Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
File:                     9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json)
Hash identifier:          Mpn/GFpCY8QWKmvDffp6YnMzrc0lffA0QWSlILGZ6VQ=
Subject key identifier:   38:22:01:5A:AD:67:31:B4:48:33:40:75:DD:8A:0F:E9:9E:9D:E5:38
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       283637186420DC7F6D676E17B06DD64B83402D78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
Manifest number:          02BB
Signing time:             Wed 08 Jul 2026 04:56:14 +0000
Manifest this update:     Wed 08 Jul 2026 04:51:14 +0000
Manifest next update:     Thu 09 Jul 2026 06:21:14 +0000
Files and hashes:         1: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: 2wYBs+oQIC/65ly/c1X7T+7ZgW2A0tyVDPYqXW0BN1s=)
                          2: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: CEDrnpSPve/ZnsPuh5h02lvCnkdO7SA48MJheKQTdmY=)
                          3: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 3+NVFd5MqCKA38ozbxCW233TDJZBROiekZTzCToZHOs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:36:37:18:64:20:dc:7f:6d:67:6e:17:b0:6d:d6:4b:83:40:2d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Jul  8 04:51:14 2026 GMT
            Not After : Jul  9 06:21:14 2026 GMT
        Subject: CN=3822015AAD6731B448334075DD8A0FE99E9DE538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:6c:66:6a:9f:d0:54:73:f9:7a:48:bd:25:
                    04:49:95:4b:6c:fe:c3:bd:f3:81:10:e9:49:a2:1c:
                    11:80:1c:70:3c:b6:1c:2a:a4:56:c7:3c:17:c1:1c:
                    32:74:2d:46:2c:58:6d:82:35:f8:ce:b9:e2:4b:47:
                    53:41:26:1c:4f:56:00:ab:4a:6b:b8:b3:fd:39:28:
                    62:5f:ab:5f:a1:3e:20:dd:1f:14:f7:04:fb:ac:21:
                    de:ed:f2:2b:30:08:8d:03:2c:d4:4f:57:f9:2a:5c:
                    2e:b1:fb:b1:24:cb:33:99:13:a0:c2:df:fd:5c:4f:
                    20:1d:2b:c9:fa:71:7c:8b:cf:22:cc:e8:e2:b0:72:
                    32:a4:74:79:e3:9c:0a:72:5c:b2:08:e1:70:92:e6:
                    5a:6e:33:c5:0c:84:6e:0a:be:58:7d:59:fb:88:c2:
                    8f:31:e7:5c:28:d6:7d:23:f3:b0:13:65:19:74:fc:
                    a0:c5:26:aa:cc:fe:30:5c:0c:8b:07:bc:05:ed:7e:
                    b4:89:98:f2:7d:46:c1:3a:45:0b:5e:34:e7:a9:d2:
                    bb:af:67:f9:5b:80:be:70:62:c5:b0:67:26:70:a4:
                    f1:f6:b7:f6:42:91:3e:e1:fd:ce:ed:22:ed:c4:ea:
                    ad:e0:4b:8d:0e:7d:31:6c:d6:2c:17:cb:bf:c8:37:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:22:01:5A:AD:67:31:B4:48:33:40:75:DD:8A:0F:E9:9E:9D:E5:38
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:81:95:51:87:d9:33:ba:2d:24:79:1e:cc:3c:8b:37:f4:50:
         a0:d7:b7:d0:93:2d:b0:c2:55:37:72:29:fa:cd:dd:71:86:2a:
         06:66:c2:3a:b5:29:75:87:7f:24:af:c3:98:6b:58:9a:bc:ea:
         44:51:25:eb:69:82:96:d0:08:12:53:8c:30:9e:ad:60:00:6d:
         eb:4c:c6:3c:7a:1b:c2:d3:ac:69:95:da:ae:4b:13:c6:bc:1f:
         ff:3c:19:63:73:3d:e4:a4:86:7c:a7:82:44:5d:f2:dd:7d:b1:
         d4:51:13:3b:de:83:0b:5c:d0:79:d5:3e:01:09:db:5e:26:c4:
         77:c5:84:39:30:49:c1:ae:ab:f2:cb:14:25:9f:ed:93:26:66:
         fb:41:c5:b6:cf:69:7e:66:a4:a9:da:2a:26:51:93:6e:fd:eb:
         49:f5:ea:54:d7:f3:9f:88:1e:d7:73:32:96:14:7d:73:7b:ed:
         de:92:d0:17:3f:93:1c:2d:f7:5a:dd:06:c5:8a:00:45:6e:fc:
         76:38:7f:7d:41:2b:83:b9:0f:e8:ac:f0:54:f5:9f:83:05:34:
         5c:39:c8:e8:bc:78:a5:56:39:2f:e0:91:93:b6:5c:0b:ad:c0:
         a2:2e:e5:8e:37:8b:ba:53:6f:7d:6e:84:17:36:82:2e:2c:3e:
         f1:5a:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:09:30 2026 by rpki-client