Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AjsLrwYK7g9GnmEPMLpAyDgKgFdUNQGiFJsQMk43VUTN/0/9E90A7B547360DC22A418162A0F5882E45DAD9BA.mft
File:                     9E90A7B547360DC22A418162A0F5882E45DAD9BA.mft (raw, json)
Hash identifier:          ln+NjOlobfKiSo3Do325pb7Xuz55ZBDuxCZXfvFbioc=
Subject key identifier:   B1:07:B8:C4:EC:44:F9:42:AB:84:39:7F:46:58:C9:49:A9:40:CD:9D
Authority key identifier: 9E:90:A7:B5:47:36:0D:C2:2A:41:81:62:A0:F5:88:2E:45:DA:D9:BA
Certificate issuer:       /CN=9E90A7B547360DC22A418162A0F5882E45DAD9BA
Certificate serial:       1C2CE5B8CF9D08E5DFA59302A08C08CD96700E63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E90A7B547360DC22A418162A0F5882E45DAD9BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjsLrwYK7g9GnmEPMLpAyDgKgFdUNQGiFJsQMk43VUTN/0/9E90A7B547360DC22A418162A0F5882E45DAD9BA.mft
Manifest number:          A5
Signing time:             Mon 20 Oct 2025 01:23:13 +0000
Manifest this update:     Mon 20 Oct 2025 01:18:13 +0000
Manifest next update:     Tue 21 Oct 2025 01:24:13 +0000
Files and hashes:         1: 34352e3138382e39362e302f32322d3332203d3e20323639353135.roa (hash: 7JS8LKNy3Bwsm98Jdaw/DpnFXzeSvBnP3LiNl+ZcyWw=)
                          2: 9E90A7B547360DC22A418162A0F5882E45DAD9BA.crl (hash: Jh4dS8RGUACcJxIXIjR+WdMOkBao7/aXaUS6u3RkGVA=)
                          3: 323830343a363563633a3a2f33322d313238203d3e20323639353135.roa (hash: PL9NJ4GnCarGDNY4XV4dvygU0RVGMx76U8TfdZ9+QyA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjsLrwYK7g9GnmEPMLpAyDgKgFdUNQGiFJsQMk43VUTN/0/9E90A7B547360DC22A418162A0F5882E45DAD9BA.crl
                          rsync://rpki-repo.registro.br/repo/AjsLrwYK7g9GnmEPMLpAyDgKgFdUNQGiFJsQMk43VUTN/0/9E90A7B547360DC22A418162A0F5882E45DAD9BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E90A7B547360DC22A418162A0F5882E45DAD9BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2c:e5:b8:cf:9d:08:e5:df:a5:93:02:a0:8c:08:cd:96:70:0e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E90A7B547360DC22A418162A0F5882E45DAD9BA
        Validity
            Not Before: Oct 20 01:18:13 2025 GMT
            Not After : Oct 21 01:24:13 2025 GMT
        Subject: CN=B107B8C4EC44F942AB84397F4658C949A940CD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:c9:3c:e2:90:fe:7b:4f:ff:55:9b:11:11:
                    44:26:66:95:45:c1:bd:49:42:a9:f9:b1:54:4d:98:
                    ef:19:d0:41:59:dc:9f:9d:b6:ec:39:c9:bc:af:15:
                    3b:e0:7e:85:93:95:ce:57:9a:0d:c7:1d:99:aa:14:
                    8a:fe:d7:ac:b1:6b:9c:80:5a:bc:82:90:1a:6f:b6:
                    fd:8e:f9:1e:3b:f7:db:ff:4f:6f:8b:c2:ba:92:50:
                    4b:ef:e7:0f:6a:83:b6:2c:38:70:2f:9e:b2:0a:2f:
                    ef:fc:3d:73:7d:96:d3:13:f1:c0:d8:c7:cd:f6:7b:
                    ac:14:dc:18:9b:c2:f3:80:6f:d4:49:79:b4:e0:a2:
                    dd:91:34:25:04:f2:bc:3b:eb:6e:d4:c7:0b:b6:fb:
                    b0:53:83:76:48:92:fa:86:3a:61:a7:7d:74:77:bb:
                    84:bb:d9:53:8b:73:6b:6d:21:50:d8:39:16:7b:d5:
                    80:d3:3b:0a:e4:da:b7:1a:b9:22:75:46:ae:50:c4:
                    3c:8b:8c:69:ac:27:da:30:4c:1d:a9:d8:64:71:31:
                    c8:df:59:7f:c7:8d:ef:cf:3c:42:bd:28:e4:18:37:
                    16:13:4e:21:e0:6d:58:dc:38:05:c1:7c:23:a6:1f:
                    91:d4:7f:2d:7f:66:b3:da:6a:e5:37:8e:a5:23:73:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:07:B8:C4:EC:44:F9:42:AB:84:39:7F:46:58:C9:49:A9:40:CD:9D
            X509v3 Authority Key Identifier:
                keyid:9E:90:A7:B5:47:36:0D:C2:2A:41:81:62:A0:F5:88:2E:45:DA:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjsLrwYK7g9GnmEPMLpAyDgKgFdUNQGiFJsQMk43VUTN/0/9E90A7B547360DC22A418162A0F5882E45DAD9BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E90A7B547360DC22A418162A0F5882E45DAD9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjsLrwYK7g9GnmEPMLpAyDgKgFdUNQGiFJsQMk43VUTN/0/9E90A7B547360DC22A418162A0F5882E45DAD9BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:d0:85:cc:20:e7:07:40:56:66:d8:6e:c9:e4:04:4d:1e:
         a8:34:19:ee:a6:35:fd:8e:46:32:50:0e:ff:d5:1f:4c:04:53:
         57:07:5e:18:f2:de:ae:f6:87:24:12:f0:a5:b2:23:9e:64:f6:
         7a:78:5d:ab:e7:59:b5:24:c8:24:ba:26:17:7d:66:60:69:e9:
         a4:fa:0b:5c:28:1f:4a:cc:75:fc:c7:f1:a3:00:d7:d5:cd:be:
         a3:b3:5f:22:8a:64:33:73:02:19:92:77:c3:c0:bd:1f:e8:cf:
         ac:88:05:98:10:df:bd:aa:e2:9c:91:df:cc:b6:c5:c6:f8:8f:
         cd:8b:f8:40:4d:ab:48:bd:d2:6d:8b:1c:f2:1d:60:fd:fb:b5:
         db:76:6f:66:1e:1a:ee:fa:0d:5a:60:df:b6:09:54:e6:b5:09:
         3d:b8:9b:b5:83:27:92:1c:8e:3e:a0:39:7d:87:87:15:a0:83:
         43:0e:01:18:1b:71:c0:fe:1f:18:5a:6f:bc:fc:5b:56:81:fa:
         eb:3a:3c:26:65:2e:8f:1c:8a:e8:3c:c7:5a:28:ec:b4:71:e2:
         50:40:2c:43:f3:f1:b7:ee:d4:3c:11:7b:3d:68:70:21:56:7a:
         50:ba:b4:b6:96:c2:78:16:f9:49:56:ac:dd:e6:db:7d:61:1f:
         90:09:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:41:44 2025 by rpki-client