Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
File:                     B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft (raw, json)
Hash identifier:          45bb2ciIVkauXQXQziQA8ml+LZ9aZlJLNGgJ4wXKJXc=
Subject key identifier:   0D:9A:D0:06:94:23:41:1C:46:93:6D:9B:F7:8F:94:0C:F0:B5:79:89
Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41
Certificate issuer:       /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
Certificate serial:       32B05E842B3C66EC3E4BBE20ADCB9C6E5858590C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
Manifest number:          0A
Signing time:             Thu 14 Aug 2025 00:16:13 +0000
Manifest this update:     Thu 14 Aug 2025 00:11:13 +0000
Manifest next update:     Fri 15 Aug 2025 01:49:13 +0000
Files and hashes:         1: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl (hash: P54dah/dfU94EBE0BtPx622Tg7ud/1bPKTePN20rtvU=)
                          2: 323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (hash: LGKOYiD6Tp7ttJ6lg6hcYTjD8Cvq9uUvcrgbHV50Q2w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl
                          rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 15 Aug 2025 01:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b0:5e:84:2b:3c:66:ec:3e:4b:be:20:ad:cb:9c:6e:58:58:59:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
        Validity
            Not Before: Aug 14 00:11:13 2025 GMT
            Not After : Aug 15 01:49:13 2025 GMT
        Subject: CN=0D9AD0069423411C46936D9BF78F940CF0B57989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:85:00:a8:1e:e0:f3:04:48:54:74:d8:f7:ca:
                    bd:d2:20:be:0c:10:89:0c:d0:b5:69:3b:c9:78:d0:
                    94:4a:bb:f1:e4:9d:55:af:63:a9:dc:0e:79:ff:43:
                    df:1f:65:aa:7d:3f:a0:c3:d7:31:cc:4d:eb:46:fb:
                    2d:e7:6a:97:4b:3e:9b:0b:35:46:f5:4b:db:d2:1c:
                    66:b3:21:a9:6e:69:d3:25:ed:62:57:4f:5f:56:50:
                    22:18:7c:21:97:55:2f:7b:bd:18:fa:5a:86:75:40:
                    0e:17:5e:6c:c8:99:e3:43:5b:e2:7d:c8:dc:6c:14:
                    87:25:58:45:1d:be:d9:2c:93:88:59:f2:f0:d1:9d:
                    fc:97:03:10:92:d8:a0:77:6a:9d:8c:bb:d2:f1:61:
                    aa:ae:94:c0:10:97:eb:69:5a:d8:42:13:dc:0f:9b:
                    07:a2:08:25:d4:7d:9e:03:94:2c:2d:10:20:97:0c:
                    6a:be:e4:fb:37:6a:91:1b:5a:53:d8:8c:7b:3d:42:
                    47:36:39:13:d4:c0:81:92:5d:84:2d:5b:1f:96:cb:
                    6b:2b:16:5c:26:60:10:79:8f:8a:9b:db:b8:e8:bd:
                    ef:64:f7:5d:9d:26:21:8f:e5:c7:1e:ad:6f:39:4c:
                    70:66:af:0f:10:c7:26:61:5e:a9:b7:68:db:c9:c5:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:D0:06:94:23:41:1C:46:93:6D:9B:F7:8F:94:0C:F0:B5:79:89
            X509v3 Authority Key Identifier:
                keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:ce:40:45:ee:b9:22:3c:c3:a2:70:0d:3f:7e:d5:7c:89:
         bc:60:01:ce:da:0c:df:82:15:01:c9:01:e6:58:88:72:95:60:
         c3:e8:b1:66:f8:60:fa:32:db:0e:fc:37:3f:64:c2:40:32:cc:
         af:9f:d7:45:ba:e0:2f:9a:aa:96:3f:da:58:d9:68:a6:2b:9b:
         cf:aa:ea:64:dd:58:28:42:8c:1a:1e:1f:e2:86:50:25:33:48:
         31:a8:ba:ed:54:a4:ed:5c:f8:7d:b6:2b:02:64:2e:e3:ec:54:
         04:c5:91:2b:17:6b:e7:5e:25:34:45:6b:aa:41:48:5d:3f:33:
         35:ba:c6:27:09:4e:cd:9c:30:a0:b1:a8:6f:65:e4:d5:09:4e:
         8b:f4:24:49:79:19:45:91:41:a4:2f:e0:aa:b3:c2:3d:18:2d:
         38:70:48:fe:54:f1:c5:db:42:29:0d:fe:3d:e8:7c:68:93:6b:
         fd:40:a5:77:e6:1e:eb:de:33:e7:25:64:23:7f:8c:3b:5a:68:
         da:8d:00:db:d4:58:98:8a:68:14:35:d1:9a:21:59:f9:fe:c3:
         e6:a7:c6:51:99:97:bd:7a:9f:bf:a9:65:72:4d:6b:65:de:63:
         76:b1:69:f0:7a:1c:3e:13:87:6f:53:f3:39:97:5a:4b:61:71:
         53:92:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 06:43:01 2025 by rpki-client