Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
File:                     9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft (raw, json)
Hash identifier:          gAYxg2o+xJV67VdEksyohzgqj0xabbSgELcswlx3fBY=
Subject key identifier:   26:A8:9A:0B:51:0A:98:12:58:00:D0:D8:8E:75:F8:90:E0:1C:9D:3B
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       5E461F8574372DD76491220BF6948B0FF1DBBDD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
Manifest number:          BA
Signing time:             Thu 18 Sep 2025 05:12:26 +0000
Manifest this update:     Thu 18 Sep 2025 05:07:26 +0000
Manifest next update:     Fri 19 Sep 2025 05:38:26 +0000
Files and hashes:         1: 3136382e302e39322e302f32322d3232203d3e20323635323331.roa (hash: ZU9qJeLM9IJt8wNEyuuoMiWoz4PvdDcmyDLtRxf/I3Y=)
                          2: 3136382e302e39332e302f32342d3234203d3e20323635323331.roa (hash: m+x74TcCn/ocgyBc3RM05glLKi8fYIlFUhBKwpn4K2c=)
                          3: 3136382e302e39342e302f32332d3233203d3e20323635323331.roa (hash: boARMv+KextnY0lTD91sQDog/0RZ6aWlWkvUEJ9jy6M=)
                          4: 3136382e302e39352e302f32342d3234203d3e20323635323331.roa (hash: wQlYnivjl5FtxYxNCOs7C52xmlf9Le1Ei0u+ubyv6zQ=)
                          5: 3136382e302e39322e302f32342d3234203d3e20323635323331.roa (hash: F7tTFMg2I2nUQcrRSqdu9LIlpqNtaAYXjo2W8vgNxAA=)
                          6: 323830343a326361303a3a2f33322d3438203d3e20323635323331.roa (hash: NmLkvgmPWpP3+AIUgkQshTGCVh+ID6Htu2PNGa7de/0=)
                          7: 3136382e302e39342e302f32342d3234203d3e20323635323331.roa (hash: 1qlhPXsbe2YqvzA3+1VrC0oc1BrSaTzO8dGHX3NX6iw=)
                          8: 3136382e302e39322e302f32332d3233203d3e20323635323331.roa (hash: dRH1WvpSwekmglWG3rDq1VTpWxYqnyPGTxeGGy/2bxM=)
                          9: 9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl (hash: W4zB6scClsX+BSPMSP9vxjeNDRwPeprCLJdK7Q306I4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:46:1f:85:74:37:2d:d7:64:91:22:0b:f6:94:8b:0f:f1:db:bd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Sep 18 05:07:26 2025 GMT
            Not After : Sep 19 05:38:26 2025 GMT
        Subject: CN=26A89A0B510A98125800D0D88E75F890E01C9D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:88:51:41:98:a9:de:23:6a:f4:9f:a2:e4:9b:
                    21:20:20:e7:be:26:a0:c9:ce:a4:17:b9:7b:0c:8b:
                    7e:c8:e8:53:af:33:07:cc:8a:ad:4c:75:4f:ec:01:
                    22:8d:e8:ad:1d:96:0c:dc:f3:b9:9f:6d:7d:2d:07:
                    ec:58:70:5c:e9:dd:50:c3:cc:21:11:33:8f:84:e5:
                    9a:76:4f:b7:3a:ef:82:66:ab:f4:e1:87:8d:94:e2:
                    7d:c9:a9:d2:8e:f0:db:30:da:2d:ee:85:89:ed:94:
                    2c:08:c9:31:b2:07:39:06:36:91:9a:27:d1:28:3e:
                    e2:a8:d1:04:de:07:4c:0e:32:6c:c1:e7:77:ab:ab:
                    08:63:69:af:47:c0:90:80:69:d7:63:07:87:d9:c6:
                    24:3b:29:16:e6:b8:23:88:40:ea:3b:97:84:62:33:
                    f4:7a:58:70:2b:d4:fa:94:7e:ec:b5:f0:f6:b1:05:
                    fe:0a:4d:49:60:44:c1:de:9f:dd:a2:3d:24:ac:27:
                    ba:71:9e:c3:c5:2b:be:06:43:31:38:7c:df:d3:4e:
                    02:bf:a1:18:bc:a8:07:07:7a:be:27:e4:ef:a7:46:
                    b6:27:48:d1:33:d0:26:ac:77:ed:be:a4:9e:ae:a9:
                    e4:69:a9:a3:f7:5e:95:da:98:8e:54:be:12:b4:4d:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A8:9A:0B:51:0A:98:12:58:00:D0:D8:8E:75:F8:90:E0:1C:9D:3B
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:e8:40:2a:e3:47:98:f9:2d:b5:8c:a3:58:6f:55:36:98:
         4d:bd:7f:da:3e:5f:af:0d:74:64:ef:33:5a:98:92:6b:7d:0b:
         fb:84:bc:cc:9d:67:23:9e:d6:11:87:54:86:1d:04:10:8f:c7:
         0d:b2:4a:e3:3b:fc:e2:dc:06:d6:0c:0e:4c:b9:33:25:3a:89:
         92:f9:52:23:ec:ec:aa:8a:17:23:db:91:86:db:ef:f2:d5:7b:
         a2:ec:7a:cc:72:b8:30:c3:ff:2d:49:8f:ff:2d:bc:f1:29:e9:
         cb:a0:49:38:ee:cc:f0:2d:d4:1e:e6:62:c4:85:0a:59:21:f4:
         06:17:66:bb:44:be:50:4d:91:05:f8:b2:82:27:70:0b:66:b9:
         70:83:28:9e:5c:5a:6e:92:b9:5c:38:48:c7:7b:26:0c:ca:e5:
         99:21:c9:2e:68:06:91:12:c2:d6:20:cb:87:c5:4f:ac:38:84:
         27:09:30:26:5b:7e:79:d0:80:12:23:a7:2a:2a:44:ba:d6:76:
         6e:04:ed:ed:31:3a:86:ed:95:6e:77:38:bb:1d:47:bf:5b:e2:
         51:04:b3:f2:31:10:64:23:aa:7a:fe:13:3f:de:00:4b:2b:f5:
         49:0a:81:cd:b9:b2:97:00:6c:b8:9e:9f:50:e8:dd:33:03:be:
         b4:e5:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:14:27 2025 by rpki-client