Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
File:                     2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft (raw, json)
Hash identifier:          rbNDZbaA1uZKSJAqDIY8hrE5s8y2Cw7Wd68+FkLGaXw=
Subject key identifier:   96:15:18:74:D0:B4:34:13:E1:63:96:03:0E:ED:BA:AC:28:F0:D1:0E
Authority key identifier: 2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21
Certificate issuer:       /CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
Certificate serial:       1B80267094BEE660EA42F5E5BB257003005F7D40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
Manifest number:          0226
Signing time:             Mon 20 Oct 2025 03:34:49 +0000
Manifest this update:     Mon 20 Oct 2025 03:29:49 +0000
Manifest next update:     Tue 21 Oct 2025 07:10:49 +0000
Files and hashes:         1: 3230312e372e3138382e302f32342d3234203d3e20333936393832.roa (hash: Tc8QLDQsgO1CP10+kASAa5YIOxZu509sOagjTspLmx8=)
                          2: 2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl (hash: SDjoflZqJUqTqaUaXn33VD4OTAki6b1QCG2EsDeoq6w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl
                          rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:80:26:70:94:be:e6:60:ea:42:f5:e5:bb:25:70:03:00:5f:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
        Validity
            Not Before: Oct 20 03:29:49 2025 GMT
            Not After : Oct 21 07:10:49 2025 GMT
        Subject: CN=96151874D0B43413E16396030EEDBAAC28F0D10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:32:f4:13:06:63:bc:10:b5:6e:47:59:11:
                    d2:63:f4:ef:8b:e0:8c:07:22:64:b4:12:8f:7e:ac:
                    f1:99:dc:ea:bc:cc:8e:ce:21:29:23:df:7b:be:05:
                    3d:60:09:be:b1:0b:f6:19:3c:a3:6e:42:59:e3:74:
                    43:e4:73:9d:85:15:ed:e5:00:d5:75:6b:b5:42:12:
                    e4:35:ec:63:f3:06:33:1b:30:bf:75:08:0b:41:24:
                    74:87:da:a4:36:ad:0e:f8:99:ca:4e:d3:2e:cb:35:
                    a4:d9:37:e7:41:6b:05:72:6a:c3:63:6e:df:18:25:
                    62:b2:ee:e6:af:bb:7d:72:44:17:37:a0:e7:77:70:
                    44:35:c3:d4:4d:25:0d:43:ed:bd:bf:93:34:61:69:
                    0a:50:f0:b0:f0:b5:67:5c:d0:a3:88:31:e3:40:77:
                    db:8d:03:01:a8:af:d5:df:49:83:05:f0:cd:a6:c7:
                    fd:e0:b8:b6:86:ac:60:6c:0d:8c:46:4e:ed:5b:34:
                    ce:ba:91:b2:66:19:c6:3e:16:49:ed:59:ad:97:8b:
                    3f:19:4b:f0:f2:82:03:6d:99:a1:f4:6a:4b:4a:5f:
                    31:66:ba:3f:dd:dd:a3:39:49:3f:a3:ad:e1:d4:0f:
                    1c:a7:c4:f1:d5:d7:e8:9f:4e:e4:45:ce:dd:15:a0:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:18:74:D0:B4:34:13:E1:63:96:03:0E:ED:BA:AC:28:F0:D1:0E
            X509v3 Authority Key Identifier:
                keyid:2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e3:c0:34:6a:28:51:c7:28:33:6e:82:4f:7c:d3:05:10:ef:
         b9:58:0c:24:f1:d3:a5:02:d3:92:42:c8:b9:2a:ce:3f:f6:bc:
         91:d5:20:f6:be:22:92:bf:7f:09:3b:5a:a2:8e:fe:cb:e2:59:
         bd:cd:26:04:d5:36:ec:9a:7e:43:1b:c1:f1:d9:e6:6a:e6:6a:
         7e:cb:5b:c5:54:67:9e:e5:df:69:62:c0:16:88:fe:34:4e:e8:
         b0:11:ed:bb:e7:fc:c5:3e:21:10:7c:1e:9e:39:63:d2:9a:03:
         75:b3:aa:e4:cc:a5:1f:a1:7f:1f:76:62:50:9a:20:8a:1b:58:
         b5:c9:79:6a:80:43:bb:e8:9e:91:46:55:21:a6:db:41:52:5f:
         e6:4f:ab:5a:15:ae:e5:73:73:c1:73:2c:81:4d:38:35:1e:ca:
         1e:98:74:37:57:b0:d9:f9:eb:7c:37:e7:00:9b:a3:59:25:3f:
         78:89:28:7a:14:b3:c5:e4:fb:84:80:36:56:19:8e:e9:40:c3:
         72:53:33:d2:77:4e:85:01:77:02:1f:2c:97:f8:eb:6b:9a:03:
         5a:86:4c:b5:98:a1:cd:4f:6d:45:5a:20:7f:fd:a7:8d:ec:74:
         74:bd:2a:77:20:17:78:1e:70:a9:3b:d3:78:8f:88:89:02:c0:
         5d:cf:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:35:29 2025 by rpki-client