Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
File:                     A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft (raw, json)
Hash identifier:          gxlAALMUlgsO86pVb3xmL4FG6fhEurFiKSVbPO0s8Us=
Subject key identifier:   9A:4D:43:FB:64:D1:FE:D4:25:97:4A:4D:8A:34:50:45:76:3D:2F:8C
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       0D309D01866F4D6F5526192D5A42270C55CA8458
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
Manifest number:          0305
Signing time:             Wed 05 Nov 2025 03:10:35 +0000
Manifest this update:     Wed 05 Nov 2025 03:05:35 +0000
Manifest next update:     Thu 06 Nov 2025 06:35:35 +0000
Files and hashes:         1: A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl (hash: gJNaghkR1Z1MzdKLoNN+sh2WoJQ6O6VX0U4UjJTvHgQ=)
                          2: 3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (hash: FAgRhtWVbW83aLMZDwCfmIgyXr+8usf+s+PrU2i3Erw=)
                          3: 323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (hash: IGZC/ZqhSQbu5GFCYQCixQwJXOH+Gl9YndWhUHmy/Gc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:9d:01:86:6f:4d:6f:55:26:19:2d:5a:42:27:0c:55:ca:84:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Nov  5 03:05:35 2025 GMT
            Not After : Nov  6 06:35:35 2025 GMT
        Subject: CN=9A4D43FB64D1FED425974A4D8A345045763D2F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:e4:04:d4:f4:1c:18:a6:73:44:fb:ae:18:
                    ab:f3:7b:9e:45:e2:f5:b8:36:a0:8a:56:89:d0:3b:
                    52:09:86:d2:84:f7:b2:66:8f:4e:e2:b5:cc:3b:34:
                    00:e2:75:13:28:39:55:6f:a2:ba:c8:4e:1a:86:38:
                    b4:bc:72:f4:90:cf:b2:5c:6d:a1:e9:cc:d7:46:de:
                    ba:f1:3e:b3:7d:b6:6a:5e:f2:1a:82:07:25:ed:f3:
                    f0:b7:ab:eb:0a:d0:15:b9:43:a5:c6:99:08:0b:cb:
                    1a:ae:5f:d4:c5:84:a5:c4:3c:19:61:ba:f4:8c:e6:
                    cf:0b:e8:c6:1b:c3:28:f9:13:53:fe:83:60:ab:3f:
                    21:89:e8:e0:cd:23:c5:b2:5d:ea:65:22:76:72:1d:
                    d1:41:a2:46:9e:65:e2:1b:fc:fc:f8:24:9b:1c:84:
                    b7:ee:6a:3b:08:c1:de:6e:fe:55:3d:bd:67:3b:69:
                    6d:71:03:ba:ad:19:3f:90:52:0a:bc:12:1e:f5:1f:
                    81:33:1b:e4:57:f2:5f:42:85:c9:3b:97:35:3a:26:
                    d8:03:aa:48:71:dd:4f:7f:11:d3:df:65:b1:26:55:
                    4d:3e:47:9d:40:94:fb:65:32:8d:ea:70:b2:8d:b6:
                    42:5f:a1:97:66:0f:44:3a:ba:6e:51:3e:d3:a7:8a:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4D:43:FB:64:D1:FE:D4:25:97:4A:4D:8A:34:50:45:76:3D:2F:8C
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:43:54:a5:27:84:bc:b1:38:94:c9:8e:67:8d:d6:d5:7b:
         d2:24:21:25:ac:2b:ce:7e:50:c2:35:81:af:1c:ae:4d:a8:50:
         47:16:77:81:66:58:aa:91:06:70:2f:81:e4:36:82:81:b8:10:
         c8:f4:d5:ce:81:b1:0d:ee:47:df:2a:17:25:bc:84:8a:2e:b7:
         69:f0:cb:96:e5:b0:ab:2a:60:c6:ed:1c:1c:ef:ea:99:b0:7c:
         a0:19:14:a0:e5:95:40:a5:24:d7:52:82:cc:3e:c2:29:9b:c5:
         b2:db:21:bc:3a:2b:4d:21:b5:1c:1e:be:c5:1d:f4:07:39:9f:
         99:51:90:47:6c:19:f2:d0:ce:a1:96:23:76:e9:c9:5e:88:98:
         fd:aa:ba:56:13:94:6c:4a:a0:4e:be:1a:1b:16:4a:5c:32:28:
         a3:21:eb:5c:47:a0:5d:93:c3:a2:a3:5b:e2:00:74:97:89:d4:
         5c:6d:d3:d8:02:79:18:12:70:40:c3:4a:07:f3:ef:86:e0:6e:
         ab:28:a5:0c:21:ef:4f:1e:ba:c9:91:13:e7:5b:da:3d:b9:40:
         25:36:48:60:c0:f3:fe:d1:9e:70:59:72:d0:42:ab:db:e9:7b:
         2e:e4:9f:ff:cb:d8:2a:d3:ee:e2:b7:22:0a:4e:81:9b:d6:68:
         0c:b8:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:59 2025 by rpki-client