Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
File:                     B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft (raw, json)
Hash identifier:          MWwYRU+RKRagTneP+4Xo2QtCYrHN12rCmkND4+kV4XQ=
Subject key identifier:   91:F9:AA:63:1A:B9:8F:B0:24:1A:63:02:C9:CF:F9:6C:C4:BB:96:F8
Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41
Certificate issuer:       /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
Certificate serial:       632E7DCC1CC5E035DBB67F910D9E9AFBD736E7AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
Manifest number:          0140
Signing time:             Fri 17 Apr 2026 11:18:23 +0000
Manifest this update:     Fri 17 Apr 2026 11:13:23 +0000
Manifest next update:     Sat 18 Apr 2026 11:20:23 +0000
Files and hashes:         1: 323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (hash: LGKOYiD6Tp7ttJ6lg6hcYTjD8Cvq9uUvcrgbHV50Q2w=)
                          2: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl (hash: 4SJdzgxAb+KCE6d3xgERCkarmcmjupVWesMdOrvsJks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl
                          rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2e:7d:cc:1c:c5:e0:35:db:b6:7f:91:0d:9e:9a:fb:d7:36:e7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341
        Validity
            Not Before: Apr 17 11:13:23 2026 GMT
            Not After : Apr 18 11:20:23 2026 GMT
        Subject: CN=91F9AA631AB98FB0241A6302C9CFF96CC4BB96F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:88:a3:e4:3f:b8:16:41:15:d2:2f:8b:be:
                    c0:e0:fa:50:80:dd:1f:1f:85:8c:97:75:b9:93:f9:
                    c6:40:ee:20:15:b0:c9:56:b9:79:ae:db:d7:36:c8:
                    ca:9f:44:30:03:99:89:c2:23:11:23:7a:08:fb:f7:
                    44:f2:7e:5a:2e:92:6d:24:08:2d:07:96:61:36:82:
                    eb:7d:29:5c:a7:f9:0b:3d:3a:08:e8:b5:ad:13:2f:
                    c6:65:cd:51:11:73:72:54:d3:88:db:dc:b6:f1:62:
                    8f:7a:99:c3:3b:ba:89:8a:ff:d6:5b:10:15:83:a4:
                    48:b2:2e:f6:da:32:ad:ad:c8:d3:fc:cb:52:d7:b3:
                    4e:6d:62:00:47:c9:0e:c9:c4:81:47:d6:15:f9:86:
                    cf:8b:6d:97:91:79:93:41:32:ed:8a:5c:91:e2:76:
                    8c:03:9d:38:ad:4b:33:ba:2b:91:88:86:28:cd:33:
                    94:24:cf:1c:9b:5d:83:6d:5f:1e:72:26:78:0c:63:
                    1f:58:fb:ce:f5:94:b7:69:b6:59:3e:77:94:a7:0d:
                    b3:9e:37:22:05:45:9b:17:c6:b8:46:5a:71:8c:23:
                    ba:76:86:d3:46:10:bf:d0:42:4e:5c:63:cb:3d:77:
                    9b:9c:0a:92:4e:53:7a:b6:e1:24:6b:2e:9e:43:ae:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F9:AA:63:1A:B9:8F:B0:24:1A:63:02:C9:CF:F9:6C:C4:BB:96:F8
            X509v3 Authority Key Identifier:
                keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:da:b4:ec:99:06:a8:49:07:08:43:f3:13:d6:5f:eb:82:
         f7:fa:b2:f7:80:d5:18:7c:2b:27:63:38:45:b7:71:0e:28:8c:
         3c:cd:39:23:01:5a:a8:9a:01:be:9a:1a:7a:50:b1:f3:02:87:
         39:e4:f2:ae:90:1f:4f:a7:86:03:e7:84:45:18:63:8b:d4:dd:
         a0:bc:1a:fd:ce:c3:f0:20:d0:2c:1d:c5:5f:af:47:ae:f4:03:
         00:a9:a5:4a:5b:09:0c:99:0a:3e:26:0b:46:d8:c7:17:ed:73:
         1c:ce:75:4a:78:7a:6e:80:a4:27:28:25:f5:17:70:28:64:40:
         2e:4b:3b:a6:e6:eb:24:3f:4c:1d:4b:ef:c2:29:85:b0:e5:67:
         5d:6e:1a:4e:cd:ea:01:77:c8:16:80:4f:2d:0b:df:0b:14:de:
         b9:b5:0d:39:45:c3:ac:09:67:01:dc:e9:b1:2f:ae:37:9a:3d:
         92:df:a0:27:b6:4a:44:9d:d1:e1:9d:11:64:8d:dc:0f:98:7d:
         05:16:95:db:a3:73:05:d8:44:8f:c3:88:40:4d:fd:63:54:69:
         9a:a7:12:6c:3c:78:3b:3e:57:1e:8a:0f:24:72:5d:01:77:83:
         78:ad:52:75:37:05:88:9c:e0:4f:70:a8:54:a4:33:27:22:cd:
         a3:b8:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:04 2026 by rpki-client