Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
File:                     470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft (raw, json)
Hash identifier:          TewrBUDl4nJuP+fsFPrs096OCPHwtdGN4pTZ8oEdsJU=
Subject key identifier:   A9:9E:2B:DA:D0:4E:35:D8:D1:26:8B:8B:8C:AE:44:AD:48:62:39:99
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       542195CF24DD75358B438BCB74145A3029CD532E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
Manifest number:          0532
Signing time:             Sun 24 May 2026 09:28:11 +0000
Manifest this update:     Sun 24 May 2026 09:23:11 +0000
Manifest next update:     Tue 26 May 2026 01:06:11 +0000
Files and hashes:         1: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (hash: 0NAuI7JC7/gtrpIy0dV0LMC7UnEq8xzYaqVnittLEoA=)
                          2: 470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl (hash: gSuplHRRMjFmLqDUbBD2/d1GgO2yvPvKg2zRrnleWzI=)
                          3: 323830313a38323a3a2f33322d3438203d3e203130383831.roa (hash: VfDxRFh+yZ3q07SO5ly/AHgS33B6U6ciUPTe3vxLlzU=)
                          4: 3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (hash: YzUScKYpuaE3y1+2NuUD4KHpxxmyuyov1FJ3l0hQS88=)
                          5: 3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (hash: 8KE16m4O62KVUW+WOY9t2gG7FpZpucsjt71rFU3kxLQ=)
                          6: 3230302e3233362e302e302f31392d3234203d3e203130383831.roa (hash: /3fCfgoxocL1Bk96wh7evg62LrLtkIw9hxBRC0coR8o=)
                          7: 3230302e3133342e302e302f31362d3234203d3e203130383831.roa (hash: WdTucWMeXwYJRR8dpphsPAobOmLNKPHTX5ApXtj2VtA=)
                          8: 3230302e31372e39362e302f32302d3234203d3e203130383831.roa (hash: /v8YzR2Z1cqPjg2F65gUocYAY1POw87mm8nc76YZILo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 13:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:21:95:cf:24:dd:75:35:8b:43:8b:cb:74:14:5a:30:29:cd:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: May 24 09:23:11 2026 GMT
            Not After : May 26 01:06:11 2026 GMT
        Subject: CN=A99E2BDAD04E35D8D1268B8B8CAE44AD48623999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:87:fc:8a:84:62:1d:2a:59:d0:2f:cc:8d:
                    c2:0b:da:2d:5d:dd:1e:78:2c:e3:be:e4:ef:c6:e4:
                    9e:11:67:df:25:cb:a2:63:d7:37:97:4d:f9:94:26:
                    66:96:aa:77:b3:9c:00:64:2c:b8:a9:8b:1c:a1:47:
                    92:82:22:98:31:70:1c:3c:f8:37:1b:ad:0f:cd:d2:
                    a5:4c:ae:c9:a0:b7:c3:1d:7b:68:8b:7b:05:5d:b9:
                    d7:8b:ed:ba:94:66:02:52:1f:06:b4:60:4e:49:24:
                    d3:c6:dd:bd:f7:36:3f:0a:50:45:57:72:eb:ef:4f:
                    f3:c0:7b:68:64:c3:b3:a0:89:13:c4:ff:83:2e:2a:
                    e2:2b:4a:4e:06:77:4f:f8:29:43:e4:bd:84:7f:41:
                    fa:77:2b:b5:ec:ac:21:ad:76:3e:16:09:bf:01:33:
                    59:f7:73:6f:3e:35:68:e4:a8:49:97:a0:5e:c5:52:
                    91:ff:21:79:c1:57:0d:8c:f2:af:a9:f3:d5:db:64:
                    d9:5c:09:4d:98:3b:60:ef:58:c7:92:e9:d2:4b:15:
                    fd:f2:ab:88:aa:40:64:5c:1c:06:10:e8:71:e4:24:
                    a3:a6:11:b6:78:9a:a8:12:d1:17:f9:49:f5:ea:e7:
                    bd:b1:9e:03:42:cf:61:76:e2:9e:68:24:c6:6c:d9:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9E:2B:DA:D0:4E:35:D8:D1:26:8B:8B:8C:AE:44:AD:48:62:39:99
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:63:c6:62:bc:17:b0:e5:bb:a3:36:67:bc:e8:e7:01:10:24:
         d8:0c:66:ed:9b:4f:e7:3a:3a:7f:75:86:b6:0d:6a:ee:a5:08:
         1a:51:4d:ad:37:f6:f9:1c:ae:d1:be:83:48:82:45:55:84:b8:
         41:40:09:09:f9:97:7b:11:3a:09:f4:fc:e5:1c:30:4a:98:77:
         a4:dd:8b:f8:65:e0:3c:44:ce:1a:ba:ab:60:31:c8:5c:6c:64:
         de:16:5c:4c:43:7b:43:9b:fa:2d:e8:f8:92:b2:b4:c7:b6:7a:
         ee:19:f7:1e:4f:28:ee:a9:8d:c4:12:2c:76:a3:86:5a:23:16:
         8f:bc:0d:48:e0:a7:d1:2f:7f:34:d7:95:df:e1:de:5e:29:66:
         6c:57:02:3d:d8:e1:6e:78:3f:4e:63:86:1f:47:8f:bf:f1:a2:
         f8:0e:ee:55:cc:07:48:c3:fd:a6:0c:41:b6:c1:f6:49:d1:fc:
         cd:c8:3d:77:10:5b:31:c8:d7:9b:84:f4:30:ca:91:d4:10:97:
         c1:a3:89:6d:1e:e0:f0:6f:d6:6f:52:6b:93:7b:28:a8:4f:33:
         75:5d:5c:09:c4:5c:04:f8:48:0b:79:7c:26:cb:70:19:86:8c:
         ae:a7:e4:91:f2:9d:f0:60:b6:11:a5:53:a4:1e:5d:3b:fe:5b:
         47:41:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:31:35 2026 by rpki-client