
$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
File:                     ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft (raw, json)
Hash identifier:          bKCHvcW2hzaoKNH6bJ7e0WtlImAAVUbnqrDSOibsx+o=
Subject key identifier:   AE:38:47:7D:93:81:3B:97:44:62:69:7F:6F:3E:E4:BA:91:57:C7:64
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       222B74B7111F096336C0526BAD43B7189783B096
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
Manifest number:          028E
Signing time:             Tue 04 Nov 2025 12:35:09 +0000
Manifest this update:     Tue 04 Nov 2025 12:30:09 +0000
Manifest next update:     Wed 05 Nov 2025 13:26:09 +0000
Files and hashes:         1: 3230302e3135322e3138392e302f32342d3234203d3e203238353839.roa (hash: vn9tTl7EXC5ZeB4boE41LhjE1qmQ6kqU3kGLktJjMRU=)
                          2: 3230302e3135322e3138302e302f32342d3234203d3e203238353839.roa (hash: 2h5elppnVRZoOByKC55l4pUfMYPfmOw8TIOu0heYJ6Y=)
                          3: 3230302e3135322e3138372e302f32342d3234203d3e203238353839.roa (hash: nvMfgYkpGn6dpjryJnb/WBHYkLlN5BJMqqfuHqtONy0=)
                          4: ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl (hash: yBXnSFk0kS55Zi3/9wFP+gdPT8ONuqYkgNqmIX6y7Xw=)
                          5: 3230302e3135322e3139302e302f32342d3234203d3e203238353839.roa (hash: urDpbomxnP7uNase22A3bgJSAtdD7T/P5ZeDMpdCcpI=)
                          6: 3230302e3135322e3137362e302f32322d3232203d3e203238353839.roa (hash: uXgREfCBsLGBuNuV0KYuJyg/CdA3Yi2zfwavE5a3lZA=)
                          7: 3230302e3135322e3138342e302f32342d3234203d3e203238353839.roa (hash: tifRplRaEGxZ2DWgT+r8DkA9FvQvFe6RFDMNgPjRjlk=)
                          8: 3230302e3135322e3138332e302f32342d3234203d3e203238353839.roa (hash: Qlyg26iW0QPBtF2Wynd7HxEGGksGC04V9yDchPMFEvA=)
                          9: 3230302e3135322e3138352e302f32342d3234203d3e203238353839.roa (hash: 4CEtx4NtFC9yTHG4K1vtLOZZMepGcUW12YptMqE51Ik=)
                          10: 3230302e3135322e3139312e302f32342d3234203d3e203238353839.roa (hash: S2BF6aj3wsBTbaCCS00Jk6GJ036xWbjgVirHigCEfnE=)
                          11: 323830343a3939383a3a2f33322d3332203d3e203238353839.roa (hash: /Q2Z4e7zDmIn31Fu7aczPJm7vEt9lVDJEhxKL8rVZx8=)
                          12: 3230302e3135322e3137372e302f32342d3234203d3e203238353839.roa (hash: fkwZZJiTKRFIpq49H4qPO/zfXci7TLhgQzdONGpUnt0=)
                          13: 3230302e3135322e3138382e302f32342d3234203d3e203238353839.roa (hash: 97Hqw/Hjy6vpViUGKG6oux7vmpj8k8RgQ7Zn6dKlD+8=)
                          14: 3230302e3135322e3138362e302f32342d3234203d3e203238353839.roa (hash: g/45VZLymeYIOyxwaXyzDw2ABF+gL0VDk9ufv88yy68=)
                          15: 3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa (hash: MAn0pgwYTRCEeQgx0upHTQ5ZaYSRGI8m5fRs+OtpOMM=)
                          16: 3230302e3135322e3137382e302f32342d3234203d3e203238353839.roa (hash: KuIePrPjhs157oWXvz6l1Pzy4DjJyaujvxRvff65Z7g=)
                          17: 3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa (hash: IxB2gz3D00/xYQFENAeaJUQNnn3LCHCvkEig+AzkzkY=)
                          18: 323830343a3939383a3a2f33322d3634203d3e203238353839.roa (hash: GUVu3lWtLReTvqC1DH0Uw04plEvINg0yOBYl39sI6nc=)
