Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
File:                     28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft (raw, json)
Hash identifier:          GvCuboSmeldW4mEB8R/loFpXeKdYfmQoY/SgxdXJ0dk=
Subject key identifier:   DF:24:82:37:31:31:BB:A4:F1:A2:24:CE:15:12:4F:10:0E:33:43:13
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       1D6FA0474943979BF112BA9E2FF9F63737A82E8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
Manifest number:          0414
Signing time:             Sun 24 May 2026 03:58:44 +0000
Manifest this update:     Sun 24 May 2026 03:53:44 +0000
Manifest next update:     Mon 25 May 2026 05:03:44 +0000
Files and hashes:         1: 323830343a376437343a383030303a3a2f33332d3333203d3e20323731353632.roa (hash: 2IkKSo3X7ONhgiZFRtWDZMRr/xz8lUyXvXcwO7XVCOA=)
                          2: 323830343a376437343a3a2f33332d3333203d3e20323731353632.roa (hash: cTfgVq7I7BqWPauDhzYCy7lVN90NnQCVLOULn8iTJZo=)
                          3: 3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (hash: mXpx1uGDapRWvP1/O1h2qGNcErrv0wgSgyCBUyUT3RU=)
                          4: 28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl (hash: v1goDMBvW4vE2f2jzY6YvkZ94PtFJg+aCIt+p/Ba8g8=)
                          5: 3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (hash: tQQNwm6U02+3IgfEokXOPsCUC9Kvrkh7xli7/SCVTtE=)
                          6: 323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (hash: fPZaxHpQ2LK2p/E+o/cz0fIqLW2AJ2rthBg1UBzg/y4=)
                          7: 3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (hash: QRYWTHHCPlHTRhVlj938/6WsJB6cJCs8S/Oe/GdudN4=)
                          8: 3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (hash: o46ucGlQECY406fQi37xPVLQ+tg6ydxMw09fyXFDoI4=)
                          9: 3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (hash: fsQA1b6Po7J5aHJLxTczgF0U/JPfW2QIy85ataeKWPA=)
                          10: 3138312e3137342e3232302e302f32332d3233203d3e20323731353632.roa (hash: R1O0w5UpNBXdpEM/yEjFYIID2TIgqT3bDo/t8IsrMlA=)
                          11: 3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (hash: mRVFwUnXKa2TuGgkUUbDE8CKUaBmTfpM3SIENJ9vfow=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6f:a0:47:49:43:97:9b:f1:12:ba:9e:2f:f9:f6:37:37:a8:2e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: May 24 03:53:44 2026 GMT
            Not After : May 25 05:03:44 2026 GMT
        Subject: CN=DF2482373131BBA4F1A224CE15124F100E334313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:c7:75:2f:9b:5f:d2:83:56:50:9e:6a:57:
                    1b:a6:53:ae:2b:79:c9:53:d9:36:8f:5f:ae:07:03:
                    03:ec:9e:e2:c9:27:ec:1d:a7:3c:26:79:a3:02:59:
                    a9:ef:c8:de:4d:f2:2a:ca:d3:b9:59:3a:88:5a:3e:
                    26:31:9d:57:52:63:f2:53:ef:60:9b:a3:aa:4d:a1:
                    45:da:33:47:c1:04:a9:a5:4f:7e:39:b1:aa:d2:a5:
                    eb:62:7c:72:f0:e2:cc:d9:02:bb:54:5d:d9:78:3b:
                    52:dd:29:76:b2:93:ab:e6:05:58:b8:fd:90:90:0e:
                    12:8d:02:c2:d4:2f:f3:bf:84:49:d1:10:cc:81:3a:
                    27:ce:b2:ab:1f:20:44:db:86:09:2f:71:c7:de:ed:
                    65:d6:a8:27:97:f6:54:47:1e:b1:49:21:dc:4c:bd:
                    36:6d:bf:14:6f:a4:50:e7:b9:40:9c:10:63:36:cb:
                    22:93:f6:06:fd:4b:c3:62:d1:b7:2e:25:8c:2f:a1:
                    e8:0d:28:69:d2:99:8d:f5:a7:33:01:aa:6f:fd:62:
                    7f:dc:70:22:c0:c0:62:59:93:9a:88:55:f6:b7:eb:
                    12:c2:75:53:85:89:47:b0:88:bb:ff:22:91:d8:cd:
                    c5:e4:86:bc:ed:83:c8:de:bb:ba:e3:d3:d6:04:3d:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:24:82:37:31:31:BB:A4:F1:A2:24:CE:15:12:4F:10:0E:33:43:13
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:6a:09:f3:fb:d1:a6:96:90:0c:c6:51:e7:45:8f:8e:97:
         2a:5e:2f:3c:fa:5e:18:bf:02:a0:9c:25:4b:61:4a:d1:22:5a:
         91:39:2b:f0:62:6d:4f:83:9e:4b:dc:94:0b:47:58:73:d1:89:
         c6:70:3d:08:24:d7:43:de:ab:68:a8:9d:87:41:3a:03:af:e2:
         48:bd:3e:f2:95:52:03:d8:70:8a:83:c2:4c:90:23:e0:d3:25:
         0c:9e:2a:b4:21:47:4b:bc:c5:08:08:e5:76:53:8d:44:af:75:
         6d:65:23:48:61:d8:a4:ab:ca:9f:4b:ac:5b:ee:53:20:03:8a:
         c2:4c:ec:25:d1:b5:4f:f0:f4:97:59:00:39:ad:8f:86:3e:d3:
         3d:45:f7:7c:10:71:68:73:9a:f2:55:70:f1:13:0f:ad:e1:ee:
         44:25:9b:36:ae:8f:3c:29:e8:ec:29:0e:f7:4c:74:bc:c6:cf:
         98:12:2c:1d:06:8c:55:01:ab:19:bc:5a:77:7e:8c:0e:49:16:
         2b:d0:72:ad:87:44:5b:58:c5:2e:6b:f5:dc:8f:72:94:6a:12:
         72:f2:29:d8:09:dc:96:8f:17:7d:6b:6c:00:c1:74:19:88:07:
         ee:17:74:e1:9e:8e:9c:a7:a6:a8:05:d0:a1:d1:fe:d7:f7:14:
         83:a9:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:52:08 2026 by rpki-client