Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
File:                     90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft (raw, json)
Hash identifier:          CxPyyQIdKA0YPR3/kipGU2CzSp6/JO9H7SJHqiX7xb4=
Subject key identifier:   6F:72:AC:7E:08:DE:E9:FE:36:8D:19:55:0A:E2:E6:75:41:30:2F:13
Authority key identifier: 90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6
Certificate issuer:       /CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
Certificate serial:       75B443619D1AE20BA580EB13C7414F43662D7CA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
Manifest number:          21
Signing time:             Wed 25 Mar 2026 11:52:35 +0000
Manifest this update:     Wed 25 Mar 2026 11:47:35 +0000
Manifest next update:     Thu 26 Mar 2026 14:31:35 +0000
Files and hashes:         1: 90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl (hash: HM/kr+CYsOQkB6AFFS4SFRoDLzxRMyVFTKb2UjKZVns=)
                          2: 3139302e392e3130312e302f32342d3234203d3e20323731373032.roa (hash: jEi39w1I3v3gprvnJrrSxyQb8eMt9MHLeN62iWkVINM=)
                          3: 3139302e392e3130332e302f32342d3234203d3e20323731373032.roa (hash: VEXmL2MN2C1bxpnm2mQsmOolGGmMrLo+WeuqLZlOJUc=)
                          4: 3139302e392e3130322e302f32342d3234203d3e20323731373032.roa (hash: gH4USoQy+0z0sbKzJ3Cy2C4ViDRErL4KqZd1z8K3TF0=)
                          5: 3139302e392e3130302e302f32342d3234203d3e20323731373032.roa (hash: mvqwaGGdWBv5msg7jD6cAF+JAE2jOhDG06av1wJSl9w=)
                          6: 3139302e392e3130302e302f32322d3234203d3e20323731373032.roa (hash: gPM9/KzqqozODYpfCSz2YrzED7an8dBi7yKhQHHfy08=)
                          7: 323830343a376661633a3a2f33322d3336203d3e20323731373032.roa (hash: 0x75APpldO5leanChwniAY/TRxZ3GQ59C1dECSsPZYA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl
                          rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 14:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:43:61:9d:1a:e2:0b:a5:80:eb:13:c7:41:4f:43:66:2d:7c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
        Validity
            Not Before: Mar 25 11:47:35 2026 GMT
            Not After : Mar 26 14:31:35 2026 GMT
        Subject: CN=6F72AC7E08DEE9FE368D19550AE2E67541302F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:b9:0f:42:2c:47:92:7b:97:07:2c:dd:88:
                    b7:6c:66:42:8f:94:25:e3:09:19:f4:40:72:56:e9:
                    93:98:0c:3c:6b:51:95:08:d1:3b:22:14:d3:22:7f:
                    1a:df:2c:4a:2b:88:cd:14:94:64:5c:c0:07:b9:b7:
                    48:78:3b:af:8b:bb:40:60:36:c5:f5:d4:52:8b:06:
                    d3:30:22:1e:48:a7:70:cb:a4:28:ad:d9:ac:2f:ca:
                    89:c7:b6:38:00:42:f9:51:d8:e2:39:cb:ff:c1:ff:
                    7a:49:42:46:17:e7:af:63:ab:f6:d6:37:78:95:20:
                    8d:e9:14:29:0e:71:6b:33:fa:4b:d8:70:dd:ff:fb:
                    0c:13:97:a6:10:cf:71:5b:5a:f2:d2:03:82:52:bb:
                    86:e0:4e:74:f0:e3:e0:af:cd:73:3b:b1:8c:01:33:
                    29:8e:b4:fd:70:ca:23:ea:eb:c9:3b:75:f7:44:ee:
                    e5:90:cf:43:b6:0b:67:d6:bc:c4:72:85:a2:be:8a:
