Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
File:                     AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json)
Hash identifier:          cMvH7HjO4WOab6hcVPUt4j4KCctvvjEiYBahh4ziVM0=
Subject key identifier:   92:94:1E:B9:B3:36:0C:0D:DB:74:58:60:04:06:72:13:E2:14:24:83
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       636ED9E3DE6CB639CB9337F2BFFD8589FECC68F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
Manifest number:          04D2
Signing time:             Sun 01 Nov 2026 01:28:26 +0000
Manifest this update:     Sun 01 Nov 2026 01:23:26 +0000
Manifest next update:     Mon 02 Nov 2026 01:59:26 +0000
Files and hashes:         1: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: lJcFKWsPgwGzvx2EWYMBKk/P8ls9fbPWHfgJAbojuCk=)
                          2: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: sVkWMTSLFioieTFlhkF9iFbkwUXuTcAibeLsKdPaEcc=)
                          3: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: PaL5PuzRVfUDEYyVqNiuWp1mTRshQPvGeZsx+SntzJ0=)
                          4: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: MH30UmESAhgpbtI90YwhxqupcQE1Wx1+akTJLgrmqRM=)
                          5: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: z4/MzAdQOYmWeNRJnvuERmw2hfJru6wpeS85nk5yUBw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6e:d9:e3:de:6c:b6:39:cb:93:37:f2:bf:fd:85:89:fe:cc:68:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Nov  1 01:23:26 2026 GMT
            Not After : Nov  2 01:59:26 2026 GMT
        Subject: CN=92941EB9B3360C0DDB74586004067213E2142483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:b7:3a:e6:f5:0a:40:f9:09:0f:85:7a:b4:
                    9b:7b:d4:39:d4:5d:d1:11:1e:08:a8:db:25:d1:0c:
                    67:45:88:5e:a2:10:ce:79:c9:31:18:9b:3c:82:c6:
                    1b:11:6d:ac:9d:44:73:30:b7:5b:33:38:2e:23:dd:
                    d6:5b:11:e7:70:30:5c:82:7b:e8:ba:73:ec:34:04:
                    24:52:04:c9:2d:4f:b5:c9:f8:64:0b:a5:f4:22:0d:
                    65:8a:e8:77:19:f4:f6:26:30:6e:3f:0a:19:91:fc:
                    01:4c:54:03:76:8a:2e:c5:bc:6b:07:ce:6b:a3:d5:
                    e0:72:d5:05:15:b4:ec:0e:17:44:99:3a:2a:32:42:
                    7e:83:a1:ac:9d:e4:4b:e9:cd:32:4b:9f:9a:b3:c6:
                    e3:d1:30:e0:6c:7e:95:e6:f0:28:95:da:2f:07:8c:
                    ae:e8:14:3d:75:cc:73:8b:90:01:e3:38:85:d9:25:
                    96:8f:df:3c:04:f8:36:c0:a2:db:14:ed:ba:6f:46:
                    1a:9a:c5:b6:de:39:be:b7:9f:be:3f:9a:52:52:87:
                    80:2c:9f:5f:33:06:89:83:b3:74:7d:05:5b:26:8a:
                    a4:8c:a8:58:76:80:34:69:d6:a6:71:8d:d9:e1:dc:
                    14:4d:d5:41:0b:e8:c9:50:d8:83:da:38:62:67:ff:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:94:1E:B9:B3:36:0C:0D:DB:74:58:60:04:06:72:13:E2:14:24:83
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:91:74:92:75:ee:5b:1c:72:e5:28:ca:a9:1c:50:be:7b:
         d8:69:18:7c:08:04:5d:2a:28:be:a3:ee:71:92:aa:9b:37:45:
         b5:a0:11:8d:d3:7c:92:cb:65:cb:b8:25:f3:f8:bf:8e:81:95:
         5f:cb:45:93:0a:99:57:18:37:cb:12:9b:82:4a:26:7c:6a:8a:
         53:07:50:6e:2f:07:50:c0:21:18:ce:9c:ce:51:4b:e3:1b:74:
         1a:e6:6a:f3:d2:18:64:df:8d:92:05:5e:68:e6:18:f6:9b:97:
         53:97:f9:da:ec:e3:64:72:4d:7a:78:f6:1b:c2:8e:02:2b:cf:
         99:60:64:4a:29:ed:83:8b:50:0d:76:1c:c5:d1:e9:a1:6f:8a:
         f5:d3:ff:75:c8:bb:19:d4:07:bd:21:6b:d4:be:ce:0d:59:b2:
         ec:fe:ba:48:67:28:55:47:77:7a:1a:ba:ba:fa:dc:11:be:31:
         ff:81:a4:23:84:1c:09:3f:99:4c:96:e7:cc:ad:14:13:86:90:
         30:8f:96:d8:51:e5:94:76:91:9e:39:d0:b0:60:f4:fd:85:b4:
         01:6e:30:4a:fa:9e:f7:c9:e6:bb:b9:51:a9:cf:ae:62:a5:1e:
         45:22:da:e2:d1:03:2b:86:1a:d6:50:d5:33:a0:6b:de:55:6c:
         7e:12:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----