Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File:                     40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier:          E+d0mrv8cAa8PB8wvZOj79uTFIGURXDGfTOZIdMqvmI=
Subject key identifier:   CB:8B:6C:71:8C:7D:8B:5D:7E:91:85:4C:79:AE:F7:5D:0A:62:1E:06
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer:       /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial:       6162253F0A684AC860ADA8930E1FABBA4C91777C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number:          0402
Signing time:             Wed 13 May 2026 08:49:08 +0000
Manifest this update:     Wed 13 May 2026 08:44:08 +0000
Manifest next update:     Thu 14 May 2026 09:08:08 +0000
Files and hashes:         1: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: Y4ZOYJJ1biMgslS1IzAz8sTCAjI/fd+fuo6g1GIDcE8=)
                          2: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: gqEcuAgvwtlMBLCvnxFt8203Wy91Te3MhJTvFFKK+Z0=)
                          3: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: BXqLPyDzzCYhGVqlktrFoIOUQfeMGR4u3sXs6+l2szM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
                          rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:62:25:3f:0a:68:4a:c8:60:ad:a8:93:0e:1f:ab:ba:4c:91:77:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
        Validity
            Not Before: May 13 08:44:08 2026 GMT
            Not After : May 14 09:08:08 2026 GMT
        Subject: CN=CB8B6C718C7D8B5D7E91854C79AEF75D0A621E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:da:52:e8:50:24:bc:57:d4:df:fb:f0:1e:
                    67:89:1a:73:9a:02:cc:30:ea:69:0e:a0:01:2d:f8:
                    e4:15:61:ad:e4:29:ca:a7:f3:32:e6:f6:bb:92:23:
                    05:33:ed:a7:13:94:2e:5c:00:d3:68:bb:7a:6c:85:
                    e6:d4:10:e3:66:13:13:45:eb:71:f1:aa:76:2c:b3:
                    53:ec:01:80:18:ec:cb:ad:94:4c:f6:ca:9d:00:3d:
                    f9:f1:bf:b6:6b:f8:63:69:d6:37:1b:ee:fc:1e:4f:
                    94:ba:28:eb:8f:d1:2a:6a:93:2f:8b:30:a1:72:ef:
                    f4:e0:e0:4d:a2:69:a9:e3:37:74:e8:0f:2b:b8:3f:
                    19:58:00:75:63:d4:25:de:05:69:e6:2e:7f:ae:47:
                    9f:11:30:48:2b:94:a6:3f:90:fa:64:0d:23:d5:5e:
                    53:e1:95:c2:14:3b:c3:a6:74:a5:4e:88:ed:52:de:
                    0e:f0:fa:6d:98:3a:18:3f:37:f9:bd:ea:06:95:cf:
                    c4:b8:40:18:79:58:a3:cf:e1:50:12:45:a0:c0:1c:
                    b3:c5:f3:dc:57:5f:a4:18:5a:c5:3f:77:44:89:39:
                    f8:16:f4:a9:70:fa:06:1c:9b:27:47:8c:c7:ec:40:
                    77:b0:17:52:fd:c1:e9:11:d5:75:a9:cf:89:85:5c:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:6C:71:8C:7D:8B:5D:7E:91:85:4C:79:AE:F7:5D:0A:62:1E:06
            X509v3 Authority Key Identifier:
                keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:d9:e0:44:21:73:92:96:90:f3:21:3b:0a:08:3c:31:bb:
         e4:00:8c:39:b0:d5:5b:81:3a:cb:c2:12:a5:26:49:e6:ff:61:
         22:0c:96:28:2d:eb:6f:1c:3b:09:46:ac:3b:51:77:6d:d9:86:
         75:58:38:fb:7f:0f:fc:2a:a4:c9:ae:c7:8a:b8:1f:d9:19:54:
         99:b6:25:85:0f:a4:32:0a:f1:0e:f5:60:9a:a1:6b:74:b9:cc:
         de:10:fb:cb:a7:ab:aa:7a:ee:09:68:08:c8:7d:02:8a:0b:32:
         6a:2f:6e:b3:b2:5b:38:47:c1:1f:b3:4a:7d:9b:06:06:38:5d:
         69:ca:7e:6f:96:ef:e6:f1:86:40:94:ef:07:14:95:86:34:02:
         53:01:01:0b:73:c4:5e:90:85:aa:38:28:1f:1b:9f:96:2c:b9:
         79:ab:cf:d1:32:38:20:c2:1f:6b:c7:ba:5c:12:00:f5:e2:74:
         2d:d1:77:27:83:98:3a:de:2c:07:c2:46:dc:21:b7:13:ce:5f:
         16:f2:ee:d2:b5:eb:84:8e:99:8e:68:94:7d:57:8a:11:80:14:
         e9:33:d8:a8:15:a6:09:ef:c4:8d:0e:dc:91:a0:22:69:87:45:
         90:45:de:21:df:ca:80:11:78:94:97:64:8d:0e:ec:39:77:98:
         66:7e:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:46:38 2026 by rpki-client