                          19: 3230302e3135322e3137362e302f32302d3230203d3e203238353839.roa (hash: sV7jfq+26KnQ+sk1Nxpnr5pDmQxLB+CPyjXTMq/6/g0=)
                          20: 3230302e3135322e3138302e302f32322d3232203d3e203238353839.roa (hash: zlLsxzwCTqW8ur4Zzk+DMLz+9V/vPikZFS+rzHqKRI8=)
                          21: 3230302e3135322e3137362e302f32342d3234203d3e203238353839.roa (hash: yXAHZzr4+ehdxD2ogHISt/OYo+8F4TD8Q7KU4HbFBos=)
                          22: 3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa (hash: K2XaZpPvqeES4g5DhZHWSSRuaDHh8IVy8RE6dx7zZm0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 13:26:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2b:74:b7:11:1f:09:63:36:c0:52:6b:ad:43:b7:18:97:83:b0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Nov  4 12:30:09 2025 GMT
            Not After : Nov  5 13:26:09 2025 GMT
        Subject: CN=AE38477D93813B974462697F6F3EE4BA9157C764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:d7:4f:5b:a2:61:f6:4d:c0:7d:ff:30:06:
                    a7:a4:b3:ce:b1:6d:49:85:bd:c8:11:04:b7:d4:c6:
                    c6:a4:0a:e9:67:fc:8d:d0:2f:cf:2d:9c:cf:fe:28:
                    ec:c2:8f:e8:d7:43:0b:61:62:f5:3f:9d:20:11:bd:
                    50:81:09:7d:2b:3a:79:a1:a7:f9:ef:5e:48:63:f6:
                    30:a8:68:c2:fd:93:fd:f3:d7:68:c0:60:23:74:9d:
                    26:e8:38:ad:60:26:e9:b7:5f:e8:b5:be:92:1a:a5:
                    99:ef:ea:bc:e3:49:63:6c:c8:6a:86:80:6b:7e:dc:
                    51:48:c7:88:44:d6:83:b4:5c:2c:4c:e1:9d:9e:1a:
                    6c:a9:5e:e6:df:3a:71:a9:b2:c5:0e:91:ef:1d:df:
                    7b:64:fc:92:79:a9:0d:db:88:c3:36:d3:60:59:29:
                    f2:93:d2:cf:e3:ed:ea:b9:33:96:f0:76:03:5c:df:
                    3d:33:23:0f:0c:61:32:af:08:7a:2d:30:86:19:5b:
                    8b:79:3b:29:bb:49:58:2b:18:d2:69:93:b6:1b:62:
                    45:21:91:29:5f:12:87:67:b0:d5:6f:76:29:15:3b:
                    cc:ee:38:48:e6:fb:c2:fa:98:9e:88:30:c0:30:32:
                    5a:db:46:69:0e:25:43:56:71:a8:66:1e:98:b9:37:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:47:7D:93:81:3B:97:44:62:69:7F:6F:3E:E4:BA:91:57:C7:64
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         83:43:be:f8:00:26:42:2a:0a:f9:9c:d0:0f:54:be:90:7c:fe:
         04:81:79:18:6f:e5:dd:44:76:7a:f2:e1:d7:ec:91:ee:e0:9e:
         76:a9:99:f1:a3:65:9c:c6:c0:0e:b0:92:b0:75:f6:bb:27:e9:
         4e:08:c0:8f:08:e3:93:48:68:c4:7a:2d:63:ed:c1:f5:c8:77:
         c1:2d:77:e0:0c:4b:36:6e:d0:fc:5a:53:1b:09:34:fc:c8:52:
         82:58:f4:4f:8a:1b:f8:a6:43:a6:89:20:63:45:35:8c:1b:7c:
         0e:fa:3a:a6:22:ec:1b:fe:2d:a1:a0:a5:3a:78:8a:8a:e4:a8:
         3b:0d:f8:5b:e8:f8:3a:86:ad:40:94:b6:e3:a3:34:9a:8a:b7:
         36:0a:d3:6b:6b:bb:cc:cc:79:61:16:69:e3:1a:51:c5:1c:ab:
         13:8b:33:51:f7:92:55:12:24:bd:31:b5:f5:b5:67:06:b7:00:
         54:4f:49:e6:89:46:1f:4d:f4:76:8a:8f:64:78:8e:a8:b9:f6:
         23:33:4a:8e:20:88:47:13:96:8b:7d:d5:73:9b:99:06:1b:d3:
         c2:44:da:e1:1e:c8:ea:54:54:54:27:fa:9d:f1:ae:f8:44:ad:
         e2:24:5f:ec:f9:6d:47:d4:7a:33:bd:2c:b6:80:5f:b9:7a:20:
         bd:dd:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 16:03:11 2025 by rpki-client