Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
File:                     A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft (raw, json)
Hash identifier:          DoDJNsaKReEvZxDt3eQ7Zpogv9PWe3v7YplGt4SFH84=
Subject key identifier:   42:00:AD:8A:E7:D1:B3:E5:4E:F8:53:36:28:8C:40:E3:65:1D:97:8A
Authority key identifier: A4:F8:A5:97:A9:21:91:9A:B3:CA:0F:05:A1:84:35:D6:D7:1E:94:0F
Certificate issuer:       /CN=A4F8A597A921919AB3CA0F05A18435D6D71E940F
Certificate serial:       21AB2ECC669B037E9B91FB78A5E5104BC668A7AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
Manifest number:          021C
Signing time:             Sat 23 May 2026 16:44:27 +0000
Manifest this update:     Sat 23 May 2026 16:39:27 +0000
Manifest next update:     Mon 25 May 2026 07:18:27 +0000
Files and hashes:         1: 323830343a383937343a3a2f33322d313238203d3e20323733363035.roa (hash: MHRAR3GbUAMkg1orM1SvKlhrtoUA2zVeZH0zYuV58Oc=)
                          2: A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl (hash: jKBWcFQUWOjciY96iLZafXKAxQVJPXZQfOVBRiwe4yQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl
                          rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ab:2e:cc:66:9b:03:7e:9b:91:fb:78:a5:e5:10:4b:c6:68:a7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4F8A597A921919AB3CA0F05A18435D6D71E940F
        Validity
            Not Before: May 23 16:39:27 2026 GMT
            Not After : May 25 07:18:27 2026 GMT
        Subject: CN=4200AD8AE7D1B3E54EF85336288C40E3651D978A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:40:1b:62:73:1c:63:63:36:20:ee:61:26:
                    2d:d0:1a:51:63:64:41:a0:1d:f4:fe:95:e7:ae:6f:
                    93:d4:84:7b:2f:d5:ba:e9:62:72:54:4f:63:f4:8f:
                    b8:57:a1:e6:4d:d0:45:5e:8d:f5:3a:15:64:03:bf:
                    c4:b4:ee:09:9a:c0:1b:dd:5e:c3:2c:7e:42:06:df:
                    90:84:56:b5:8b:6e:cc:9e:f0:ec:66:70:ea:fc:b4:
                    99:39:16:df:9b:3f:29:0e:46:ce:d1:15:9f:8d:36:
                    4a:68:a5:af:69:b1:a2:11:76:f3:d5:ca:ce:18:88:
                    0f:c7:f2:e6:31:a0:ea:ed:32:33:bc:38:0c:67:17:
                    cc:4c:79:9b:c6:c5:29:52:22:33:d1:d3:f9:ca:95:
                    31:05:64:e5:07:f4:61:d0:22:0f:31:fa:6d:e1:ac:
                    3d:3c:8a:33:90:0b:95:a7:40:a5:10:27:60:d3:01:
                    f5:eb:eb:80:98:d2:a3:e6:3f:5d:51:3b:c8:23:8f:
                    1b:ab:af:15:e0:65:75:58:ae:c8:fa:5a:97:95:df:
                    27:f6:11:77:9e:75:46:41:e6:6c:9b:a0:9c:d5:4b:
                    cd:58:ad:06:ad:62:19:69:1c:89:72:4a:2c:23:82:
                    7a:0f:58:91:9b:c6:0f:22:09:03:61:45:dd:26:ed:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:00:AD:8A:E7:D1:B3:E5:4E:F8:53:36:28:8C:40:E3:65:1D:97:8A
            X509v3 Authority Key Identifier:
                keyid:A4:F8:A5:97:A9:21:91:9A:B3:CA:0F:05:A1:84:35:D6:D7:1E:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:56:5f:f5:c8:7f:68:98:01:10:b9:ac:90:14:05:8d:92:
         28:af:3a:4c:f8:83:93:c6:ca:ef:cc:9b:83:01:29:f5:98:74:
         80:7c:a4:4a:26:01:8e:35:1e:7d:47:77:a6:35:88:95:35:2f:
         bd:cc:b0:ee:63:20:1a:e1:5f:06:0b:e6:4c:6a:d7:ac:a7:4e:
         63:d7:c6:88:55:0f:59:60:8f:b6:4f:c5:82:e0:a3:62:34:f7:
         82:50:6b:c7:04:6b:c8:66:54:11:91:6d:97:e7:5a:2a:3e:49:
         2a:22:9e:4c:99:1a:0c:71:fb:41:60:77:fa:30:1f:06:2b:7d:
         3c:31:17:56:af:2a:eb:14:83:14:0c:6e:86:d4:fb:b3:04:4d:
         e2:9f:f8:8a:c7:80:5c:df:2a:a0:b7:98:b5:05:17:29:c8:45:
         5f:fd:34:4a:5b:b8:8e:c2:fd:75:0f:26:98:1a:53:51:35:0b:
         f0:3e:cd:fe:2e:1d:f6:c3:f5:ae:55:5b:bf:9e:99:59:37:05:
         d1:5a:81:08:6c:19:33:6a:55:38:9d:bf:d3:16:7b:5d:33:5d:
         2c:f2:2d:32:ff:04:87:01:ab:8e:c9:c1:5e:bb:87:c6:81:00:
         75:fb:fb:c2:66:54:42:9e:09:50:0c:0d:3e:81:c9:db:1d:9f:
         37:40:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:57:22 2026 by rpki-client