4c:6d:71:72:5f:87:1d:6a:4d:a8:fa:dc:2d:74:56:
                    e2:ba:7e:57:19:3c:b9:3a:b7:ac:c2:9e:a9:b5:0d:
                    ba:2f:73:d8:1d:92:dd:5d:2b:1e:ee:0a:77:98:a5:
                    b6:fa:52:fd:85:9d:ff:34:d8:73:39:fe:e8:1d:d8:
                    cf:c9:e0:4b:69:88:82:7f:1f:bd:a9:4f:1f:a0:3f:
                    05:71:98:53:fa:2f:fd:9a:25:00:b0:1e:24:c2:c1:
                    e1:94:e5:8e:ce:2d:22:1f:5d:7f:3f:9e:21:74:f4:
                    2d:7d:a1:00:76:04:89:a0:dc:76:bd:48:62:d7:61:
                    50:64:d7:74:6c:81:d4:0a:15:05:cc:72:b5:66:05:
                    e2:a3:c9:63:3a:ad:f8:59:0f:90:77:7d:6f:12:c4:
                    f0:28:71:00:b1:5a:b7:16:45:45:ce:cb:6a:cd:4d:
                    4c:5e:e2:0a:bc:5d:e4:7f:10:16:6a:8f:12:14:f7:
                    2f:3d:e9:d4:9b:a9:6c:83:d7:6e:6e:54:1b:a8:0a:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:E7:37:3C:66:2C:37:65:84:90:86:CA:16:B0:EC:D9:6E:4D:DF
            X509v3 Authority Key Identifier:
                keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:76:70:d4:d3:d4:18:51:84:fb:94:3f:89:6b:44:7e:64:7b:
         51:c4:dd:9a:66:33:d3:19:5b:ac:9d:30:c4:5e:1d:0e:86:d0:
         45:49:1e:02:2d:f4:13:20:ff:27:b4:f2:61:57:ce:fa:34:f3:
         12:89:9f:bb:ff:32:ae:27:b0:3c:98:14:02:4c:13:3e:e6:5d:
         e0:16:9b:dc:77:38:23:93:6e:ae:f8:b2:ab:8f:84:e1:0d:2a:
         d8:26:8f:56:6d:11:15:dd:cf:f5:8e:00:d8:02:f5:e5:ad:95:
         4b:36:b8:53:be:fe:4d:d2:64:10:1e:ba:d9:bd:8d:9f:25:d2:
         5c:52:a3:ce:35:65:46:1c:70:6e:fa:c9:75:5c:c8:ed:75:8c:
         ce:ae:fa:72:7c:93:03:07:22:3f:55:43:4b:c1:f0:31:63:31:
         07:49:e5:c1:99:f6:42:78:10:60:86:ff:18:68:f6:30:44:51:
         2a:b3:c8:37:64:ba:d4:36:89:58:90:bf:c9:23:37:a2:5b:e6:
         4a:3f:49:fd:f7:3b:40:2d:9e:8f:6f:56:7a:51:00:90:c4:5c:
         f0:89:c4:60:55:6d:b1:ef:0d:3c:43:9e:39:b7:e9:2c:70:70:
         0e:8e:1e:11:e9:6f:08:a6:91:6b:8c:a0:fc:cc:a9:49:01:da:
         8b:02:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:30:42 2026 by rpki-client