Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
File:                     CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json)
Hash identifier:          NAcQS9FJ5eu3iNgo7XfnXQg1/T+zBDZfULjFFm7s5PI=
Subject key identifier:   FA:68:8C:5F:4E:0B:11:B4:02:9E:14:B1:B7:1B:3A:F6:2A:59:D3:25
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Certificate issuer:       /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial:       24B969917E5DF995395701F60B1D89D4FCDBDEFF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
Manifest number:          23
Signing time:             Mon 20 Oct 2025 03:59:33 +0000
Manifest this update:     Mon 20 Oct 2025 03:54:33 +0000
Manifest next update:     Tue 21 Oct 2025 04:03:33 +0000
Files and hashes:         1: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=)
                          2: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=)
                          3: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: K3e0tARdAb3r0sU2N2KXJwkZpYWv8H74fVtF4GIciVM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
                          rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b9:69:91:7e:5d:f9:95:39:57:01:f6:0b:1d:89:d4:fc:db:de:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
        Validity
            Not Before: Oct 20 03:54:33 2025 GMT
            Not After : Oct 21 04:03:33 2025 GMT
        Subject: CN=FA688C5F4E0B11B4029E14B1B71B3AF62A59D325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:d3:18:ff:42:cf:7e:1c:e4:c4:7d:f6:5f:
                    99:b5:c2:e8:ca:aa:fd:10:00:14:e2:fb:98:07:e9:
                    4d:14:e8:9b:a1:ae:ce:86:34:17:f2:00:93:05:d5:
                    32:19:ea:1c:63:67:78:bd:b2:0c:a1:06:23:43:4c:
                    7c:e5:50:ab:57:c7:fe:b5:c4:d7:ac:08:c2:01:71:
                    38:51:fe:88:2c:f4:35:3e:42:d5:98:3c:1b:af:66:
                    53:62:7e:b1:3a:c8:0d:4a:e4:a7:7e:ff:f4:33:63:
                    2f:b4:94:8b:3e:83:e1:b3:bc:90:a1:03:12:1e:3d:
                    ec:b4:29:5f:4b:4a:3e:93:85:db:28:e9:85:37:16:
                    36:93:6c:5c:98:99:58:fb:37:1b:65:ae:70:4d:2e:
                    19:c8:7f:f6:fc:df:03:86:37:23:cc:2b:29:84:cd:
                    a4:ab:76:ec:73:d1:24:48:b9:33:07:1d:af:0e:cb:
                    9a:5b:5a:7d:d9:25:8a:1b:9e:ad:2c:0f:75:7d:1a:
                    c3:17:a9:13:0d:ee:00:57:07:13:2d:3e:54:be:39:
                    34:f0:5e:d4:10:cb:da:6a:76:9b:21:9c:62:21:44:
                    a4:a3:97:07:83:ba:85:bb:bd:51:8f:75:15:bf:fb:
                    b2:1c:20:49:4d:14:2f:af:de:32:b8:b9:93:b7:3d:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:68:8C:5F:4E:0B:11:B4:02:9E:14:B1:B7:1B:3A:F6:2A:59:D3:25
            X509v3 Authority Key Identifier:
                keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4f:03:cf:39:92:cd:9b:a3:65:73:db:7b:b0:0c:2c:74:08:
         57:c9:1a:51:ee:e3:55:88:73:18:c0:e8:c3:f1:14:82:63:45:
         93:31:e0:9d:89:f3:7f:20:82:34:a4:09:39:02:b2:1e:fb:d2:
         ef:a3:10:af:05:54:00:1f:e6:fb:9e:eb:56:23:eb:93:2a:f8:
         5e:98:3b:73:4d:60:5d:25:f5:37:be:bd:e6:e4:8f:d3:6a:9a:
         72:c4:fb:45:b4:7b:1c:f3:71:74:c0:b5:a3:43:25:f6:ce:ef:
         16:2a:4e:d6:63:31:17:52:70:f8:03:aa:66:59:13:a7:6a:f1:
         0e:6b:45:6b:aa:bb:43:b1:7e:a7:ab:28:5d:f5:bd:c5:39:5a:
         12:4c:54:f7:a7:3e:d0:87:59:02:96:49:10:a6:02:88:fb:8c:
         d1:82:4f:12:ad:41:af:fa:14:4b:9f:e1:14:b6:1b:ac:5d:3e:
         05:3d:d1:89:57:47:b2:c6:55:74:46:d1:39:9a:1a:3d:7d:34:
         eb:78:2c:ce:9c:10:cd:11:b6:6a:fb:60:d2:40:6a:8b:39:ac:
         58:27:9f:37:b2:fb:a1:cc:60:77:2a:30:11:3f:a0:c2:6c:1c:
         fd:1f:d3:4e:08:13:7c:db:e6:d3:38:b8:c1:ad:35:42:6f:84:
         10:f2:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:11 2025 by rpki-client