Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
File:                     9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json)
Hash identifier:          gYcbOiZ+Vk1xiyQ4EGpOoRaB+YWD448iDFQGaiiYNQU=
Subject key identifier:   E7:F6:F4:A8:68:8E:F7:2F:F1:85:78:99:70:EC:81:BD:20:70:CD:67
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       11841BBA0C11E48D3C605A60F81ADBFDA867E1D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
Manifest number:          4C
Signing time:             Mon 07 Apr 2025 07:00:08 +0000
Manifest this update:     Mon 07 Apr 2025 06:55:08 +0000
Manifest next update:     Tue 08 Apr 2025 08:19:08 +0000
Files and hashes:         1: 323830343a363862633a383030303a3a2f33332d3333203d3e20323639373132.roa (hash: rvsjbJOKUHG3I5mdAn2jCUPQ0zJmNOOAU5HlyXFx0SY=)
                          2: 323830343a363862633a3a2f33332d3333203d3e20323639373132.roa (hash: iTBCz5d+r1yl9GxrApG+0Q07QV52IXQ9V+n1/n4ToQk=)
                          3: 323830343a363862633a3a2f33322d3332203d3e20323639373132.roa (hash: Iv4Tm3hHKiEFOvgdegfWPkIGOP3WVq9EJq6M7A/qgUU=)
                          4: 3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (hash: PJThCUTZ7moteTily4gt1fT5uRuCbqVT2139H44WgeE=)
                          5: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: UVU6zJUOaXW8OUQKLTyWrZ2RZ8YWIi6ZFsyds3V4Nq0=)
                          6: 3139302e3131322e3135362e302f32342d3234203d3e20323639373132.roa (hash: vRgBXTf737dOywQC8sA8E66J2VR8DKiOsUHsQlkbJis=)
                          7: 3139302e3131322e3135382e302f32332d3233203d3e20323639373132.roa (hash: Qljf4a+VbVEJbnLDMFmbTeiInabW3m7s+Ij5eLDeJzw=)
                          8: 3139302e3131322e3135372e302f32342d3234203d3e20323639373132.roa (hash: fcrUxtriQlyw/ToWa+Dw5lgJRmv/NgnaQKfDNbT+Mzc=)
                          9: 323830343a363862633a633030303a3a2f33342d3334203d3e20323639373132.roa (hash: ui9jzDo44V71IBoNlGBgL+5MvykFy2SsD9eArSkPA3M=)
                          10: 323830343a363862633a3a2f33342d3334203d3e20323639373132.roa (hash: XRc0IdhqqRN4xVNJPxbCqptJNqVCghf16RDVC5NW6YY=)
                          11: 323830343a363862633a343030303a3a2f33342d3334203d3e20323639373132.roa (hash: sHyswThnJNoIYdFbiHGo2AxdBe5sj0P9JC4u42EwY9Q=)
                          12: 3139302e3131322e3135362e302f32332d3233203d3e20323639373132.roa (hash: 8X4zTZgQ2j9TJGCvlsOFdlvjDfyAaTxSKRejtW10TJI=)
                          13: 3139302e3131322e3135382e302f32342d3234203d3e20323639373132.roa (hash: LerQwoGzryhhBLgRfBZP9cjZ8jAIFKguJDMmSEGmsvw=)
                          14: 323830343a363862633a383030303a3a2f33342d3334203d3e20323639373132.roa (hash: eDMbu5JgJXPFn5bZeUP4M+4QMk6n3WlnaYEHDfJu8CE=)
                          15: 3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa (hash: QcrkPhF+k614JNl/KF/tkecREBBi55kEnI5oV6z6+yk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 08:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:84:1b:ba:0c:11:e4:8d:3c:60:5a:60:f8:1a:db:fd:a8:67:e1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Apr  7 06:55:08 2025 GMT
            Not After : Apr  8 08:19:08 2025 GMT
        Subject: CN=E7F6F4A8688EF72FF185789970EC81BD2070CD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:52:57:17:ab:bd:0e:c9:f9:a4:bc:25:c8:
                    88:04:4d:07:61:2b:0b:18:b2:34:e1:ac:1a:ca:4b:
                    ae:7c:0f:be:5f:12:e5:73:d3:2f:82:d6:22:b3:99:
                    b8:b9:7e:d7:3c:cf:52:ef:c9:85:1f:2c:1a:c0:b0:
                    70:64:8a:22:1d:88:e1:81:65:1a:d2:e4:8d:4d:2e:
                    d3:ab:06:5a:4f:8e:49:2b:83:19:51:76:c1:ca:14:
                    2e:d5:14:eb:e3:fa:18:22:43:40:d4:5a:9d:5d:8b:
                    22:0e:27:ba:2e:9d:c8:eb:80:ef:31:85:be:86:8c:
                    fb:f0:66:b0:ed:6a:fa:56:0a:43:74:f0:d1:4b:e7:
                    62:21:d6:73:5c:f8:eb:f1:c6:26:ba:25:61:f3:40:
                    3a:05:a8:54:52:f9:57:33:75:6a:0a:06:d3:dc:17:
                    56:4c:52:61:cd:41:73:54:ed:ac:89:b9:85:27:99:
                    69:83:a9:d2:0e:d6:fc:2f:e9:89:72:27:e6:f5:0c:
                    5e:15:d2:b0:fa:4f:5e:bd:45:55:14:87:b1:2f:81:
                    9f:b7:2a:b5:bf:e1:12:c6:cd:80:03:94:6d:e2:34:
                    c9:b5:3c:4b:6d:79:e7:d6:8f:92:28:34:61:f3:c5:
                    56:82:26:a5:fb:90:7e:93:04:33:f7:f6:02:d7:7b:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:F4:A8:68:8E:F7:2F:F1:85:78:99:70:EC:81:BD:20:70:CD:67
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d3:d1:ed:b1:9f:3c:ad:8a:e8:00:54:24:63:d1:d2:e9:99:
         6f:a4:e2:52:b4:c8:6f:59:99:c5:87:5a:8e:19:83:5e:6c:89:
         4f:2d:2c:bd:2b:0c:21:b9:17:10:29:d1:73:60:65:a9:10:a7:
         4b:1d:a0:72:c4:d2:35:b0:ab:b0:4d:da:ba:42:d0:eb:a5:30:
         73:54:09:d6:10:20:e9:f9:a9:08:54:58:52:8c:59:78:aa:ca:
         07:1e:85:38:86:f4:24:0f:6a:ef:ee:18:a1:30:93:b7:0a:c2:
         c2:81:96:ee:98:98:ed:01:89:4c:b5:d8:b7:4b:b2:dd:5a:6c:
         76:23:4c:44:b1:27:e5:62:e5:b3:d1:6f:2b:c1:14:53:c6:52:
         90:f5:d4:4b:57:96:5f:a8:61:d6:c5:39:ac:59:e5:f1:7e:fd:
         97:ef:d5:30:ed:de:9b:cd:71:9f:85:05:6a:c7:93:13:e6:3e:
         d5:de:a7:3e:bb:ad:16:c7:ee:b6:f0:2e:38:6d:4d:a2:41:fa:
         3e:5f:9c:88:d0:48:da:27:47:36:e8:3a:bd:70:e7:38:a2:38:
         98:c0:17:6f:d0:ff:72:38:d1:96:05:f2:0b:29:dc:18:d0:b0:
         15:5c:bc:51:1f:6b:35:e6:ac:24:6e:36:a7:84:46:e7:21:94:
         4e:63:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:09:48 2025 by rpki-client