Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
File:                     91A9CE422C010D9E7886B57603291103F2C9DB57.mft (raw, json)
Hash identifier:          rRYya9YhnIbCaqozSKxoPQzliniptLfQJmGSGfFTqrg=
Subject key identifier:   11:C7:A5:08:45:73:C1:0C:9E:8C:2C:6F:EA:E5:0E:3D:A6:FA:12:CA
Authority key identifier: 91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57
Certificate issuer:       /CN=91A9CE422C010D9E7886B57603291103F2C9DB57
Certificate serial:       7785EF75A1016B7B9B607CA0447F24B8877E7516
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
Manifest number:          D9
Signing time:             Wed 05 Nov 2025 20:54:13 +0000
Manifest this update:     Wed 05 Nov 2025 20:49:13 +0000
Manifest next update:     Thu 06 Nov 2025 22:10:13 +0000
Files and hashes:         1: 323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (hash: 2XPfQPAiuhi39VUU42ChmZ3ZMunOKIzsepamcsvpKEM=)
                          2: 91A9CE422C010D9E7886B57603291103F2C9DB57.crl (hash: s3+ugc8OIv0BoE6JOSamIFK1y/cjJ8k+n6tSePiwDuI=)
                          3: 3230312e3232312e3131362e302f32322d3234203d3e20323731323934.roa (hash: /0PxdDvkAoM1jNWfhg3qAj8lZ4LVMSrrIq9x0bWWwLk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.crl
                          rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 22:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:85:ef:75:a1:01:6b:7b:9b:60:7c:a0:44:7f:24:b8:87:7e:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A9CE422C010D9E7886B57603291103F2C9DB57
        Validity
            Not Before: Nov  5 20:49:13 2025 GMT
            Not After : Nov  6 22:10:13 2025 GMT
        Subject: CN=11C7A5084573C10C9E8C2C6FEAE50E3DA6FA12CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:fa:5e:9e:db:5a:86:47:bf:5e:02:fa:d6:
                    78:81:ce:54:9e:8e:fa:32:af:86:96:eb:b9:19:a7:
                    ab:0e:e0:b6:62:3e:7b:bf:d1:c4:ea:1a:d4:44:2d:
                    c8:31:5f:b3:25:a5:f3:2b:a1:1a:37:3a:81:6c:45:
                    25:78:65:d3:c7:65:a6:c5:37:5a:b4:04:88:31:68:
                    d8:e6:fb:8c:8f:13:0c:9e:a1:44:3c:45:ba:c3:bf:
                    a4:93:21:34:a0:85:d4:39:c4:95:1d:12:ba:25:cd:
                    fa:53:93:ca:6c:19:cf:77:67:91:af:24:b5:75:35:
                    3e:94:ec:46:87:59:c3:32:91:8e:6e:eb:2d:e9:77:
                    a1:44:7c:2a:9e:a7:c2:96:8d:dc:be:e6:9f:bf:7c:
                    b0:e7:80:5f:ba:27:63:48:bb:b2:e2:11:b5:4c:9f:
                    c5:78:e1:6b:3c:52:3a:a6:ba:31:47:29:6f:ff:8f:
                    90:b6:a0:2e:c4:42:ce:bb:15:1b:9c:5c:b8:83:d1:
                    84:0d:0a:fa:1f:27:f5:2d:22:ea:5e:09:d5:43:06:
                    c4:de:cf:36:a6:ee:18:c3:ef:45:a3:af:c4:e1:d3:
                    10:87:f0:42:df:e4:4a:79:a7:27:4d:d7:3a:f3:60:
                    41:21:f3:d3:d0:cd:a6:cb:71:ba:0a:96:55:31:37:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C7:A5:08:45:73:C1:0C:9E:8C:2C:6F:EA:E5:0E:3D:A6:FA:12:CA
            X509v3 Authority Key Identifier:
                keyid:91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:8c:6f:ce:7b:24:71:e0:8f:a0:47:51:50:87:f8:a6:4f:
         fe:db:5f:62:ff:e4:54:92:a8:e1:fa:4e:50:aa:d0:d7:83:89:
         c8:e4:0c:a9:14:f8:72:ae:b3:75:97:c6:89:a8:3c:97:2f:88:
         9f:fe:30:ad:4f:40:c6:40:de:46:84:c7:18:1b:bd:27:2a:1a:
         b1:b0:e9:14:07:34:ce:6c:70:9b:5f:74:28:e0:db:87:bf:23:
         e7:96:df:a3:b4:f2:bb:f5:20:4b:c1:5e:7c:46:22:48:4a:40:
         5b:2c:4e:7d:11:5c:3a:4e:b0:3d:8b:3b:e4:26:53:35:8d:32:
         d1:b4:31:a5:af:8e:9c:47:da:a3:b2:3a:aa:10:e9:da:7d:d1:
         fc:fa:90:fc:be:99:ad:a9:b4:32:87:12:0f:d2:fe:c5:4f:5b:
         01:a4:d0:c7:e4:1e:68:8c:b8:74:62:c5:ef:2b:5d:15:65:63:
         cc:ad:27:ae:2c:36:10:c4:ff:c1:0e:e7:0c:1e:75:0a:0d:fe:
         7f:b2:29:95:f7:3b:94:9a:47:ab:3e:06:63:11:2e:5e:bf:23:
         64:d6:5c:1c:32:96:e1:0f:54:f1:53:f3:35:c4:05:d8:ed:eb:
         e2:9c:5f:a9:8d:49:fe:11:5c:89:5f:b4:ec:e9:81:74:28:5a:
         bc:d0:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:45:17 2025 by rpki-client