Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
File:                     90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft (raw, json)
Hash identifier:          GTy5oI5JiW2qPoCAPubZ/mUP07Ir69LSHlZq85Lk7F4=
Subject key identifier:   4A:3C:DF:6D:5E:A9:1A:71:ED:3C:37:20:6B:4E:D8:4E:82:C6:BD:49
Authority key identifier: 90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6
Certificate issuer:       /CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
Certificate serial:       1595ABC330F82EE43E21515DB808679C12CB009D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
Manifest number:          C2
Signing time:             Fri 24 Jul 2026 11:44:20 +0000
Manifest this update:     Fri 24 Jul 2026 11:39:20 +0000
Manifest next update:     Sat 25 Jul 2026 13:26:20 +0000
Files and hashes:         1: 90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl (hash: O0dR1t3wYvQ4+OwiqF/CjytloXVCwQSxNrL7mvWaChs=)
                          2: 3139302e392e3130322e302f32342d3234203d3e20323731373032.roa (hash: gH4USoQy+0z0sbKzJ3Cy2C4ViDRErL4KqZd1z8K3TF0=)
                          3: 3139302e392e3130312e302f32342d3234203d3e20323731373032.roa (hash: jEi39w1I3v3gprvnJrrSxyQb8eMt9MHLeN62iWkVINM=)
                          4: 3139302e392e3130302e302f32322d3234203d3e20323731373032.roa (hash: gPM9/KzqqozODYpfCSz2YrzED7an8dBi7yKhQHHfy08=)
                          5: 3139302e392e3130302e302f32342d3234203d3e20323731373032.roa (hash: mvqwaGGdWBv5msg7jD6cAF+JAE2jOhDG06av1wJSl9w=)
                          6: 323830343a376661633a3a2f33322d3336203d3e20323731373032.roa (hash: 0x75APpldO5leanChwniAY/TRxZ3GQ59C1dECSsPZYA=)
                          7: 3139302e392e3130332e302f32342d3234203d3e20323731373032.roa (hash: VEXmL2MN2C1bxpnm2mQsmOolGGmMrLo+WeuqLZlOJUc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl
                          rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:95:ab:c3:30:f8:2e:e4:3e:21:51:5d:b8:08:67:9c:12:cb:00:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
        Validity
            Not Before: Jul 24 11:39:20 2026 GMT
            Not After : Jul 25 13:26:20 2026 GMT
        Subject: CN=4A3CDF6D5EA91A71ED3C37206B4ED84E82C6BD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:7c:0d:74:37:72:54:ea:0f:27:cd:cb:ad:
                    a0:3b:45:69:21:b7:d4:df:0e:87:06:8a:37:0a:a7:
                    4d:a5:83:62:5c:e1:d3:86:19:f6:e5:8c:32:b1:2a:
                    4d:08:d5:be:d8:87:17:42:c6:aa:48:98:03:99:d6:
                    6c:a8:ba:0d:b2:62:06:d6:af:cf:1b:b8:51:f7:b4:
                    8d:d8:ef:87:4b:df:a7:9a:6e:db:c9:d3:af:17:b2:
                    e5:41:d6:f8:70:b9:60:cb:8d:65:74:26:45:72:7a:
                    75:84:1a:87:a7:fc:91:c4:be:63:38:b7:cd:75:4b:
                    18:49:da:ce:86:56:b3:76:4d:dc:58:1d:06:a0:f6:
                    e7:8f:00:f7:67:7c:b4:af:a8:8c:55:e5:64:1f:bd:
                    75:0e:5f:3c:51:ce:91:24:c0:a8:12:78:6d:01:d8:
                    cc:4b:94:b6:a2:a1:34:3f:7c:fa:be:48:2b:ba:f4:
                    53:a8:57:51:61:6e:4f:b3:24:22:60:99:0e:64:5e:
                    93:52:89:72:f9:eb:d9:3f:4e:dd:3c:d3:86:85:dc:
                    65:2a:52:85:56:a0:72:c9:b2:dc:de:19:57:44:1f:
                    7a:36:f1:fb:10:d7:a7:c0:22:7b:1e:9f:5b:3e:87:
                    82:58:c6:e1:6f:d6:85:3c:e3:c0:95:a9:6a:8f:57:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:DF:6D:5E:A9:1A:71:ED:3C:37:20:6B:4E:D8:4E:82:C6:BD:49
            X509v3 Authority Key Identifier:
                keyid:90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:40:2d:dc:b1:2e:4a:ab:dc:d4:8f:2b:17:cc:af:7c:14:
         3b:c4:88:62:7c:e2:8b:2d:5b:09:8e:84:01:86:01:4a:18:76:
         ea:0f:3d:1e:d0:6d:ab:6a:49:87:3a:e1:91:2b:18:99:b1:e6:
         1f:d7:e7:1c:03:a7:02:6f:6a:f1:f7:02:f9:1e:9a:21:d1:a5:
         1d:c9:ff:3b:99:aa:ef:eb:02:1c:4a:3a:7d:12:b4:33:25:d7:
         73:5e:81:12:d1:b1:93:98:8a:2d:9b:31:d1:5d:91:61:46:80:
         84:1b:0c:0e:86:e6:c4:29:25:34:c6:91:9f:a6:9d:ae:03:d1:
         08:8e:e6:12:81:7c:bd:a4:9a:99:2a:52:76:13:1e:2f:5f:b3:
         64:4f:21:d0:3e:01:16:ea:ed:13:eb:cb:b5:5a:c5:e5:8c:61:
         73:0b:15:a2:ec:33:af:1d:36:3e:fb:31:d6:36:10:35:9a:b5:
         96:d3:b8:73:48:92:ba:b7:0a:9d:5c:48:69:dd:34:89:51:db:
         a4:89:7b:e4:a8:4f:5c:18:97:2d:6b:78:ae:72:53:f1:98:2b:
         a1:52:f8:34:97:11:c6:8c:c0:9d:6b:9a:3a:16:15:a1:6b:eb:
         d9:94:6b:b2:91:bb:ad:72:10:fc:07:94:23:3e:40:42:5b:27:
         64:e6:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:50:35 2026 by rpki-client