Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.mft
File:                     90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.mft (raw, json)
Hash identifier:          qXUhgtE3TTunysEDa5phNuQ78/+sc6P+ytKmwcqOlCw=
Subject key identifier:   94:9D:E0:62:2E:95:71:93:AB:3E:FD:7B:0E:D8:40:D4:13:DD:6E:2E
Authority key identifier: 90:AD:CD:FA:22:EA:68:F9:ED:A4:D7:44:4C:E4:2F:83:B5:84:9F:CF
Certificate issuer:       /CN=90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF
Certificate serial:       40FCEA73AC8441A551570C7F09520FD93F63984E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.mft
Manifest number:          3A
Signing time:             Mon 03 Nov 2025 05:00:51 +0000
Manifest this update:     Mon 03 Nov 2025 04:55:51 +0000
Manifest next update:     Tue 04 Nov 2025 07:34:51 +0000
Files and hashes:         1: 323830343a383332343a3a2f33322d313238203d3e20323732313739.roa (hash: 2fRTh7oeneD9+0Oa1JrfKwkGFuxup9YWl8QrbFP+nmM=)
                          2: 90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.crl (hash: yUGEo/ddfzO55ezSAGBTLfgrQc0UJlPyRPKsh5wvUBE=)
                          3: 34352e3138322e36332e302f32342d3332203d3e20323639323230.roa (hash: VRRNO3wSlhhADTFt3hMirNvbwbDqtAQxOXIt6iLQgbg=)
                          4: 34352e3138322e36332e302f32342d3332203d3e20323732313739.roa (hash: T6iuvQH2h4FhpA/xSWnpvbL6uNyymMytiDgZV2OTgCI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.crl
                          rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 07:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fc:ea:73:ac:84:41:a5:51:57:0c:7f:09:52:0f:d9:3f:63:98:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF
        Validity
            Not Before: Nov  3 04:55:51 2025 GMT
            Not After : Nov  4 07:34:51 2025 GMT
        Subject: CN=949DE0622E957193AB3EFD7B0ED840D413DD6E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:7b:00:22:f8:41:27:7e:9f:20:46:7b:48:
                    ff:69:74:53:b5:33:03:62:46:9e:d5:dc:69:05:c0:
                    c1:9a:8c:1e:b2:69:2f:5a:7e:43:36:3a:ac:ca:b1:
                    2c:21:6a:f1:8f:4e:c5:0d:16:6a:17:f0:99:a9:7f:
                    14:38:60:68:f8:b8:cb:af:0b:91:61:83:2a:e5:93:
                    44:fe:03:f9:fd:c6:32:2b:fb:bd:5c:2c:77:9c:58:
                    10:73:ec:8d:a3:08:b9:9f:69:47:6a:bb:11:1a:9d:
                    c8:cd:82:44:ca:f7:ea:aa:1c:ca:f0:be:d8:32:cd:
                    e2:8f:94:6b:85:9a:12:cb:d8:22:25:b9:f4:d2:25:
                    54:7b:87:50:66:d2:21:97:27:33:c0:f4:12:91:31:
                    99:43:1b:1d:bd:62:0e:74:16:48:d7:74:54:55:78:
                    be:0b:95:ad:05:ab:a3:89:96:6f:a4:cf:7d:13:a5:
                    77:b3:45:3f:c4:9b:ba:99:fc:0f:09:ed:16:90:02:
                    ca:6c:8b:0b:c5:e0:a7:3e:55:6c:9f:3b:8e:a3:69:
                    92:a0:60:d3:23:fb:83:ed:17:e9:ca:98:16:ab:d3:
                    62:f5:5b:0f:fd:1f:03:c8:fc:66:c6:bd:48:6e:65:
                    57:41:2b:a5:b7:fd:46:90:31:8c:fe:a4:0e:fa:46:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:E0:62:2E:95:71:93:AB:3E:FD:7B:0E:D8:40:D4:13:DD:6E:2E
            X509v3 Authority Key Identifier:
                keyid:90:AD:CD:FA:22:EA:68:F9:ED:A4:D7:44:4C:E4:2F:83:B5:84:9F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:1b:9f:6f:4b:b7:cd:83:7b:0b:5b:26:f3:7b:b4:a5:5f:
         4e:fa:8f:7a:db:49:7f:a9:22:ef:dd:ef:81:36:f1:fd:d0:19:
         92:29:80:c7:f8:11:bf:20:71:a2:13:01:10:6e:d8:bd:4a:de:
         09:93:ae:34:6e:56:15:8b:96:e0:8c:ee:63:c4:a9:b7:a9:e0:
         22:1c:12:4e:5e:9c:5f:d0:0f:4a:0b:b1:c3:c5:74:96:1b:fd:
         ea:43:d7:fe:6b:6e:5b:ba:59:1b:c1:29:ce:5c:ee:f8:35:74:
         79:a4:d7:f2:6e:80:3f:05:24:15:16:51:0a:72:81:f1:f9:42:
         ea:48:94:6a:df:9b:25:8c:65:92:ae:06:3b:24:02:b7:f5:d8:
         79:72:c5:29:b5:c6:b0:a8:51:76:00:1b:3c:bb:eb:eb:88:e6:
         37:c4:f5:9e:f7:c7:d6:d6:3f:dc:2c:2c:3d:00:25:fe:71:30:
         34:f9:b0:9f:fa:8d:10:32:18:6c:ba:24:0e:e6:4a:bd:2c:6a:
         42:21:ab:03:6e:ca:f8:82:30:68:ba:1d:cf:d7:50:9f:6b:48:
         28:09:75:71:a4:67:3a:0d:7c:12:5d:18:2a:c7:c0:92:a7:30:
         4a:a9:27:ea:62:a8:82:7b:7d:52:9e:45:44:a4:d5:00:fa:71:
         5a:7d:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:15:40 2025 by rpki-client