Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
File:                     AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json)
Hash identifier:          nPJM2DvkIcyNiJb/g0cXXZCoNfagkWVfhGIXM9QNCDc=
Subject key identifier:   9E:7D:A1:31:17:73:2F:FA:45:CE:BE:7F:0F:6B:F1:BD:C4:DA:AA:FF
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       12C65EFA9F6FDE5BD5AA1CE40874E4F8A40AA31D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
Manifest number:          02F2
Signing time:             Tue 04 Nov 2025 14:00:50 +0000
Manifest this update:     Tue 04 Nov 2025 13:55:50 +0000
Manifest next update:     Wed 05 Nov 2025 17:13:50 +0000
Files and hashes:         1: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: NiYQ1Oj4jlQxAf7CG9stE44f6zRfyXp+SMr92oO0Sk4=)
                          2: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: JEf8pXy01p6LMl3AMIH7leZQ45M0qwFi0UCbJ3ks1zQ=)
                          3: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: UvH9nIlLV7MTTlk+ySp3aQIuOQfzxZDqD2RXeggUE+U=)
                          4: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: ptHHSog91M7u73Pg0iKbMrjWBwg8PCHTCBMEO6Af9Dg=)
                          5: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: +vkDLgW06ADX84gA1CLRdVqziUPHQH1KnbJn/VuJnSU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 17:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c6:5e:fa:9f:6f:de:5b:d5:aa:1c:e4:08:74:e4:f8:a4:0a:a3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Nov  4 13:55:50 2025 GMT
            Not After : Nov  5 17:13:50 2025 GMT
        Subject: CN=9E7DA13117732FFA45CEBE7F0F6BF1BDC4DAAAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:b6:dd:46:15:f7:ae:1e:f7:69:e8:7e:d8:
                    4a:ff:b3:38:63:06:5f:5b:59:aa:71:b9:95:30:d9:
                    f9:aa:d1:4c:71:e3:e9:c2:4c:07:be:f3:d1:d8:c2:
                    f9:d9:c6:1e:5b:6b:da:24:27:03:ac:e9:e9:c6:58:
                    c5:08:fa:38:17:89:07:56:e7:52:fc:eb:40:1a:8b:
                    ae:c1:c7:cf:43:0f:bd:87:dd:f2:02:28:a4:f3:85:
                    20:43:81:f3:57:e5:44:9b:91:17:96:f2:4c:59:f0:
                    cd:35:1a:1a:b1:4b:0a:31:cf:88:be:1a:1c:e6:ee:
                    52:13:cf:d7:9a:a3:0d:8d:c1:91:9e:02:5a:b8:b1:
                    1f:7b:b0:57:17:21:77:dc:1c:be:5e:71:45:92:a4:
                    18:ca:7c:2d:87:74:a7:a6:31:c7:c9:17:02:fb:cd:
                    0e:de:d9:07:2e:d6:93:94:f2:78:84:61:dd:b0:3f:
                    db:eb:1b:1f:f9:df:b6:96:59:27:bb:65:ee:0b:2b:
                    32:75:c7:50:15:47:ec:ae:5f:89:53:0b:70:63:06:
                    ee:41:17:d4:bb:ba:fd:0d:70:d1:42:42:8e:49:c5:
                    5f:79:50:6e:9d:7b:d0:c2:94:e6:e0:67:57:0b:20:
                    8b:e6:1d:04:fa:6c:38:bd:4b:9c:43:0a:03:50:0a:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:A1:31:17:73:2F:FA:45:CE:BE:7F:0F:6B:F1:BD:C4:DA:AA:FF
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:fa:98:55:23:b0:b4:62:02:18:5a:b1:84:a2:c7:f2:e9:
         04:ba:4d:59:9d:63:aa:17:6d:cd:f6:2f:0e:ac:b2:a9:0e:cb:
         97:ee:ce:25:4d:62:17:8e:0c:39:78:41:0f:ed:4a:0a:5b:27:
         fc:29:06:f7:b3:36:43:ca:02:bf:c5:b7:d5:66:7a:44:5e:97:
         35:cf:8e:86:2a:39:3c:20:6f:30:f4:fb:17:45:83:17:21:4a:
         95:54:54:9b:a5:20:99:e9:0a:b6:28:89:36:13:ae:87:f1:a6:
         c2:88:d7:55:3c:ae:b7:be:6c:d6:c6:54:6f:d5:37:6a:0d:80:
         d0:31:a3:24:c8:91:2e:a6:d7:b4:72:4f:42:52:8a:fa:1d:5e:
         a5:ef:23:22:68:f0:d6:3a:33:f4:d0:05:4a:e7:20:2c:7b:f1:
         07:12:05:82:93:98:33:80:b6:5c:a7:1b:c8:49:e8:b9:a5:8d:
         c2:79:d2:f0:61:49:f2:79:9a:bc:7e:52:e3:bb:0c:a5:d2:82:
         82:0a:f7:04:9c:9b:a3:5c:3e:42:17:c5:7c:bb:87:9a:ee:66:
         e3:bd:2b:a8:d2:aa:f4:93:a2:7b:cc:a6:5e:81:10:96:1d:63:
         80:ad:ea:c9:0d:48:11:7c:70:5f:0d:17:e6:d5:45:64:7f:3d:
         05:e1:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:35 2025 by rpki-client