Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
File:                     457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft (raw, json)
Hash identifier:          ADBMK4rd9cxWTi9rnc7bZqVMID5FDRCQlDiHSwXFwb8=
Subject key identifier:   DA:78:6C:22:44:39:16:9B:67:FD:84:B2:12:03:DE:E0:11:7D:1F:3E
Authority key identifier: 45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C
Certificate issuer:       /CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
Certificate serial:       50B3EA99BCBFE2881FF2A4E49BC724A363987AE3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
Manifest number:          CA
Signing time:             Mon 24 Aug 2026 06:41:33 +0000
Manifest this update:     Mon 24 Aug 2026 06:36:33 +0000
Manifest next update:     Tue 25 Aug 2026 08:40:33 +0000
Files and hashes:         1: 457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl (hash: /wqVI+yYkwLbAxc9uRHaZ3Wopf4/AkO4gmYMgeEC/6U=)
                          2: 323830343a386365343a3a2f33322d313238203d3e20323733333231.roa (hash: nUQyjMloJCS/+EcGR8sFzwwYNGyOM0O5TkGmhJotCfw=)
                          3: 3138372e3132312e3234322e302f32342d3332203d3e20323733333231.roa (hash: fPF6IZsLCHAm6rSwpYf4QYEZMZYzIRc0abVl8hA03IQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl
                          rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b3:ea:99:bc:bf:e2:88:1f:f2:a4:e4:9b:c7:24:a3:63:98:7a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
        Validity
            Not Before: Aug 24 06:36:33 2026 GMT
            Not After : Aug 25 08:40:33 2026 GMT
        Subject: CN=DA786C224439169B67FD84B21203DEE0117D1F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:06:55:41:98:92:d3:7d:52:75:e7:77:a6:
                    1a:35:f3:2f:9f:a3:59:ce:58:95:fa:8b:ca:23:04:
                    85:30:53:09:5e:6c:57:2b:b9:bc:93:44:69:1d:29:
                    71:c4:e8:e7:f8:ae:ec:00:01:9f:4a:b0:52:3f:02:
                    8c:0d:38:6f:bb:35:4d:40:10:98:1a:3a:d2:da:cb:
                    fa:a4:f3:f4:6e:93:52:30:63:2d:3d:e0:a3:4e:27:
                    4a:dc:2b:3b:cd:af:4e:93:65:5e:57:ed:ae:d6:f9:
                    76:f4:77:da:9f:d2:aa:41:36:ed:46:73:9d:0d:f0:
                    ad:51:2d:b2:4f:dd:05:ae:cd:3d:79:0b:29:90:d8:
                    e6:6f:6c:9f:88:3e:d1:51:cf:79:38:ae:1d:32:d1:
                    ad:30:8e:0a:20:94:19:98:e8:42:54:c7:44:7a:4d:
                    16:bd:0a:9a:95:c4:53:ae:01:d7:c6:3d:aa:88:98:
                    57:ed:53:01:7a:31:36:b1:ab:bd:62:e1:51:bd:34:
                    16:96:53:4e:6a:34:16:92:45:06:65:c9:27:1d:52:
                    60:75:ff:84:54:0c:00:94:e7:af:44:c8:74:b3:73:
                    08:91:31:1b:75:a8:34:a8:20:33:4a:f6:4c:af:75:
                    26:0c:7e:64:d8:84:4c:3f:fc:6a:0d:1f:b1:87:e9:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:6C:22:44:39:16:9B:67:FD:84:B2:12:03:DE:E0:11:7D:1F:3E
            X509v3 Authority Key Identifier:
                keyid:45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:2d:6a:25:8d:fc:9b:82:d7:94:6c:d3:14:6a:94:39:9c:
         50:ad:f2:c7:50:41:a5:af:83:b9:dd:68:41:51:1a:2a:eb:22:
         a1:f3:4e:95:3f:ca:41:cc:27:6f:d1:1f:ae:45:f5:fd:9b:48:
         73:82:b2:cd:8b:67:4d:1a:06:3a:5d:a4:f5:e8:39:33:4a:0b:
         99:9b:3b:83:00:d1:a1:37:c0:74:70:df:e5:2e:ec:9f:6b:be:
         16:fb:b0:d6:38:e5:ef:56:63:2c:b0:12:18:f9:f4:84:d4:9a:
         1e:e8:7b:fc:69:b0:de:fe:e0:00:c3:53:64:b5:bc:7a:4c:51:
         4d:59:76:c8:c6:f0:02:f9:40:9d:36:de:8e:71:f7:3b:3c:82:
         38:61:48:53:2d:f3:5b:25:90:5b:5c:44:73:e9:e0:be:fd:46:
         5d:f7:c5:a1:8f:9d:cb:1a:d8:f7:34:08:7a:2b:35:1f:b2:13:
         e4:62:14:4b:ac:b1:de:5c:84:61:47:a5:fb:4b:99:b7:8d:31:
         da:20:6e:e5:58:8c:be:ec:19:62:13:85:b7:35:0e:41:53:d5:
         b2:d6:d8:3b:a7:bc:04:6c:60:a5:ee:03:a1:dc:b5:ee:ea:23:
         43:84:96:8f:7f:20:63:48:47:b4:c2:7a:7d:48:95:ac:bd:5b:
         64:a7:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----