Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
File:                     9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json)
Hash identifier:          iwX5a7z8ac8PWl4yKqm7zcjbgCfY8lKjqy3Qf5R/Twg=
Subject key identifier:   0A:69:60:D9:F3:CA:CA:44:42:AF:62:4D:D2:F5:74:70:6D:4A:00:96
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       2BC36E6E13A440BE8A4236C3C5196D3B2EE57967
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
Manifest number:          A1
Signing time:             Tue 10 Jun 2025 08:59:57 +0000
Manifest this update:     Tue 10 Jun 2025 08:54:57 +0000
Manifest next update:     Wed 11 Jun 2025 11:03:57 +0000
Files and hashes:         1: 3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa (hash: LerQwoGzryhhBLgRfBZP9cjZ8jAIFKguJDMmSEGmsvw=)
                          2: 323830343a363862633a343030303a3a2f33342d3334203d3e20323639373132.roa (hash: sHyswThnJNoIYdFbiHGo2AxdBe5sj0P9JC4u42EwY9Q=)
                          3: 3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa (hash: 8X4zTZgQ2j9TJGCvlsOFdlvjDfyAaTxSKRejtW10TJI=)
                          4: 323830343a363862633a3a2f33332d3333203d3e20323639373132.roa (hash: iTBCz5d+r1yl9GxrApG+0Q07QV52IXQ9V+n1/n4ToQk=)
                          5: 323830343a363862633a383030303a3a2f33332d3333203d3e20323639373132.roa (hash: rvsjbJOKUHG3I5mdAn2jCUPQ0zJmNOOAU5HlyXFx0SY=)
                          6: 3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa (hash: fcrUxtriQlyw/ToWa+Dw5lgJRmv/NgnaQKfDNbT+Mzc=)
                          7: 3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa (hash: QcrkPhF+k614JNl/KF/tkecREBBi55kEnI5oV6z6+yk=)
                          8: 323830343a363862633a3a2f33342d3334203d3e20323639373132.roa (hash: XRc0IdhqqRN4xVNJPxbCqptJNqVCghf16RDVC5NW6YY=)
                          9: 3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa (hash: vRgBXTf737dOywQC8sA8E66J2VR8DKiOsUHsQlkbJis=)
                          10: 323830343a363862633a3a2f33322d3332203d3e20323639373132.roa (hash: Iv4Tm3hHKiEFOvgdegfWPkIGOP3WVq9EJq6M7A/qgUU=)
                          11: 323830343a363862633a383030303a3a2f33342d3334203d3e20323639373132.roa (hash: eDMbu5JgJXPFn5bZeUP4M+4QMk6n3WlnaYEHDfJu8CE=)
                          12: 3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa (hash: Qljf4a+VbVEJbnLDMFmbTeiInabW3m7s+Ij5eLDeJzw=)
                          13: 323830343a363862633a633030303a3a2f33342d3334203d3e20323639373132.roa (hash: ui9jzDo44V71IBoNlGBgL+5MvykFy2SsD9eArSkPA3M=)
                          14: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: BepAG9AzDxE02AXeOAoZl6cT0RQqyWKls9DWTsIRqPo=)
                          15: 3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (hash: PJThCUTZ7moteTily4gt1fT5uRuCbqVT2139H44WgeE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 11:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c3:6e:6e:13:a4:40:be:8a:42:36:c3:c5:19:6d:3b:2e:e5:79:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Jun 10 08:54:57 2025 GMT
            Not After : Jun 11 11:03:57 2025 GMT
        Subject: CN=0A6960D9F3CACA4442AF624DD2F574706D4A0096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:61:d7:9c:45:f1:7a:7e:14:0a:1a:c1:63:
                    1f:f3:9d:2a:6c:cd:a0:19:f6:25:1a:62:31:14:32:
                    57:13:28:e9:ad:72:d8:b4:3c:4a:5a:f0:12:59:2e:
                    38:4a:55:f7:56:e8:cd:54:f9:63:7f:cd:32:d2:41:
                    e6:cd:fd:b8:73:08:25:37:2a:11:52:24:42:57:7c:
                    22:27:53:c1:d2:ad:9e:0a:53:40:eb:b0:64:8b:2e:
                    62:dc:80:f1:c1:84:6a:e9:a0:87:01:db:ca:46:c4:
                    04:76:01:82:fa:2b:db:41:f1:52:2b:93:ab:ed:d1:
                    21:4d:8d:2d:7c:3f:36:57:df:12:56:1b:c9:1a:84:
                    1e:1e:99:e4:d7:26:12:a7:57:8f:d5:3b:57:cb:ff:
                    4e:4f:19:33:ed:98:da:37:45:25:b2:ae:e1:c1:59:
                    8b:f6:ee:c5:08:64:fc:fa:cf:37:ed:e2:09:a0:35:
                    33:b7:cd:d3:f1:51:e7:4a:c3:37:18:b7:85:ab:61:
                    39:27:58:b3:73:7f:b6:44:2a:16:10:af:c6:7b:1b:
                    dd:e3:a2:b3:f4:79:62:68:fe:6b:dd:db:dd:85:6f:
                    2b:1d:51:13:00:32:f9:70:78:42:99:c7:da:a4:94:
                    af:62:0c:2d:11:5c:59:ff:25:a8:90:b2:a4:e0:0f:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:60:D9:F3:CA:CA:44:42:AF:62:4D:D2:F5:74:70:6D:4A:00:96
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:cf:b5:b0:a4:e6:ed:a6:91:e1:39:cb:88:b8:cc:62:37:f2:
         0b:e1:fd:12:e2:09:19:29:57:98:b6:c4:4b:8a:79:4c:1b:c4:
         ba:a8:ef:30:89:8e:45:87:c8:8c:69:c5:a7:8c:62:14:51:bc:
         3c:b7:21:ed:ba:8c:0b:b0:3a:bf:5c:9a:99:74:95:85:4a:0c:
         25:f7:30:93:7f:b3:15:eb:df:1b:5e:94:15:49:52:5d:86:24:
         b0:54:f4:73:dd:29:64:98:23:59:76:87:34:1f:3d:a0:e1:8f:
         2f:a4:fc:79:7b:59:99:68:ce:2e:89:d4:b4:18:b4:b7:69:aa:
         a7:b0:88:f2:48:33:1f:1d:62:7a:5d:24:39:ec:5d:b4:e6:ec:
         a7:74:ff:c8:d5:7f:e8:12:c6:ec:a7:c9:6c:e8:30:da:27:e4:
         17:a6:10:e2:39:22:d7:6a:01:d7:29:0e:52:8c:5f:a9:95:75:
         27:c0:4b:ce:2c:84:7b:03:8e:01:25:8e:ac:57:3f:d1:3b:4a:
         27:97:e8:29:45:e9:ac:cc:40:96:dc:38:52:ba:a5:ef:82:e5:
         03:41:6c:29:d7:0d:00:ff:1b:d2:b8:78:02:a2:8d:be:c1:00:
         72:0a:8c:5e:03:5f:e8:52:a9:72:f1:4a:cf:b0:ea:41:63:d9:
         95:fb:08:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:04:01 2025 by rpki-client