Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
File:                     7040E70A343ED61D14BF33985442CD6EB7927B4D.mft (raw, json)
Hash identifier:          Z/mhYl3hsJScgwmiY43ZbiJnJmOoto3VcCRVdCI4MF0=
Subject key identifier:   83:9B:29:55:51:4B:D4:87:6F:E8:76:E1:C1:12:D6:6F:AD:B3:C2:4D
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       7F9D562C7CB110752AE25CABC7AFEA5F7D632456
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
Manifest number:          8F
Signing time:             Mon 03 Nov 2025 05:23:50 +0000
Manifest this update:     Mon 03 Nov 2025 05:18:50 +0000
Manifest next update:     Tue 04 Nov 2025 05:56:50 +0000
Files and hashes:         1: 323830343a376663343a383030303a3a2f33332d3333203d3e20323731373038.roa (hash: GHBVxgnBfHRhdMdttxO2cVBkYjtiXfaqedtAdO+CMrM=)
                          2: 7040E70A343ED61D14BF33985442CD6EB7927B4D.crl (hash: 5GYrf4ZUCh/7DnC2Zy2eHP5Pboar3y4XQ5FBp8jrgPw=)
                          3: 3138362e3233322e3234322e302f32342d3234203d3e20323731373038.roa (hash: cO16ey9RwUeuZE+IfI0B2WMrlMx03Ly4tDErYZ6YuKU=)
                          4: 3230312e3133312e3130332e302f32342d3234203d3e20323731373038.roa (hash: txOkupoTcZcx+0j2rjrFMLXCvQTBzYNkDiMmqyq+MQA=)
                          5: 34352e3232392e3135312e302f32342d3234203d3e20323731373038.roa (hash: m7fanAuWMqdRAiDRdvGpGqzVkHxLfxaieqdJgeGJhqs=)
                          6: 323830343a376663343a666666663a3a2f34382d3438203d3e20323731373038.roa (hash: vKUnLn7P8oPw0w3pBAEq0wBq/HcSgypWNtviWt9bonw=)
                          7: 3137372e38362e3134322e302f32342d3234203d3e20323731373038.roa (hash: YbuR1zOx8+jKTIWygiCYdcw8WewIsHRyRxRtFwlQVCI=)
                          8: 323830343a376663343a3a2f33322d3332203d3e20323731373038.roa (hash: NUK9V86/iiMIUaM6/a1PstgGOWJmaupaSgFgG/59pSU=)
                          9: 323830343a376663343a3a2f33332d3333203d3e20323731373038.roa (hash: Mhbw2LZdn2s8A8jdRjcT+74OYsv0DSHzcOPokMjEygU=)
                          10: 323830343a376663343a343a3a2f34382d3438203d3e20323731373038.roa (hash: h0l+EzSxb2C0/zC+niTOrH/lzpgTBe9f6MRUbH63qnE=)
                          11: 323830343a376663343a333a3a2f34382d3438203d3e20323731373038.roa (hash: dC7cWDkFOewhXkv+/kUNFMWPY+ZS8WuWCgaoMZHxoTo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9d:56:2c:7c:b1:10:75:2a:e2:5c:ab:c7:af:ea:5f:7d:63:24:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Nov  3 05:18:50 2025 GMT
            Not After : Nov  4 05:56:50 2025 GMT
        Subject: CN=839B2955514BD4876FE876E1C112D66FADB3C24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:f6:76:37:70:2b:f4:e8:66:2d:30:c2:b4:
                    4a:f2:b7:16:43:a5:e3:78:32:42:99:10:53:78:f7:
                    a6:df:51:56:87:21:a2:b5:90:fc:d8:68:f4:76:51:
                    45:ea:10:3c:18:85:68:3d:8b:c4:f7:63:94:ea:2e:
                    eb:f1:81:bf:76:30:4a:bd:78:56:9a:65:b7:88:0c:
                    58:19:3d:53:4f:43:15:2b:de:93:e6:6b:17:7a:13:
                    ec:09:8d:18:04:c2:50:6a:fd:5b:85:83:a6:46:23:
                    ee:62:c8:1d:08:67:50:dc:53:ce:4f:a0:54:fb:3a:
                    10:17:04:36:c2:dd:5d:50:13:8b:fe:d7:bd:75:f3:
                    57:4c:4f:44:36:5b:d5:2b:e7:90:ce:09:4a:00:6c:
                    96:59:03:a8:55:63:b0:86:27:24:16:42:a8:68:42:
                    09:09:86:64:9b:82:f8:93:bb:db:0b:cb:bd:6b:3c:
                    21:82:e1:a2:9d:d2:9e:c9:eb:1f:05:24:4b:de:37:
                    e5:dc:fb:ff:1a:4b:ca:45:dc:24:b5:a1:d8:ab:04:
                    60:f3:c0:f8:0d:94:aa:ed:5d:ab:ed:49:59:8a:25:
                    61:29:e1:90:c5:c9:c9:db:a1:d4:ae:04:da:76:3e:
                    01:07:f7:d3:bc:dd:db:8c:38:9d:88:c4:79:c9:ff:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9B:29:55:51:4B:D4:87:6F:E8:76:E1:C1:12:D6:6F:AD:B3:C2:4D
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:74:71:20:d5:1d:67:79:eb:20:e6:a6:fb:e8:bb:b3:ab:fc:
         cd:5b:3f:31:5d:ca:39:a1:84:f7:42:e9:fb:8c:08:8b:0e:62:
         6f:3a:18:44:27:44:16:13:80:25:c6:21:06:51:c1:b5:27:f7:
         ff:aa:81:e5:a6:e2:c2:fc:c0:00:b9:2e:33:18:e4:3c:dd:97:
         ab:98:df:84:c9:44:4b:10:0f:46:b9:a5:49:d5:bf:d7:c2:b7:
         30:68:e8:20:f3:43:97:f7:c4:6e:ba:02:3b:4a:c1:b6:a8:9e:
         53:e6:cd:0f:f5:dd:f3:97:4b:09:68:06:38:48:0d:94:d2:63:
         9f:1c:33:29:f6:48:1b:c6:f6:cb:69:75:22:84:2c:28:f8:e1:
         bb:92:5d:6e:04:53:db:1b:48:67:be:fb:41:e6:dd:16:04:9b:
         4d:c3:65:a4:85:01:cd:f3:c8:09:30:89:23:0f:23:ab:83:74:
         60:25:6f:b2:eb:c6:22:83:cd:2d:fe:f1:49:ac:64:c5:01:d2:
         1d:f8:49:66:d4:57:41:71:84:2d:03:8c:44:bb:8b:57:45:92:
         cd:0b:38:28:7d:07:5c:79:14:77:83:22:28:9e:a1:83:b5:5b:
         e6:91:4a:38:00:78:1c:fb:31:f0:18:ba:53:1e:73:e8:4b:e5:
         4b:a4:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:22 2025 by rpki-client