Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File:                     BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier:          SjM4gbmwJuf5U3G8k04RCA5nBM36+5FBILx4eRRs0VI=
Subject key identifier:   BC:4C:59:92:0F:CC:7C:84:4B:4D:7A:56:4B:88:31:D1:7C:C2:91:CE
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       021D802953098826D59257D1BA7E4532B9B2FB6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number:          040A
Signing time:             Wed 13 May 2026 04:38:29 +0000
Manifest this update:     Wed 13 May 2026 04:33:29 +0000
Manifest next update:     Thu 14 May 2026 04:56:29 +0000
Files and hashes:         1: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: BRDX2bcHpAwtqDa7mj74P+hWC5po7P4vzhu+qudBurg=)
                          2: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: 86StC8af96q0LoTH78xk5Lf4M/lpA7z/Ahmi66glb+A=)
                          3: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: Rvo51TuPLd1M8Qn3gxgvH5b8+pcMostBoJ2Bw5X49aQ=)
                          4: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: EXKoERunxHBjD0wM17VenuhxYo/CI6MX+lv8XDiQ0Z0=)
                          5: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: Jvk4BhtkTqCaEGOfHpRXl47mcoGZIB2qsIvobQVyGEY=)
                          6: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: TxOIhbwzlN7I7q94EScK4FFwq4vxuPW0ymjAuYngXN8=)
                          7: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: O+yK7i5psZ1HhTc+vQ9NTtbznS2ibVEoFz3cZS/UrV0=)
                          8: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: QYuarhhb51IIJNcMd8PqyCgbNMJp1l2Brpl4eGszn1Q=)
                          9: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: KrbejnEAB1jYoyxgNuPx+4IjNgbAPuqfamW0X1CVqgY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1d:80:29:53:09:88:26:d5:92:57:d1:ba:7e:45:32:b9:b2:fb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: May 13 04:33:29 2026 GMT
            Not After : May 14 04:56:29 2026 GMT
        Subject: CN=BC4C59920FCC7C844B4D7A564B8831D17CC291CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:e1:64:61:83:0a:28:02:23:4b:ca:2e:07:
                    29:7b:0f:54:18:1f:d3:59:ce:aa:39:7a:4d:13:15:
                    43:46:fe:bc:17:69:1b:55:20:92:81:39:dc:e5:ef:
                    9a:3b:22:ea:f8:75:1f:6d:0f:39:f4:3d:17:5d:05:
                    ca:fe:21:94:6e:f8:c1:a8:51:12:b5:10:67:7c:71:
                    61:43:3e:fb:3e:ba:90:34:1b:50:bf:14:32:86:7c:
                    15:f7:d9:67:f5:d7:5e:83:71:56:1e:3e:f5:15:c5:
                    11:8a:2e:87:76:28:4c:ab:4b:f2:11:e8:b1:3d:35:
                    33:b7:32:d3:2d:93:c5:c0:15:12:fb:f6:1d:0f:ce:
                    08:ab:d3:cb:d8:2b:13:64:c3:8d:c7:46:0d:6a:1d:
                    21:57:58:ab:98:27:72:b6:86:8a:3d:8e:df:09:0d:
                    cd:a6:52:14:4a:e0:59:75:e4:9d:cb:22:de:1c:0a:
                    84:bb:8d:e3:24:f1:0f:cc:c7:8d:50:fa:9b:e0:32:
                    f5:02:14:84:42:85:1b:65:70:04:0c:0c:02:08:60:
                    85:0e:43:e3:a1:48:bb:0e:87:c2:1d:b4:76:ce:07:
                    70:b0:10:c8:84:fd:f3:20:ca:dc:69:bd:5d:8e:a6:
                    36:8f:12:fe:a8:ca:9a:25:27:91:4c:b0:25:22:c4:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:59:92:0F:CC:7C:84:4B:4D:7A:56:4B:88:31:D1:7C:C2:91:CE
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a8:ea:1a:24:4b:2a:76:7a:98:ba:ff:b7:89:a0:d6:b3:ae:
         69:35:f9:c1:ef:df:ba:c4:46:45:58:8e:fd:25:6b:72:85:a5:
         ad:42:49:6c:d5:b1:3a:28:88:78:63:a9:fe:12:9c:dd:b2:c3:
         ae:d8:c2:da:f8:2e:b6:f8:1c:8d:61:b4:83:41:5e:74:fb:56:
         bb:96:37:2a:a5:06:28:2c:4a:74:0e:7f:63:95:97:78:01:be:
         03:bb:f9:5a:61:ab:b9:23:c0:36:ae:52:0d:74:24:98:e4:c7:
         25:7c:db:35:bc:92:37:e3:3c:9e:e2:48:f8:73:f4:3a:8d:c1:
         e7:3b:e1:75:4e:5e:6b:62:36:f9:0e:b0:a9:75:05:b8:14:72:
         d3:b5:ac:a0:59:e1:e3:78:4d:b9:c7:77:98:56:04:eb:86:8e:
         1f:b0:8c:e7:7e:c7:3c:87:ac:00:f6:c1:07:b0:65:28:3a:cc:
         01:5a:d7:83:93:83:de:8e:3b:07:eb:83:37:eb:79:24:5f:87:
         2f:42:39:c1:fc:6c:fe:a8:a4:cb:56:32:0a:3c:cf:ae:95:34:
         cc:06:f1:26:8c:d0:3d:f5:ab:47:0b:eb:6a:8d:65:9a:c3:c9:
         3c:55:0c:1d:c1:5a:40:37:19:d5:57:3a:45:ac:1c:4d:35:d0:
         cf:c5:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:08 2026 by rpki-client