Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
File:                     B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft (raw, json)
Hash identifier:          UYF7JY/3zV58/BTvlKETqLoAvEMgGkqlnxawO/MnU8A=
Subject key identifier:   64:DB:B0:E0:78:B0:51:EC:5E:56:95:21:9F:D9:EB:AB:68:2F:3F:5B
Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41
Certificate issuer:       /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
Certificate serial:       27519741057D666E12BA9C9D4A4D1C3252957098
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
Manifest number:          01A9
Signing time:             Wed 08 Jul 2026 13:08:53 +0000
Manifest this update:     Wed 08 Jul 2026 13:03:53 +0000
Manifest next update:     Thu 09 Jul 2026 13:34:53 +0000
Files and hashes:         1: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl (hash: EFezMIPqx1quN/BoF5SshPBjuPU42MESyxBU7LoX/xE=)
                          2: 323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (hash: LGKOYiD6Tp7ttJ6lg6hcYTjD8Cvq9uUvcrgbHV50Q2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl
                          rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:97:41:05:7d:66:6e:12:ba:9c:9d:4a:4d:1c:32:52:95:70:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
        Validity
            Not Before: Jul  8 13:03:53 2026 GMT
            Not After : Jul  9 13:34:53 2026 GMT
        Subject: CN=64DBB0E078B051EC5E5695219FD9EBAB682F3F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:d3:43:a7:62:27:c6:e6:8e:d2:4c:c1:db:
                    d7:c3:92:95:f8:2a:9a:32:7c:a6:48:59:10:b8:9b:
                    28:70:68:65:53:f1:07:7a:eb:8f:a1:9d:15:f8:30:
                    2d:10:6f:d9:67:da:f6:57:1d:15:6e:e0:46:ba:68:
                    18:99:33:57:63:d3:3f:0a:94:00:c7:b1:bf:58:69:
                    a0:c9:9a:df:64:e4:70:3f:a9:1a:12:05:01:82:43:
                    f5:4a:05:c6:a2:3c:63:bf:eb:b8:38:ba:04:41:02:
                    bc:db:38:cd:16:c6:75:fc:d2:c2:85:b4:7c:10:32:
                    96:86:6d:47:4a:ef:f5:64:8c:2a:28:bc:3c:6e:69:
                    cf:ee:da:8f:21:b9:4d:55:15:eb:c0:13:60:3d:02:
                    3c:d8:89:f9:02:23:ec:bf:c4:e8:26:ad:71:81:7e:
                    16:b6:00:f7:dd:d1:ef:e0:ca:6c:be:41:a6:f1:e9:
                    f0:98:92:1b:9d:ee:bf:d0:fe:bc:d8:01:e5:44:d1:
                    6c:cd:1d:6e:1c:ed:05:38:aa:e0:c6:7f:2f:69:ed:
                    24:f5:31:44:e6:73:79:bc:0f:c7:ea:68:98:5f:a3:
                    17:ff:9a:85:dd:08:de:b2:69:fd:76:fe:f0:83:f8:
                    f2:c2:b1:74:ea:07:34:ae:0d:b4:fd:e9:2e:54:89:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DB:B0:E0:78:B0:51:EC:5E:56:95:21:9F:D9:EB:AB:68:2F:3F:5B
            X509v3 Authority Key Identifier:
                keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:21:ac:bf:8e:27:3a:3f:5f:7e:27:de:85:af:42:6e:85:31:
         5b:e0:ad:dc:29:8f:ae:1b:ee:28:bb:fd:e4:1f:76:e7:c8:f8:
         e8:58:cc:fa:4d:03:4d:8f:d9:30:06:ed:f7:66:03:b7:74:84:
         90:9a:63:74:ed:0a:53:ee:e4:3f:2c:60:c2:94:1a:bd:03:53:
         84:4d:c0:60:23:b8:37:28:24:ee:da:a7:e5:16:d1:d7:72:3d:
         62:f8:ae:da:c7:24:31:c4:72:82:80:36:63:e3:10:cf:51:17:
         a9:a2:86:7c:a1:05:fe:f1:c4:1e:79:99:b6:f1:f4:08:c9:a9:
         a0:90:e2:50:dc:49:2a:9c:37:d6:97:2f:1b:4e:77:0b:15:5d:
         8e:68:e7:4d:a6:1b:5a:12:c4:ff:db:00:70:5e:7a:7d:c4:af:
         1b:19:f2:fc:09:bc:1c:cf:58:cb:fc:cd:22:41:79:67:3d:61:
         0e:ca:a1:a3:fe:b7:7f:7b:d4:cb:ee:c4:11:36:bc:12:66:f9:
         67:5a:23:a7:a8:4a:c9:ce:4a:5b:9d:51:26:a4:d4:65:7b:db:
         dc:f4:0c:36:c2:4e:fb:96:c6:3d:1d:50:f0:14:c7:c6:3c:4d:
         1c:64:25:46:7c:69:16:b1:cc:95:3f:f4:86:b0:4d:2c:45:71:
         be:b9:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:10 2026 by rpki-client