Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
File:                     9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json)
Hash identifier:          feK6J6iUhD2hO0vas6oDSEOgK+3qjwWpriEe+NZARZA=
Subject key identifier:   27:33:B2:A0:63:36:A8:C9:87:13:9F:C1:AD:FA:AD:62:F8:0D:B1:E1
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       73FF0E794886EFBFFBEECA70840E609A1076382D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
Manifest number:          020F
Signing time:             Sun 01 Mar 2026 23:11:51 +0000
Manifest this update:     Sun 01 Mar 2026 23:06:51 +0000
Manifest next update:     Tue 03 Mar 2026 02:05:51 +0000
Files and hashes:         1: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=)
                          2: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: xewpQCrJmpk3Fd0o3dRHqCxHHJgKfDLjjl+48YOhC0Q=)
                          3: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 02:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:0e:79:48:86:ef:bf:fb:ee:ca:70:84:0e:60:9a:10:76:38:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Mar  1 23:06:51 2026 GMT
            Not After : Mar  3 02:05:51 2026 GMT
        Subject: CN=2733B2A06336A8C987139FC1ADFAAD62F80DB1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:7e:c5:5e:91:91:39:f3:3a:25:62:4b:d7:
                    52:53:60:e3:2c:ef:00:e9:e3:a3:26:bc:b1:4c:ac:
                    e5:97:8a:07:07:f1:54:fe:72:99:25:ce:68:43:52:
                    e0:0d:1e:ff:10:9f:3f:41:ce:72:43:0e:07:61:46:
                    d0:6a:61:c4:78:43:4a:b5:c9:14:e2:98:af:52:7e:
                    c7:7d:05:99:72:58:7d:b1:68:10:58:b9:e8:63:db:
                    ce:cb:a4:1d:ce:75:46:bd:95:86:ab:74:82:7c:fa:
                    45:59:56:25:d5:82:0a:79:52:0c:8e:e4:b5:e8:40:
                    27:41:4d:90:50:f0:b7:2e:da:a8:ba:9b:17:3a:e2:
                    9c:96:b2:22:d3:16:91:b5:8d:6d:4a:e3:c8:d9:e5:
                    d0:2f:d7:70:26:f3:30:28:21:01:f5:b0:9e:5b:2c:
                    6d:72:80:0b:c7:76:af:90:8d:5a:04:69:02:b6:c7:
                    2d:39:4c:f5:12:d7:05:6b:2d:5c:58:e8:d9:8e:20:
                    fe:e5:79:11:e6:1b:da:d7:12:83:d4:39:fd:e8:43:
                    08:96:e1:3c:1b:f5:6b:a1:3a:e0:4b:22:39:4d:59:
                    17:4b:3d:5a:c4:3b:3b:54:59:ff:c2:2b:82:ce:97:
                    be:cd:fd:1f:43:0b:57:33:4e:5c:5a:ef:83:36:b4:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:B2:A0:63:36:A8:C9:87:13:9F:C1:AD:FA:AD:62:F8:0D:B1:E1
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6a:25:83:e6:61:69:ee:ab:ea:cd:81:45:4c:bc:d5:29:08:
         35:a6:15:1a:d6:c4:97:8c:c9:fd:64:a9:2f:85:bd:c2:c4:ef:
         fa:2d:65:b1:02:c8:9d:2c:fb:cb:dd:a6:09:9f:86:a0:7e:06:
         f3:b5:a3:91:7d:c5:27:a8:1e:fd:d2:f1:33:0b:d2:e7:17:f6:
         5d:fa:fa:fe:bf:0f:4e:2e:71:65:01:03:e8:e5:d0:4d:05:e7:
         14:c4:5d:4e:5e:f0:c9:41:9c:96:b2:eb:65:09:0b:71:f8:79:
         92:1d:d9:8e:51:2a:ab:37:18:65:f3:9f:b7:e1:c9:bd:5e:c0:
         69:01:87:a5:4e:df:ac:bb:1a:e0:22:86:3e:ca:15:a9:18:2c:
         5d:cb:c1:f8:46:51:7c:f8:ec:e7:2e:12:54:86:6c:9a:c8:ed:
         a9:43:a1:4c:65:46:ed:7a:37:54:4a:52:04:fc:cd:c7:3a:35:
         d1:7b:56:a8:4a:1f:48:7f:91:f3:cd:ce:06:9d:d1:7f:1c:01:
         98:b7:de:58:35:ba:af:b8:e1:85:3a:cb:9d:99:2e:b2:f1:44:
         fd:1c:16:9f:b1:6a:1c:49:af:70:1d:cf:54:11:ce:88:e9:15:
         45:ff:80:03:71:d1:00:be:11:55:33:63:89:c6:71:72:71:69:
         2f:0b:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:50 2026 by rpki-client