Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File:                     CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier:          l0GmbyebRaMykyVS6ytr4tJdcU/U0ltqWz8zx0jQL9E=
Subject key identifier:   16:E4:09:58:B5:9F:8D:67:DC:F2:23:58:E9:02:5B:D0:44:17:38:A0
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       2F8DA6C2F94718CFB6F5584F1ED9CB8604889370
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number:          04DD
Signing time:             Wed 28 Oct 2026 17:48:47 +0000
Manifest this update:     Wed 28 Oct 2026 17:43:47 +0000
Manifest next update:     Thu 29 Oct 2026 20:23:47 +0000
Files and hashes:         1: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=)
                          2: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 9NaA8Dq04c7j0pLtLEkFvCIZPUGfEE8aa950uY+eEJs=)
                          3: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: 2nczleJFPRyvFicJVGQltpFOvvykoBSvwigtbcxyl9Y=)
                          4: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: RHTdk7/ZxuKy/JDDDAbqa9rGAv8ldTxea8/jLbzzD1k=)
                          5: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wLIsioKqEUKS9TMeNf/n9LEYrLxpZbmg2+NMq5W8NRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 20:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8d:a6:c2:f9:47:18:cf:b6:f5:58:4f:1e:d9:cb:86:04:88:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Oct 28 17:43:47 2026 GMT
            Not After : Oct 29 20:23:47 2026 GMT
        Subject: CN=16E40958B59F8D67DCF22358E9025BD0441738A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:a1:a0:73:4f:30:95:ed:1d:a1:4c:4e:27:
                    06:f5:97:ae:7d:71:30:44:7e:86:57:22:4a:36:5a:
                    2f:d3:16:6b:ea:30:63:43:91:a0:fe:15:ef:8e:89:
                    ba:ea:d3:7f:61:3b:8e:eb:7b:fd:59:48:f3:dc:cd:
                    6d:1f:65:61:63:db:32:c1:3c:ae:d9:e3:36:e9:b3:
                    b2:33:22:1f:0d:5a:c3:17:52:20:b3:63:1a:fe:91:
                    87:ed:7d:91:c8:e4:69:57:41:b0:c6:65:2d:3b:c9:
                    38:42:1a:46:c5:c3:f4:9c:12:ad:b3:b7:7e:26:e3:
                    b2:b5:9a:97:36:88:50:dc:f4:1c:23:48:d7:a5:88:
                    e2:9a:4c:2b:ad:65:68:92:40:f5:35:60:ca:b2:1f:
                    3c:10:d3:b8:78:9d:e2:cf:47:50:59:17:84:87:d8:
                    fa:e6:2d:08:6c:6d:4c:02:21:96:1b:52:a4:69:ad:
                    36:e4:14:21:28:73:22:b0:78:2f:52:6e:3c:11:7f:
                    a1:bd:41:cf:0d:72:c1:c5:57:0d:d2:82:87:17:77:
                    c9:14:7c:4d:1f:f4:78:50:62:1f:9a:62:4f:b4:6f:
                    19:05:31:9e:cd:63:c0:32:05:17:e6:e7:16:b4:25:
                    c9:d2:30:03:78:02:67:8e:71:77:29:4a:ad:08:c8:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:09:58:B5:9F:8D:67:DC:F2:23:58:E9:02:5B:D0:44:17:38:A0
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:43:91:4a:f1:38:a9:07:d3:21:8c:a1:62:83:e1:c2:5a:
         bd:83:1c:7f:e6:73:05:c0:b2:22:c0:97:1c:46:81:0b:df:26:
         75:ca:2b:76:e6:a8:bc:ef:5a:e2:f0:99:98:cb:54:49:44:ab:
         ee:f2:cb:3f:0a:89:65:5c:d3:fb:4e:c3:90:a9:f0:d8:6f:ae:
         76:dd:f2:da:b2:b2:9a:39:68:52:3a:f3:6c:43:70:17:45:34:
         f8:b8:6b:2f:32:19:c4:e0:eb:e0:59:18:a2:6c:b7:64:2d:7d:
         87:62:bc:0a:b7:6c:b9:15:b4:f9:32:cf:9c:c1:c8:ad:1f:c9:
         5a:a2:2e:68:1f:ee:4e:08:30:eb:2a:26:61:2a:fe:7f:f7:8c:
         5b:e7:e3:cb:5a:f8:0c:3b:63:9f:21:ed:61:28:ff:12:bd:9f:
         d2:05:ca:73:2c:c2:25:80:06:6d:f8:8b:ce:6f:7e:2d:2d:50:
         2d:5c:93:08:7f:ba:82:a5:0d:c5:4b:e9:09:7f:6b:49:2f:1c:
         ba:cc:13:23:65:d2:0d:80:9b:15:02:70:86:5f:16:18:61:a6:
         0e:90:82:ab:cf:3f:7a:0f:01:bc:22:90:12:f5:ba:1b:b5:62:
         36:66:7c:24:78:3c:5e:7c:99:dc:da:58:ff:25:1d:0d:ee:de:
         64:91:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----