Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
File:                     7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft (raw, json)
Hash identifier:          yRGLQYalHaTfqBf0/n+jEHCto47b4Sa7v8Ted4fYENI=
Subject key identifier:   45:CF:85:5F:47:C6:31:0A:E6:F1:52:86:AA:00:B4:4B:F1:BB:47:A8
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       5BCFCE20B92B0CE8CCC617D9286B10AB6DE5470A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
Manifest number:          02DC
Signing time:             Mon 03 Nov 2025 17:34:33 +0000
Manifest this update:     Mon 03 Nov 2025 17:29:33 +0000
Manifest next update:     Tue 04 Nov 2025 20:31:33 +0000
Files and hashes:         1: 7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl (hash: 21ejWC7R3Lz703wXm57LsVbjE7Yl97/IK59c+3Jde94=)
                          2: 3137372e39332e3232342e302f32302d3234203d3e203238363633.roa (hash: bNqXsAv0kRQc7WGMACC+Jtk28vX6IoAd3s8/DmPrr7I=)
                          3: 3138392e312e33322e302f32302d3234203d3e203238363633.roa (hash: 6X7jeMRLT2ZtN3k5ce6d//Iawi2gc4/W3IntF96uvhU=)
                          4: 323830343a3365383a3a2f33322d3438203d3e203238363633.roa (hash: NlE3ax6zq3yob4T7nBCRYsrcQGfMjecTHh2CWtNBrpA=)
                          5: 3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa (hash: oaLn2NtupH/R0IKsQiUy6oPAtevyY6d+koBrTKmQ8/4=)
                          6: 3138362e3139342e3133362e302f32322d3234203d3e203533313431.roa (hash: oXjm5UzF3qyypZeRSTvoHZK2uFPAU2d1Wlm6rw6hugk=)
                          7: 323830343a376139633a3a2f33322d3438203d3e203533313431.roa (hash: 9N4QkRkT8NEID5IOs1c/vziP90XvGhnVIBGDGc/Rwmk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cf:ce:20:b9:2b:0c:e8:cc:c6:17:d9:28:6b:10:ab:6d:e5:47:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Nov  3 17:29:33 2025 GMT
            Not After : Nov  4 20:31:33 2025 GMT
        Subject: CN=45CF855F47C6310AE6F15286AA00B44BF1BB47A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:b5:46:3b:e9:46:33:45:4e:d3:20:5d:0e:
                    8d:8d:15:34:78:d8:b2:98:8d:10:44:fd:33:c1:ae:
                    0d:e4:06:5a:30:a8:23:dd:4f:7e:8f:fd:1d:7f:2e:
                    5c:1c:d1:bb:58:6c:63:65:fb:bb:76:40:c7:1c:a6:
                    c2:c5:03:d6:94:de:2f:5b:97:e0:9c:98:19:35:6e:
                    8a:b5:ab:29:dc:54:97:51:f4:9a:d4:5f:d9:db:81:
                    54:47:e0:b3:8a:c1:56:7b:f0:c8:a3:00:e5:e2:45:
                    37:be:3f:7b:ef:06:28:42:a5:be:a4:6d:29:60:0b:
                    0a:69:dc:4c:60:91:95:f2:35:28:7a:e4:0f:9b:de:
                    6d:80:bf:04:f1:a4:3e:ae:fa:f1:8f:f2:96:73:8e:
                    8b:4a:fe:e1:31:50:0c:e0:b9:60:92:5b:c1:23:60:
                    c6:b0:ef:94:ce:40:f3:ef:4e:4b:11:cf:c6:da:cf:
                    68:98:72:8f:43:ac:9a:6d:22:e4:37:a8:74:7f:16:
                    01:f1:7d:25:f8:3b:af:06:94:13:9f:01:07:1e:b0:
                    f7:0f:97:34:84:ce:47:81:35:2f:81:90:c4:4c:11:
                    93:6e:e1:eb:19:50:d2:49:84:dd:bc:b1:1a:04:75:
                    78:f3:fb:21:b6:7c:2c:43:8f:92:92:68:db:18:87:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CF:85:5F:47:C6:31:0A:E6:F1:52:86:AA:00:B4:4B:F1:BB:47:A8
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:76:8b:22:d8:9d:96:dc:14:cf:01:5e:2d:47:89:c5:f9:
         e0:71:91:cf:f2:aa:5a:af:30:cd:42:6c:78:ea:95:ac:69:0a:
         17:2c:ee:1b:f6:db:7e:57:ab:07:62:2f:c2:5c:18:77:5f:4e:
         63:2b:0f:09:dd:5e:1c:73:78:83:42:a5:c6:bd:ad:13:56:bc:
         90:97:93:e8:78:4b:ac:26:37:0a:bf:a1:e2:9a:16:ff:2e:e3:
         a2:a6:f4:52:e2:01:87:3e:c1:28:e8:a5:87:ad:7f:50:b5:29:
         15:88:6d:86:8a:05:6f:79:e1:9f:0e:73:b2:25:2d:db:b6:9b:
         17:d1:6f:5f:ed:23:e8:8e:3b:3b:a7:3e:55:80:36:6b:29:36:
         91:a9:4a:ad:fd:8c:a3:8e:19:b7:26:71:38:50:c5:37:a0:ee:
         44:29:22:79:56:1c:f4:11:fc:fe:4b:b1:f5:2a:41:08:38:d4:
         5e:7e:be:09:3e:06:be:a1:dc:56:61:2d:b9:c6:44:28:24:ac:
         bc:58:e8:ad:bb:78:66:e7:37:87:92:49:6a:86:0d:17:e1:00:
         aa:e3:4c:48:94:fe:39:cd:3f:44:e3:f3:64:0d:7e:62:bf:ec:
         ce:fc:a9:86:3c:87:43:3c:c1:97:eb:cf:51:9e:67:e9:d3:03:
         c9:f3:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:21:11 2025 by rpki-client