Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
File:                     40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft (raw, json)
Hash identifier:          YKno9CRb+FG1g3OU+lLbTyudCGSEdSit1+S79bJ0kTk=
Subject key identifier:   5D:A3:AD:96:01:B1:DC:7E:B9:A7:8D:F0:7A:54:F4:8E:BC:CF:8F:27
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       4D36683C5CEF19C5BB63DAC2368414A5EF6A2C6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
Manifest number:          87
Signing time:             Mon 03 Nov 2025 03:30:05 +0000
Manifest this update:     Mon 03 Nov 2025 03:25:05 +0000
Manifest next update:     Tue 04 Nov 2025 04:35:05 +0000
Files and hashes:         1: 40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl (hash: Nr6/vr21T16eNHmpdXiXmWxNcIjBIGwZPOoeCuTSxrM=)
                          2: 3133312e3130302e3235322e302f32332d3233203d3e203631363537.roa (hash: PNb0CnrXZwQ/V1UeKp8pB3BmlC+9t4Xkx2duWuHFieE=)
                          3: 3133312e3130302e3235322e302f32342d3234203d3e203631363537.roa (hash: gNMNjFZQqFVpyTp9WgqTaQTf25fFKLEa96xfcFY24o8=)
                          4: 3133312e3130302e3235332e302f32342d3234203d3e203631363537.roa (hash: bymb/0V5J6QMOr1nHpt9U4DtussAKB5eFKCwfUw24ZQ=)
                          5: 323830343a316338303a383030303a3a2f33332d3333203d3e203631363537.roa (hash: DbF7t4UBp3hE0PZ3z0mC5QGEb5yGeg1Y8H9i15XzTLQ=)
                          6: 323830343a316338303a3a2f33322d3332203d3e203631363537.roa (hash: UXSdckR8jgl4Jxiq1/xCimMvphYENYDkmBnxZZnaEEk=)
                          7: 3133312e3130302e3235342e302f32332d3233203d3e203631363537.roa (hash: pdrEsidNAb03moqiEXNKgGorHl4T2dsYhkxudROI0cw=)
                          8: 323830343a316338303a3a2f33332d3333203d3e203631363537.roa (hash: MfFK6hYP4MJ2S+dUP+PSgoX1L4x4180NupHcdZbpLBY=)
                          9: 3133312e3130302e3235322e302f32322d3232203d3e203631363537.roa (hash: uCD2VVh9uHTavxVa+LGrZK2S1VBj6notmDyQ3vB7VNE=)
                          10: 3133312e3130302e3235352e302f32342d3234203d3e203631363537.roa (hash: l4zzMnBjJ6YhC0Ca+fRh8jRUieYlPykofYunmxroJN8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 04:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:36:68:3c:5c:ef:19:c5:bb:63:da:c2:36:84:14:a5:ef:6a:2c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Nov  3 03:25:05 2025 GMT
            Not After : Nov  4 04:35:05 2025 GMT
        Subject: CN=5DA3AD9601B1DC7EB9A78DF07A54F48EBCCF8F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:e8:ca:e9:30:48:0d:91:30:09:bf:0d:80:
                    c0:8c:35:f5:a9:a2:62:f5:e5:97:3b:6c:a9:89:f7:
                    5d:1f:4d:42:ca:21:33:17:0d:9f:35:ff:fc:08:cf:
                    8a:17:ea:11:57:11:b7:e7:1f:54:65:5c:67:74:29:
                    59:e0:a6:66:2a:86:cc:f4:e7:d1:6b:d2:40:0c:64:
                    f8:16:96:2e:fa:9b:56:0a:11:3a:6d:e1:33:8f:57:
                    2f:6f:9e:2f:25:a0:ea:ba:04:65:a5:8d:24:89:65:
                    76:e0:dc:43:33:ee:2f:21:9d:da:18:8a:8b:41:76:
                    a1:c9:d9:08:72:7c:9a:a4:f8:44:e2:60:39:20:33:
                    7c:e5:0a:e6:4a:64:0b:a8:08:1b:14:37:af:a8:95:
                    e8:db:67:a8:d1:14:d1:bc:86:e9:95:3d:b8:d3:78:
                    9d:cf:14:0b:ef:b0:f5:33:98:86:f9:43:5a:24:45:
                    d6:3c:ed:e5:c1:ab:7b:79:9a:4a:15:54:e0:93:94:
                    aa:8e:a1:72:62:9a:26:a0:81:c7:d3:c0:d4:3c:47:
                    c7:1f:2c:d9:68:f7:32:95:0e:5b:5c:5c:40:be:ed:
                    6c:ae:db:e2:2b:e1:53:4b:3e:90:db:0e:a3:2b:66:
                    fb:ae:52:5c:4a:e5:c6:88:71:60:e2:1f:d2:56:7e:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A3:AD:96:01:B1:DC:7E:B9:A7:8D:F0:7A:54:F4:8E:BC:CF:8F:27
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0f:c2:ef:d0:31:31:ca:59:47:17:91:0e:f5:03:38:a1:89:
         91:48:b7:00:0c:bf:26:bd:56:ce:98:c8:76:e2:43:af:9a:64:
         4a:3f:9f:f0:8d:f3:fe:22:34:07:3f:88:33:d8:0a:ca:91:01:
         b9:cf:6f:42:8f:e8:4f:43:bd:ce:b7:01:f9:55:9b:5f:64:b6:
         53:52:1d:3d:5c:75:ee:f6:41:f0:f2:cb:28:15:25:e5:d0:ea:
         c3:27:3e:0a:75:b0:49:5f:d0:27:78:5b:17:89:42:66:3d:44:
         c9:51:06:d8:ca:a5:e6:0c:86:5b:f5:5a:9f:54:18:b6:91:22:
         06:2a:f8:a2:5f:6b:4e:3a:0a:ae:a6:f6:e7:fc:04:2d:9e:65:
         4d:09:87:25:f4:9d:6d:7e:a8:1c:e6:05:6c:fa:bc:99:cd:76:
         62:17:15:ed:b1:00:9a:6c:55:09:97:19:1b:63:01:67:5f:33:
         c6:bc:b6:5d:19:ba:7c:d6:97:2e:16:9e:83:5f:f9:df:06:f6:
         99:32:b7:74:02:a9:e8:67:c3:29:80:9c:fe:12:21:58:4d:c3:
         40:e0:ae:7c:a5:5a:09:65:6c:e6:cb:26:f1:1e:37:01:7d:6f:
         bf:48:6b:6a:e4:0e:d1:12:0e:ca:bd:b6:d1:90:9c:01:33:12:
         29:d2:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:06 2025 by rpki-client