Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
File:                     0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft (raw, json)
Hash identifier:          x5SZqdSZDiILo4U2Cf4Ij3izaL+f3jBKfvWAAp6x5ss=
Subject key identifier:   13:9C:23:43:57:07:A2:90:0D:6D:66:58:4A:52:30:99:03:63:71:5A
Authority key identifier: 0A:EB:E8:CB:A4:8D:67:33:9E:D7:1D:0C:0A:58:C2:5E:31:80:09:A1
Certificate issuer:       /CN=0AEBE8CBA48D67339ED71D0C0A58C25E318009A1
Certificate serial:       16B5D3318CCEFD6910A97707ED471882CAA312AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
Manifest number:          08
Signing time:             Mon 03 Nov 2025 08:36:23 +0000
Manifest this update:     Mon 03 Nov 2025 08:31:23 +0000
Manifest next update:     Tue 04 Nov 2025 08:52:23 +0000
Files and hashes:         1: 323830343a343030303a3a2f33322d3438203d3e20323635393237.roa (hash: mQYKQpsYrvQGdQASVmoGOd+YUMwIgfUsy84Gg2JtzNo=)
                          2: 0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl (hash: tuFh7bJ5te1iyxc1F81tGF2QoKNn76mafJXvmx6IhGE=)
                          3: 3133312e3139362e3231362e302f32322d3234203d3e20323635393237.roa (hash: MRBEdV7YZN6iXohdjPkhhTRIO66qu93gR6pk8Psl/uk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl
                          rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:d3:31:8c:ce:fd:69:10:a9:77:07:ed:47:18:82:ca:a3:12:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEBE8CBA48D67339ED71D0C0A58C25E318009A1
        Validity
            Not Before: Nov  3 08:31:23 2025 GMT
            Not After : Nov  4 08:52:23 2025 GMT
        Subject: CN=139C23435707A2900D6D66584A5230990363715A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:84:cf:21:a3:d5:3d:9d:e8:02:be:76:f3:
                    60:37:96:ff:e5:c6:27:0e:ea:7f:34:75:9a:34:80:
                    02:f4:ae:ec:e2:93:17:87:bd:7c:76:10:4e:27:da:
                    7c:e4:a9:07:f1:e2:67:8d:23:3b:d5:54:3e:c8:50:
                    14:e1:a0:f2:94:23:49:fb:93:9c:17:06:7c:7b:2f:
                    c8:af:11:9c:eb:16:39:be:aa:e9:f3:a6:d5:9d:ed:
                    4a:74:17:aa:4f:2f:ac:b6:a2:fc:56:a0:de:60:fb:
                    f1:2a:42:cf:14:90:fe:19:76:c5:05:da:66:1a:1f:
                    a5:22:95:6d:55:a0:93:0c:df:f2:f2:82:54:c7:19:
                    58:e1:10:02:9d:c8:15:78:20:ac:c1:0d:69:dc:2a:
                    31:6c:ad:8c:a9:03:d3:0c:2c:26:5f:4d:79:fa:ba:
                    47:8b:89:fb:06:73:d0:50:de:d3:c8:5b:4c:89:b1:
                    fb:d8:bb:97:e5:c5:91:61:93:2c:45:6e:01:cd:11:
                    2f:ac:f0:9f:33:f3:ad:0c:de:59:8f:ad:0c:55:d5:
                    53:98:50:47:fe:f5:11:73:06:9c:3c:57:bf:88:f1:
                    cf:b9:76:42:b1:3c:3d:60:26:f3:e3:92:f0:29:ce:
                    c1:7c:17:29:0b:6f:64:5c:06:ef:bc:ef:7e:97:d0:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:23:43:57:07:A2:90:0D:6D:66:58:4A:52:30:99:03:63:71:5A
            X509v3 Authority Key Identifier:
                keyid:0A:EB:E8:CB:A4:8D:67:33:9E:D7:1D:0C:0A:58:C2:5E:31:80:09:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJRHHvcaK3yyAUqKFjH4eK2sYn29wd8U9N6rP6RVkvBG/0/0AEBE8CBA48D67339ED71D0C0A58C25E318009A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:6c:37:c1:8f:8a:4f:fd:21:ce:8a:a4:84:ad:cf:4e:04:
         43:17:d7:ea:33:34:58:7f:a5:ab:d6:95:d3:19:b7:b3:59:51:
         69:6d:a8:12:6b:80:3a:9a:c4:e0:07:14:f9:40:73:64:77:19:
         29:f5:7a:1f:1a:39:d4:6a:b5:dc:f6:a3:38:44:40:61:b1:98:
         ad:17:f7:f7:98:09:01:61:48:6f:2a:91:63:6f:9f:3c:eb:f3:
         13:16:14:c2:47:7b:83:1d:1e:84:a5:2c:b4:9e:16:d3:ae:b6:
         d7:f4:10:8b:92:7d:6a:bf:36:d9:03:d8:98:a7:ff:d8:28:e5:
         ee:d2:b2:24:07:ac:27:e4:5a:af:93:3c:88:73:f1:b0:41:3b:
         40:f6:4c:7f:17:e1:42:86:ed:93:36:8f:fd:73:71:63:19:9f:
         c3:c0:ba:68:36:7a:39:6d:48:bf:64:16:c9:e6:a4:08:89:74:
         67:e1:e4:f3:cb:71:31:e9:2f:ce:92:ee:e5:51:b8:90:a7:9b:
         0b:41:00:b5:df:b0:bf:6a:aa:18:d4:39:a0:f9:33:ee:0e:ea:
         fd:c4:0c:7f:f4:aa:dc:d2:0e:b6:48:a2:aa:b3:be:92:b7:4a:
         4c:3e:5c:98:27:68:f8:3e:a4:a6:d7:bd:b1:0d:59:f5:55:49:
         ed:9f:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:09:40 2025 by rpki-client