Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File:                     40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier:          lQn+p1RdwToYdWGIXC+mCCUrLtWvjJNziSekoxavkws=
Subject key identifier:   7B:C8:09:47:9F:81:22:42:44:92:74:BB:9D:DE:EA:FF:5F:A5:30:13
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer:       /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial:       0F2090BB9FC31934F5435C1FC52442548E2CBB4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number:          0410
Signing time:             Sun 24 May 2026 01:36:03 +0000
Manifest this update:     Sun 24 May 2026 01:31:03 +0000
Manifest next update:     Mon 25 May 2026 01:51:03 +0000
Files and hashes:         1: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: BXqLPyDzzCYhGVqlktrFoIOUQfeMGR4u3sXs6+l2szM=)
                          2: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: NTQKjpCsBZJb0gncOgYBBsRkRW4Wa1TeL9+YUEimPtY=)
                          3: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: Y4ZOYJJ1biMgslS1IzAz8sTCAjI/fd+fuo6g1GIDcE8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
                          rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 01:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:20:90:bb:9f:c3:19:34:f5:43:5c:1f:c5:24:42:54:8e:2c:bb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
        Validity
            Not Before: May 24 01:31:03 2026 GMT
            Not After : May 25 01:51:03 2026 GMT
        Subject: CN=7BC809479F812242449274BB9DDEEAFF5FA53013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:70:17:ce:63:e2:40:d9:bf:60:09:53:7f:
                    dd:a1:ac:13:f3:98:83:9b:9b:a0:c1:d1:63:1b:81:
                    22:8a:94:da:ff:1a:59:73:55:74:6e:57:55:05:1f:
                    28:66:b0:db:37:e1:93:69:cf:0c:60:be:97:76:3d:
                    4b:b3:55:da:a8:06:8c:7e:cc:73:8d:21:0e:fe:e1:
                    d6:df:68:38:08:26:23:5a:fd:77:56:cc:2a:8f:0a:
                    cf:59:ea:6a:e7:a9:0c:a5:66:a4:c3:08:e9:1e:0d:
                    62:c6:f6:4f:9c:65:e0:b1:1a:8c:f8:d1:ff:dd:9a:
                    54:2f:77:92:c0:5b:72:70:0c:92:5f:0b:ef:2a:54:
                    5a:8e:44:94:62:9d:fd:41:d6:d5:86:ff:cf:89:60:
                    81:b8:f6:b4:2d:ae:2c:4b:a8:77:bd:16:15:b7:ac:
                    77:05:e4:f3:41:9d:94:26:6e:84:81:70:e4:17:81:
                    d9:f3:a5:76:6e:9f:2d:40:2a:46:f8:35:37:a8:5b:
                    ca:f9:52:d2:a7:ad:a3:22:ab:05:23:2b:e0:f8:3a:
                    fd:ea:2b:5d:ca:85:a8:2d:77:97:93:d4:11:b9:66:
                    4b:7b:65:89:87:29:96:be:b0:0a:cd:7e:7d:51:40:
                    dd:0b:9e:67:a3:62:ac:3f:ba:9b:cb:e8:c0:41:2b:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C8:09:47:9F:81:22:42:44:92:74:BB:9D:DE:EA:FF:5F:A5:30:13
            X509v3 Authority Key Identifier:
                keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:6e:f1:4e:2b:77:57:56:70:a4:60:9c:d7:47:8c:eb:6c:
         17:88:9b:af:4b:e3:5e:b6:05:30:a2:4b:4d:53:5d:7d:e5:30:
         c9:2c:e7:38:1f:1f:03:1d:98:ca:17:71:5f:5c:b0:52:ed:a7:
         5b:84:7f:52:d7:29:b0:e1:01:09:ca:8d:45:b5:29:97:3e:1c:
         6e:e1:cd:68:14:84:46:e6:54:82:38:62:b7:39:e2:ac:b3:0e:
         12:5c:4f:ac:37:0a:af:17:01:88:a2:57:c8:b1:66:a6:8b:33:
         6f:40:10:0e:e0:92:3d:11:2d:80:9e:7a:20:6c:55:f7:dd:8b:
         69:f9:80:81:da:2f:c1:33:0b:50:ca:f3:57:66:07:22:2d:a9:
         60:19:2c:0d:35:a0:cd:7a:8b:38:6c:3d:49:72:55:24:69:26:
         c1:28:1b:7e:26:15:5d:4d:4f:a2:d8:8f:53:d5:92:93:7c:61:
         c1:6d:b2:71:19:07:00:a1:ff:0f:3b:a2:ed:e0:fc:80:65:72:
         7e:33:9c:33:fc:2f:fb:d3:0b:ad:f3:4b:3f:c4:b5:67:0e:ed:
         23:e8:92:4d:15:11:e1:a1:8b:5e:28:fb:07:2b:69:ad:df:f8:
         24:a8:28:1f:bd:c3:75:34:d8:3c:6d:24:9c:11:59:a2:6a:fb:
         46:20:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:59 2026 by rpki-client