Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
File:                     40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json)
Hash identifier:          ixs28mpNSiUmzA6hqG/lIBs4KlIWPMxbUfU3jV9u91o=
Subject key identifier:   4E:EF:5C:20:79:E2:FF:BD:3F:6C:A4:95:0A:AB:FC:36:71:EC:25:D7
Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE
Certificate issuer:       /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
Certificate serial:       5F1B0B014A3E0F7118FF929BB992D5D9D9F28CE7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
Manifest number:          9B
Signing time:             Thu 07 Aug 2025 19:15:25 +0000
Manifest this update:     Thu 07 Aug 2025 19:10:25 +0000
Manifest next update:     Fri 08 Aug 2025 22:44:25 +0000
Files and hashes:         1: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=)
                          2: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=)
                          3: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=)
                          4: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=)
                          5: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: +8a4LI1LrU2HZdt9DRAjW2TEYJHZ8HWDC1E/5LzZA/0=)
                          6: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl
                          rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 22:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1b:0b:01:4a:3e:0f:71:18:ff:92:9b:b9:92:d5:d9:d9:f2:8c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
        Validity
            Not Before: Aug  7 19:10:25 2025 GMT
            Not After : Aug  8 22:44:25 2025 GMT
        Subject: CN=4EEF5C2079E2FFBD3F6CA4950AABFC3671EC25D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:43:d3:77:53:49:2d:50:ec:28:be:90:bf:
                    24:99:e6:f7:97:d9:1a:e7:8e:56:55:48:22:9f:b7:
                    a5:d1:1d:28:b9:16:d3:70:f4:5a:69:f2:fa:9c:ed:
                    1e:69:03:c7:48:35:fd:85:e6:5f:f0:61:ed:ef:b7:
                    e3:b2:9d:83:48:92:38:40:95:ac:d3:ee:fc:8a:d7:
                    2d:ce:2c:79:11:95:e0:5e:d4:df:52:66:18:2e:7e:
                    1c:de:c3:2f:38:37:f8:2f:ca:e8:93:a9:46:85:e5:
                    3e:0d:44:fa:a4:19:3e:0e:4c:5b:60:bc:56:56:b3:
                    9b:18:46:95:40:f9:a4:88:ca:5e:de:bb:d9:dc:2f:
                    e2:30:0d:48:f0:9c:3f:07:b6:8f:ab:1d:0e:31:e1:
                    c1:ab:4c:0c:03:4d:08:51:2f:d9:c2:01:9c:14:d4:
                    a1:06:9e:e6:62:2b:6a:fc:3a:39:6b:81:2f:a7:9a:
                    ba:4c:f8:08:de:ea:6e:51:1a:79:3f:3a:9a:f8:80:
                    b9:9a:91:91:52:55:81:c5:45:91:fb:6b:aa:39:57:
                    3c:87:81:3a:f2:19:2a:52:f4:74:bc:90:62:e0:88:
                    02:e5:be:03:24:12:c8:21:b0:20:a2:03:53:d3:f1:
                    09:9a:ed:dd:29:e4:d6:5d:d4:b6:c1:8c:b2:0d:44:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:5C:20:79:E2:FF:BD:3F:6C:A4:95:0A:AB:FC:36:71:EC:25:D7
            X509v3 Authority Key Identifier:
                keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:55:15:60:41:36:ff:1e:c9:81:98:0f:b2:51:09:65:4b:
         cd:27:10:34:d3:7d:39:1a:18:88:f7:22:a1:94:af:db:81:13:
         41:08:a4:04:82:d7:4d:61:bb:42:2a:07:f6:b4:d6:d6:6e:8f:
         fd:da:5d:3f:03:b0:b9:65:0f:80:ed:23:e0:fc:a7:b5:1a:47:
         b3:59:19:de:8a:51:34:56:b9:50:b2:a2:d2:ba:51:f6:8c:18:
         78:54:ae:7e:be:60:cb:4c:41:06:cb:97:1e:0c:21:60:e7:41:
         cc:36:e4:5b:a3:e4:2f:88:69:99:65:a1:81:b2:56:5c:20:d3:
         76:18:e0:ce:0b:6c:f7:64:ac:27:78:39:dd:ac:67:ca:9d:a1:
         05:e0:54:24:8f:a6:d8:13:5d:b9:a9:d0:af:9b:73:ae:9c:49:
         83:a4:87:6d:fa:b7:9e:58:d1:88:36:aa:a5:ab:fa:25:03:34:
         1c:f0:24:42:03:06:ba:6c:32:19:f1:4e:09:67:fd:b9:8f:7d:
         32:df:3c:d5:65:99:b4:f4:12:0a:5c:d6:1c:b6:f0:d8:1d:fd:
         12:68:16:e9:43:4e:2d:02:78:72:85:42:37:b8:35:d5:85:55:
         5a:49:21:cd:44:1d:f8:c2:14:fb:be:e6:53:85:87:f3:6f:07:
         b0:46:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:35 2025 by rpki-client