Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft
File:                     D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft (raw, json)
Hash identifier:          Mnum/hPG9toIWK92ktE+0xgYrPexYSvJ4FbH5B5POro=
Subject key identifier:   23:CF:5A:20:DC:22:3B:75:41:7B:DD:F7:7D:9D:D3:77:B4:A2:97:DA
Authority key identifier: D1:E9:7C:FA:15:0C:48:4A:25:44:6F:0C:7D:6D:28:CA:5B:EE:1B:F1
Certificate issuer:       /CN=D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1
Certificate serial:       113836AA579A1EE45FD8CB65AD0105188F0F8892
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft
Manifest number:          B4
Signing time:             Sun 23 Aug 2026 01:16:32 +0000
Manifest this update:     Sun 23 Aug 2026 01:11:32 +0000
Manifest next update:     Mon 24 Aug 2026 03:56:32 +0000
Files and hashes:         1: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: 3ukrwP4zlYAIXirJfZYknYu+7zCaGNB6IdiRhpQHh8g=)
                          2: D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl (hash: O4EcdI8WMm6gJzhd7X7SebmsnOLCvOlFYam7yRo3ryI=)
                          3: 323830343a313839343a3a2f33322d3634203d3e203631393431.roa (hash: zeOVTcGD6Dv/zVZ4K7t3QHEmyuzJp4RDJel6RhNshE4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl
                          rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:36:aa:57:9a:1e:e4:5f:d8:cb:65:ad:01:05:18:8f:0f:88:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1
        Validity
            Not Before: Aug 23 01:11:32 2026 GMT
            Not After : Aug 24 03:56:32 2026 GMT
        Subject: CN=23CF5A20DC223B75417BDDF77D9DD377B4A297DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:45:99:ce:4e:26:b7:f2:51:2f:93:a1:73:
                    b2:2d:94:34:d3:ad:ae:eb:73:d5:66:63:5c:c0:53:
                    8e:41:fb:4e:80:14:c1:21:80:5c:c6:4e:0d:b1:b8:
                    83:c4:79:84:ce:1f:c2:29:f1:b2:b6:6c:76:bd:bb:
                    6d:43:1f:5a:4d:a6:21:0f:59:58:2e:1f:ff:9a:02:
                    c1:59:04:01:2a:b8:8e:13:8c:39:30:2a:58:3c:39:
                    25:d6:11:46:21:a7:3c:76:38:bb:24:a4:f3:ee:9a:
                    94:90:10:ac:90:73:b2:a8:a0:d3:c2:f1:00:0c:73:
                    bb:00:79:fb:43:64:fe:0c:99:64:01:99:65:bc:1a:
                    49:2e:c9:b9:44:e9:82:bd:3d:29:e0:0f:61:87:a4:
                    2f:d2:cf:80:ac:a2:f8:3e:7f:ac:94:3a:b9:f7:7b:
                    01:55:2e:41:ea:6a:ac:0a:05:47:27:65:de:09:66:
                    e7:d3:a2:09:6f:a5:f4:77:b3:26:c3:be:33:c6:85:
                    d3:36:38:9a:18:e9:e7:8f:55:d1:f4:ad:23:5c:77:
                    ae:65:5d:d7:ab:b8:4a:a3:a8:38:e1:9f:c3:5c:8e:
                    6f:18:8e:af:00:ae:fd:50:3d:06:43:cc:db:43:5e:
                    e1:ce:75:6e:e7:68:42:7e:f5:80:7b:5b:99:6d:d2:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CF:5A:20:DC:22:3B:75:41:7B:DD:F7:7D:9D:D3:77:B4:A2:97:DA
            X509v3 Authority Key Identifier:
                keyid:D1:E9:7C:FA:15:0C:48:4A:25:44:6F:0C:7D:6D:28:CA:5B:EE:1B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:7c:4b:fb:7a:b5:be:9c:ca:cf:71:72:8f:c7:e8:91:25:
         79:2d:8c:cc:6c:71:89:43:04:22:1c:0c:22:34:b2:8b:da:d4:
         7b:c8:e8:1a:ee:95:f2:0e:76:2f:3c:23:98:7b:92:7e:13:5a:
         d2:9f:0e:75:9e:e1:37:4a:61:54:76:b7:4f:1c:86:96:4a:0d:
         3b:f8:76:dd:86:ba:f5:b5:2a:74:11:d0:59:2d:c9:0a:cf:b0:
         61:02:a5:aa:0d:c4:f1:27:60:d4:ea:86:6d:c7:f7:ac:1c:b3:
         20:93:55:52:94:4f:2f:ee:86:13:8a:62:35:fe:ff:4c:31:25:
         4a:0f:05:e5:f6:cc:3d:63:73:d6:74:98:6c:1b:63:c1:0e:58:
         b0:1b:e3:5e:4f:9b:14:c8:f4:bc:a8:05:af:49:94:e9:94:2c:
         8d:e5:4b:52:38:08:65:c2:fc:a1:0f:d5:be:3d:b4:8b:93:db:
         76:4d:ff:d9:1f:1c:23:99:47:a8:88:f3:e2:22:2c:23:5f:34:
         50:8c:35:17:bc:e5:d1:61:53:76:9d:d1:e8:09:a2:02:73:80:
         6d:e8:84:dd:89:55:eb:11:89:95:9b:d5:71:5a:00:9d:57:8d:
         79:04:34:93:ec:1a:86:c5:28:8a:e1:69:f5:6c:bc:a8:78:1d:
         76:90:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:20:03 2026 by rpki-client