Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
File:                     90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft (raw, json)
Hash identifier:          MPPj8su+gPyeUBGtb3acjFKxf0G8P6wdimmajxwm2gw=
Subject key identifier:   69:50:28:F4:84:E1:92:C6:87:1E:5D:FA:37:D0:84:85:71:C6:4B:13
Authority key identifier: 90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6
Certificate issuer:       /CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
Certificate serial:       7F2C7F6691C0D950546D04316DA0E7F42BE1F632
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
Manifest number:          40
Signing time:             Fri 17 Apr 2026 15:09:14 +0000
Manifest this update:     Fri 17 Apr 2026 15:04:14 +0000
Manifest next update:     Sat 18 Apr 2026 15:23:14 +0000
Files and hashes:         1: 90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl (hash: juc9/ya7k17RX46dDL8U2+A6lPh6jGUQyDpZuinUCsE=)
                          2: 3139302e392e3130322e302f32342d3234203d3e20323731373032.roa (hash: gH4USoQy+0z0sbKzJ3Cy2C4ViDRErL4KqZd1z8K3TF0=)
                          3: 3139302e392e3130332e302f32342d3234203d3e20323731373032.roa (hash: VEXmL2MN2C1bxpnm2mQsmOolGGmMrLo+WeuqLZlOJUc=)
                          4: 3139302e392e3130312e302f32342d3234203d3e20323731373032.roa (hash: jEi39w1I3v3gprvnJrrSxyQb8eMt9MHLeN62iWkVINM=)
                          5: 3139302e392e3130302e302f32322d3234203d3e20323731373032.roa (hash: gPM9/KzqqozODYpfCSz2YrzED7an8dBi7yKhQHHfy08=)
                          6: 3139302e392e3130302e302f32342d3234203d3e20323731373032.roa (hash: mvqwaGGdWBv5msg7jD6cAF+JAE2jOhDG06av1wJSl9w=)
                          7: 323830343a376661633a3a2f33322d3336203d3e20323731373032.roa (hash: 0x75APpldO5leanChwniAY/TRxZ3GQ59C1dECSsPZYA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl
                          rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2c:7f:66:91:c0:d9:50:54:6d:04:31:6d:a0:e7:f4:2b:e1:f6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
        Validity
            Not Before: Apr 17 15:04:14 2026 GMT
            Not After : Apr 18 15:23:14 2026 GMT
        Subject: CN=695028F484E192C6871E5DFA37D0848571C64B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:09:4f:7f:37:e3:39:bf:d6:9f:ad:86:99:
                    fa:75:36:a9:c3:83:11:ae:98:8b:13:54:f8:bc:77:
                    a1:06:2c:fe:4c:03:0d:b4:4b:b9:07:6b:b0:29:82:
                    9d:ed:cb:9c:59:a7:14:2d:9c:e7:6c:28:4a:d7:65:
                    b1:c6:28:d2:a3:e0:33:9e:d7:f3:a1:f2:6a:da:13:
                    c3:42:47:89:71:fb:a7:cf:b7:a7:6d:ea:00:53:49:
                    c9:3a:6d:fa:1c:8d:fa:62:06:dc:7f:94:a2:30:76:
                    20:aa:a3:7e:28:d8:39:e5:19:bf:52:0e:96:99:12:
                    c4:88:99:ed:f8:e3:b7:29:fa:e5:1f:a1:9b:d8:b6:
                    eb:b7:d8:f8:61:19:3e:74:f3:d6:24:1d:9d:1f:47:
                    85:ce:eb:4c:a6:21:a3:37:fe:05:c7:bf:10:09:dc:
                    6a:b2:92:d6:b1:30:51:d0:bb:ac:d1:18:ac:6e:8d:
                    90:d2:ea:4d:06:63:11:e4:85:ff:97:32:e6:16:f5:
                    86:44:50:0c:84:79:78:91:a9:8a:3b:ca:5f:d1:e9:
                    86:23:64:c2:9e:bc:29:49:0e:5b:57:51:31:d3:f9:
                    bb:3f:9e:75:07:eb:eb:be:c3:e5:89:ab:87:ed:e8:
                    d7:3c:58:75:97:d3:32:ec:6d:b9:a2:9d:99:e6:84:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:50:28:F4:84:E1:92:C6:87:1E:5D:FA:37:D0:84:85:71:C6:4B:13
            X509v3 Authority Key Identifier:
                keyid:90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:46:f5:63:7c:99:2c:c7:0d:c2:5e:29:97:f8:c1:b0:37:
         08:18:4d:40:0c:66:d5:92:84:31:a0:48:ab:d0:b4:9f:81:2e:
         38:dd:79:92:6f:d7:a7:19:c6:76:33:ac:dc:34:00:86:ac:4a:
         df:36:8c:db:03:39:54:c7:46:9f:6d:7d:03:ad:cb:73:f1:d5:
         11:a8:3b:3e:fc:30:e9:bc:37:1a:5c:ac:4a:0f:2e:a8:8e:13:
         0b:2c:18:ac:5a:f0:68:e0:e0:c9:ca:aa:64:98:4e:63:e8:31:
         c9:b3:0c:7a:32:f6:f6:08:7f:dc:89:c6:93:46:c0:5b:66:73:
         ff:6e:e5:4c:cd:94:3c:56:26:dc:f5:5e:e6:e8:f9:70:97:26:
         c5:8a:3a:5d:a9:29:22:0f:15:69:87:c2:c5:e1:48:33:39:96:
         81:2b:3b:13:ae:f9:45:04:14:c9:b5:38:8a:31:af:32:f3:bc:
         5a:d8:94:95:38:51:98:d8:67:aa:72:e3:32:25:fb:9f:b4:d0:
         c1:9b:c3:75:78:54:03:43:df:3d:78:f9:ec:44:69:e4:61:54:
         5f:ba:73:c1:a0:f3:85:5c:c9:3d:71:25:63:0c:53:a5:21:d1:
         28:05:0f:30:5a:e0:26:2b:34:dd:7c:a2:8d:10:34:8e:e8:83:
         e8:d8:c8:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfyx/ZpHA2VBUbQQxbaDn9Cvh9jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBGMjU2QTM5MENCMUIyNjA0QkM4MEJCREJBRTZFODI0
OUExQjlBNjAeFw0yNjA0MTcxNTA0MTRaFw0yNjA0MTgxNTIzMTRaMDMxMTAvBgNV
BAMTKDY5NTAyOEY0ODRFMTkyQzY4NzFFNURGQTM3RDA4NDg1NzFDNjRCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRLglPfzfjOb/Wn62Gmfp1NqnD
gxGumIsTVPi8d6EGLP5MAw20S7kHa7Apgp3ty5xZpxQtnOdsKErXZbHGKNKj4DOe
1/Oh8mraE8NCR4lx+6fPt6dt6gBTSck6bfocjfpiBtx/lKIwdiCqo34o2DnlGb9S
DpaZEsSIme3447cp+uUfoZvYtuu32PhhGT5089YkHZ0fR4XO60ymIaM3/gXHvxAJ
3GqyktaxMFHQu6zRGKxujZDS6k0GYxHkhf+XMuYW9YZEUAyEeXiRqYo7yl/R6YYj
ZMKevClJDltXUTHT+bs/nnUH6+u+w+WJq4ft6Nc8WHWX0zLsbbminZnmhC+LAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUaVAo9IThksaHHl36N9CEhXHGSxMwHwYDVR0j
BBgwFoAUkPJWo5DLGyYEvIC7265ugkmhuaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFiUTNuUW10aHdCUGFFUXF1N2tEMmg4NGYydlExWTZaYkIxZ3N5RHV2
SkUvMC85MEYyNTZBMzkwQ0IxQjI2MDRCQzgwQkJEQkFFNkU4MjQ5QTFCOUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwRjI1NkEzOTBDQjFCMjYw
NEJDODBCQkRCQUU2RTgyNDlBMUI5QTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGFiUTNuUW10aHdCUGFFUXF1N2tEMmg4NGYydlExWTZaYkIxZ3N5RHV2SkUvMC85
MEYyNTZBMzkwQ0IxQjI2MDRCQzgwQkJEQkFFNkU4MjQ5QTFCOUE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANFpG9WN8mSzHDcJeKZf4wbA3CBhNQAxm1ZKEMaBIq9C0n4EuON15km/XpxnG
djOs3DQAhqxK3zaM2wM5VMdGn219A63Lc/HVEag7Pvww6bw3GlysSg8uqI4TCywY
rFrwaODgycqqZJhOY+gxybMMejL29gh/3InGk0bAW2Zz/27lTM2UPFYm3PVe5uj5
cJcmxYo6XakpIg8VaYfCxeFIMzmWgSs7E675RQQUybU4ijGvMvO8WtiUlThRmNhn
qnLjMiX7n7TQwZvDdXhUA0PfPXj57ERp5GFUX7pzwaDzhVzJPXElYwxTpSHRKAUP
MFrgJis03XyijRA0juiD6NjIig==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:29:12 2026 by rpki-client