                    39:99:c7:a9:cc:38:07:d0:57:a2:70:18:f4:39:36:
                    50:a3:c5:48:75:1a:19:99:3f:da:e8:5c:3f:b0:e3:
                    29:fe:93:34:b3:4b:93:53:15:88:ba:18:f5:ef:97:
                    3a:10:71:3b:e7:76:41:2d:c6:0f:03:6a:95:43:8a:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:AC:7E:08:DE:E9:FE:36:8D:19:55:0A:E2:E6:75:41:30:2F:13
            X509v3 Authority Key Identifier:
                keyid:90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:14:da:cb:44:cb:54:2a:24:23:92:74:4f:3a:35:dc:4b:e4:
         8c:f4:e4:05:47:28:c5:48:3f:5f:7b:cf:54:15:f9:d8:3f:d4:
         aa:55:10:93:7d:7e:98:b0:38:c6:55:8c:cc:fc:70:fd:a9:b2:
         d2:5c:1b:85:3e:82:82:96:b0:c3:02:13:2f:4b:4b:fc:d3:4e:
         23:ef:bd:86:7a:26:2e:7b:41:47:0b:1c:a5:db:c7:d4:64:e7:
         79:05:22:b6:0c:7f:4a:74:03:79:35:4c:e2:11:bf:7c:24:66:
         20:f0:2a:16:0d:9b:71:16:a9:e9:d3:24:00:d3:5d:80:14:72:
         fc:b9:cb:cd:ee:31:fc:d0:4f:d7:d4:5f:4f:19:87:98:ac:73:
         d7:6d:e9:75:79:43:7b:c1:63:03:96:00:2a:95:83:d4:a4:87:
         e1:87:10:6a:82:1b:c5:00:a9:88:5e:39:98:99:4a:ea:32:05:
         d9:52:ea:a1:77:26:80:07:64:bc:8a:6e:ef:b4:83:58:b5:b1:
         d9:54:67:11:89:e7:9f:6b:99:ff:07:b9:66:7f:83:16:5f:33:
         dc:34:03:02:99:8d:1c:62:78:de:e3:78:aa:49:cc:0f:d8:26:
         1e:16:70:6c:1e:b7:88:57:d6:99:50:8a:30:a2:43:e7:58:cc:
         0d:0a:4a:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdbRDYZ0a4gulgOsTx0FPQ2YtfKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBGMjU2QTM5MENCMUIyNjA0QkM4MEJCREJBRTZFODI0
OUExQjlBNjAeFw0yNjAzMjUxMTQ3MzVaFw0yNjAzMjYxNDMxMzVaMDMxMTAvBgNV
BAMTKDZGNzJBQzdFMDhERUU5RkUzNjhEMTk1NTBBRTJFNjc1NDEzMDJGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJerkPQixHknuXByzdiLdsZkKP
lCXjCRn0QHJW6ZOYDDxrUZUI0TsiFNMifxrfLEoriM0UlGRcwAe5t0h4O6+Lu0Bg
NsX11FKLBtMwIh5Ip3DLpCit2awvyonHtjgAQvlR2OI5y//B/3pJQkYX569jq/bW
N3iVII3pFCkOcWsz+kvYcN3/+wwTl6YQz3FbWvLSA4JSu4bgTnTw4+CvzXM7sYwB
MymOtP1wyiPq68k7dfdE7uWQz0O2C2fWvMRyhaK+ijmZx6nMOAfQV6JwGPQ5NlCj
xUh1GhmZP9roXD+w4yn+kzSzS5NTFYi6GPXvlzoQcTvndkEtxg8DapVDioAFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUb3Ksfgje6f42jRlVCuLmdUEwLxMwHwYDVR0j
BBgwFoAUkPJWo5DLGyYEvIC7265ugkmhuaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFiUTNuUW10aHdCUGFFUXF1N2tEMmg4NGYydlExWTZaYkIxZ3N5RHV2
SkUvMC85MEYyNTZBMzkwQ0IxQjI2MDRCQzgwQkJEQkFFNkU4MjQ5QTFCOUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwRjI1NkEzOTBDQjFCMjYw
NEJDODBCQkRCQUU2RTgyNDlBMUI5QTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGFiUTNuUW10aHdCUGFFUXF1N2tEMmg4NGYydlExWTZaYkIxZ3N5RHV2SkUvMC85
MEYyNTZBMzkwQ0IxQjI2MDRCQzgwQkJEQkFFNkU4MjQ5QTFCOUE2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeRTay0TLVCokI5J0Tzo13EvkjPTkBUcoxUg/X3vPVBX52D/UqlUQk31+mLA4
xlWMzPxw/amy0lwbhT6CgpawwwITL0tL/NNOI++9hnomLntBRwscpdvH1GTneQUi
tgx/SnQDeTVM4hG/fCRmIPAqFg2bcRap6dMkANNdgBRy/LnLze4x/NBP19RfTxmH
mKxz123pdXlDe8FjA5YAKpWD1KSH4YcQaoIbxQCpiF45mJlK6jIF2VLqoXcmgAdk
vIpu77SDWLWx2VRnEYnnn2uZ/we5Zn+DFl8z3DQDApmNHGJ43uN4qknMD9gmHhZw
bB63iFfWmVCKMKJD51jMDQpKNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:17:42 2026 by rpki-client