Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft
File:                     AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft (raw, json)
Hash identifier:          YJfOGlVpjztEn8D2IOmiJNyS7AzT7Ne13V4hWqgS6sg=
Subject key identifier:   A6:1D:A0:B1:39:E4:C3:F3:90:68:48:A6:A2:71:B7:8C:F8:53:85:7F
Authority key identifier: AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63
Certificate issuer:       /CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
Certificate serial:       0EBC5137229EB0BA30E9A55C80C55E49814F9287
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft
Manifest number:          DF
Signing time:             Mon 03 Nov 2025 16:12:17 +0000
Manifest this update:     Mon 03 Nov 2025 16:07:17 +0000
Manifest next update:     Tue 04 Nov 2025 17:54:17 +0000
Files and hashes:         1: AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl (hash: fF657okTttzQSqaU5hfaeCBoTYd4AvOZNm1SXAG6Fqw=)
                          2: 323830343a353035633a3a2f33322d313238203d3e20323638333834.roa (hash: gCXcqtMMkTXLN6GWx/JQJbcRolTLyuFv3xrP8wIJQMk=)
                          3: 34352e3233392e38302e302f32322d3234203d3e20323638333834.roa (hash: A2KqNEz/ObTs1Pi9ANZPYw1g+qUl1IXdPem6p7hpsQs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl
                          rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bc:51:37:22:9e:b0:ba:30:e9:a5:5c:80:c5:5e:49:81:4f:92:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
        Validity
            Not Before: Nov  3 16:07:17 2025 GMT
            Not After : Nov  4 17:54:17 2025 GMT
        Subject: CN=A61DA0B139E4C3F3906848A6A271B78CF853857F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:f3:b1:99:ed:82:94:0f:d6:1e:26:2a:77:
                    56:df:6f:f0:26:19:6d:51:76:e5:fd:e7:ed:ca:35:
                    7b:5d:3b:82:3e:4f:c2:b8:98:ad:56:da:45:9a:ec:
                    70:67:51:f8:95:ad:a4:1a:36:81:96:4a:05:60:15:
                    c8:02:cf:9b:9e:a6:f6:d9:0f:3a:28:f9:ef:b6:80:
                    73:92:63:ed:56:fe:fb:e8:11:60:71:51:da:0a:81:
                    87:c4:38:e4:35:b1:97:31:2a:44:54:7c:ed:76:0d:
                    26:ee:55:97:35:4c:82:f2:a1:27:39:48:68:e5:07:
                    94:10:5d:6d:35:b5:29:4b:1f:0c:63:bc:6f:9b:4b:
                    a4:d8:e0:c2:df:8b:5e:b3:b2:00:0b:cf:a2:47:04:
                    8f:bc:33:2d:f7:73:99:1f:f4:1b:2c:09:26:aa:49:
                    b5:d9:f0:d7:d3:65:1c:f3:99:b9:bd:a0:ee:82:68:
                    58:b3:52:5c:d7:6e:3e:28:2e:27:b6:45:df:7f:03:
                    a9:01:3d:0b:d3:1b:61:13:3d:38:cb:7c:5b:7f:ca:
                    c4:cf:88:ea:55:66:de:31:60:df:da:29:8e:91:c7:
                    29:7b:a8:3c:1c:a1:cc:90:bf:7f:0e:a8:d9:f2:1a:
                    f0:f6:45:9f:c1:c7:23:dc:e8:cd:07:e1:4d:2b:f6:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:A0:B1:39:E4:C3:F3:90:68:48:A6:A2:71:B7:8C:F8:53:85:7F
            X509v3 Authority Key Identifier:
                keyid:AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:56:ec:d3:6d:86:0b:5f:1e:01:19:53:19:4a:b5:9e:ab:
         69:24:f6:c6:f7:43:ac:df:a4:e0:08:df:ca:d8:ca:b0:f9:4f:
         59:fe:6e:4f:92:1a:93:23:ae:8b:a1:17:67:76:87:11:08:f6:
         4a:f6:7a:40:d7:37:44:b0:e9:be:34:17:58:01:e6:9d:1b:bd:
         83:20:48:84:91:a8:1f:10:fc:3b:70:ca:87:d3:02:92:4b:b0:
         55:4a:36:e9:c2:18:2f:ae:b0:1f:54:d4:2f:59:70:a0:ca:77:
         ca:dc:9d:6c:5e:89:96:c4:cd:e5:2a:88:cc:42:06:13:fe:3e:
         36:c7:d7:c9:ea:15:5e:bc:ae:7c:4d:0a:03:6e:cd:97:4b:39:
         1b:2b:95:fc:94:27:99:e4:7b:ed:72:4e:a1:52:75:66:e0:9e:
         70:51:59:29:6d:ac:1b:7f:f4:6f:74:9e:bc:4b:9c:48:1d:8b:
         07:34:0b:b3:2a:97:d8:27:39:e8:17:67:f9:b6:5d:10:25:86:
         44:7b:51:19:0b:ab:5e:2b:23:57:a8:b2:e0:0e:84:07:8a:d8:
         42:8e:31:6f:f7:13:a3:33:ee:c1:fa:af:a3:63:c1:ae:98:54:
         cb:ed:31:78:f3:4c:c4:de:c1:23:17:a0:79:c0:c1:36:9e:00:
         c1:ec:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:47:39 2025 by rpki-client