Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
File:                     23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json)
Hash identifier:          6wB34rIGnJmRaglGI1/9qXQeROH/IU2k4n+X4Z6I7aY=
Subject key identifier:   A1:6B:4E:EC:94:1A:BD:9A:D3:9E:54:26:74:13:E2:97:D9:06:55:16
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Certificate issuer:       /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial:       43B9E437E86B39D2705C8504DBC7855D64A8294E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
Manifest number:          028B
Signing time:             Mon 20 Oct 2025 02:51:57 +0000
Manifest this update:     Mon 20 Oct 2025 02:46:57 +0000
Manifest next update:     Tue 21 Oct 2025 06:28:57 +0000
Files and hashes:         1: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=)
                          2: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=)
                          3: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: WOjMhHVnM2MSeOLntDDYiUIrNEDexWZFFxN2FtNn9FA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
                          rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b9:e4:37:e8:6b:39:d2:70:5c:85:04:db:c7:85:5d:64:a8:29:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Validity
            Not Before: Oct 20 02:46:57 2025 GMT
            Not After : Oct 21 06:28:57 2025 GMT
        Subject: CN=A16B4EEC941ABD9AD39E54267413E297D9065516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:6e:4e:e3:18:8d:e9:be:e3:c3:8d:af:ed:
                    92:f5:3d:af:47:67:02:01:32:be:b5:11:39:77:3b:
                    98:8b:fa:01:23:7a:6a:59:36:8d:73:09:ed:9d:15:
                    c2:b5:08:fb:80:f5:1a:35:24:2c:3d:39:84:ec:e7:
                    bc:c6:6b:61:1e:6e:32:2e:4e:99:33:39:0d:17:c1:
                    e5:69:1b:0c:b8:6a:9c:bf:ea:cc:7d:59:75:3b:4a:
                    03:45:5e:c2:22:c3:3c:c2:d1:42:1a:9a:d2:4d:e9:
                    76:e6:5b:25:25:46:a6:a8:72:d2:9c:48:9f:2e:c7:
                    3a:7c:5a:d1:95:1b:a8:da:9d:35:4d:72:83:2e:04:
                    ac:40:05:f3:d2:5a:7f:1a:aa:b3:4e:69:1f:bf:f1:
                    9a:c2:0f:29:51:83:9f:c4:3b:f7:49:0b:a4:c6:5a:
                    c6:a9:a2:ab:1a:be:5a:7b:07:81:1f:30:60:ea:53:
                    eb:87:05:92:62:de:6c:ef:4f:ca:95:52:69:22:5a:
                    f0:5b:ae:c3:59:45:89:e7:ea:4e:80:22:b9:10:df:
                    69:cd:f1:13:da:27:04:15:4c:e0:27:55:5e:0c:92:
                    e2:a7:c7:3f:61:e9:0c:6e:bb:32:f0:5e:37:b0:4e:
                    be:e5:c1:7e:2b:da:5a:77:9d:bf:35:73:bc:2b:b8:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6B:4E:EC:94:1A:BD:9A:D3:9E:54:26:74:13:E2:97:D9:06:55:16
            X509v3 Authority Key Identifier:
                keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:5a:73:ad:34:98:01:fa:b1:aa:ee:d3:54:5a:7b:f0:c8:
         f8:c5:ec:92:9d:c2:bf:fe:b6:90:9f:26:05:b2:6f:af:a5:19:
         b9:7f:9b:74:5a:b6:c5:41:a0:a2:07:18:e1:56:58:68:af:18:
         58:16:13:e9:66:01:40:5d:49:05:70:83:d6:5b:96:ad:b8:68:
         c0:38:14:d2:59:d0:73:c0:ab:c8:bf:7c:34:bc:1e:49:53:6e:
         e7:77:f0:4d:25:69:99:45:c0:78:c0:50:72:d8:e4:18:5c:f4:
         6d:6d:28:61:52:27:dd:06:c5:d3:8b:9e:7e:a9:b9:b3:0a:af:
         d5:38:05:a5:46:c9:a5:ac:33:55:f7:75:4f:21:57:67:50:66:
         40:34:c8:15:b5:8a:29:7e:41:26:d9:eb:fd:55:49:c3:73:70:
         b2:e2:4d:e0:d6:5b:5e:8c:a3:cc:7a:09:07:69:ca:68:b6:67:
         6a:d2:bf:6c:b0:6f:70:6d:aa:61:30:4e:db:29:fa:01:c3:91:
         80:ca:59:db:9d:40:89:f3:c5:97:d0:99:18:5b:59:fc:4a:d5:
         50:b1:4e:ba:ae:33:ff:35:73:45:53:3c:ce:eb:f5:0f:00:93:
         99:3d:45:7f:16:f6:5f:89:3e:22:4e:2e:10:c6:ac:7a:f1:32:
         03:d6:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:41 2025 by rpki-client