
$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
File:                     CC9F42C3A1E6623612312417013AA12DC19734C3.mft (raw, json)
Hash identifier:          SDPJSrwferscnxRLt/gz/hNIlCobN3HYBi8wkFrogaQ=
Subject key identifier:   F0:FE:6E:41:DB:12:96:1A:1A:05:BB:39:61:01:39:8F:14:B5:CD:4B
Authority key identifier: CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3
Certificate issuer:       /CN=CC9F42C3A1E6623612312417013AA12DC19734C3
Certificate serial:       315487C80AA3DCC6EE2A6A37401DEDF23D1A738C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
Manifest number:          F4
Signing time:             Mon 03 Nov 2025 13:56:13 +0000
Manifest this update:     Mon 03 Nov 2025 13:51:13 +0000
Manifest next update:     Tue 04 Nov 2025 15:57:13 +0000
Files and hashes:         1: CC9F42C3A1E6623612312417013AA12DC19734C3.crl (hash: 30Gg1m2mw+mkGlN6HDjkjx2Wz7yzakhDxbiVkjNRgi4=)
                          2: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: REH6hncucQPixihQMSIQOS/b1bX4EMEcVsaPP3LjZxA=)
                          3: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: GFslzGMs5oIwXSuzFgkW9lwIslCumt75u502gJdO0cM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl
                          rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:57:13 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:87:c8:0a:a3:dc:c6:ee:2a:6a:37:40:1d:ed:f2:3d:1a:73:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9F42C3A1E6623612312417013AA12DC19734C3
        Validity
            Not Before: Nov  3 13:51:13 2025 GMT
            Not After : Nov  4 15:57:13 2025 GMT
        Subject: CN=F0FE6E41DB12961A1A05BB396101398F14B5CD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:f3:27:e4:02:43:9e:8b:7d:38:12:1d:8d:
                    b3:b3:44:fc:a6:70:b4:f7:b9:81:e3:99:66:83:a2:
                    46:ab:33:5c:57:6c:ae:10:02:e5:53:9d:ed:db:be:
                    ea:22:b8:c6:27:20:e4:6d:c7:c8:50:fb:af:48:89:
                    dc:9c:09:27:63:1e:80:be:7e:8e:8a:50:6b:64:1c:
                    d0:13:b3:3b:fb:6a:87:dc:1f:2d:59:4c:05:8c:41:
                    9f:2c:c3:36:03:6a:e9:89:16:ca:a9:c2:68:b3:9c:
                    a2:51:86:92:70:d6:40:5c:91:81:da:5d:5d:35:33:
                    e1:c7:83:2b:47:0c:31:5b:8d:8e:cc:04:c4:12:e4:
                    ba:a2:5d:c3:31:6a:10:99:67:aa:c2:72:68:2f:8e:
                    bc:21:dd:04:fe:e3:f2:7d:6d:ad:95:7d:56:6a:49:
                    7f:5d:d4:c1:30:5b:a3:ec:18:75:75:69:01:71:f1:
                    00:83:d0:aa:49:0e:05:81:a2:1f:3d:08:bd:56:1e:
                    7a:e6:4f:ff:d0:fd:0e:e3:a8:98:4b:73:ed:b8:3f:
                    46:db:41:4e:6e:f4:26:36:b2:37:de:f3:b7:ec:4b:
                    b8:2f:26:12:97:c8:a9:de:15:71:53:21:1c:12:9d:
                    29:23:49:1e:45:d1:fd:5d:1e:2c:60:7f:75:92:42:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:6E:41:DB:12:96:1A:1A:05:BB:39:61:01:39:8F:14:B5:CD:4B
            X509v3 Authority Key Identifier:
                keyid:CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:20:22:10:c0:da:c9:fd:7f:56:1e:35:ae:09:fa:0d:83:
         45:25:e9:2d:96:52:b4:90:ed:ac:25:12:33:de:13:63:19:d8:
         c9:79:e8:96:5a:9b:6e:55:27:bf:a8:3d:87:5c:f4:8b:e9:5a:
         a2:5e:ef:fb:0e:a1:9a:5a:c7:c6:75:b5:c1:6b:15:de:7c:7d:
         94:39:0f:b2:64:a3:75:8a:00:de:72:b3:01:71:b8:5e:d6:0b:
         7e:a7:63:53:27:ef:3d:62:3a:5a:70:1d:9d:e3:f4:3b:4d:6f:
         5e:33:86:39:fe:31:eb:53:22:af:00:5e:75:39:c5:d1:f8:64:
         30:1d:8d:81:4b:03:ef:83:b1:aa:81:6f:ca:05:17:77:2c:b5:
         8b:c7:b7:34:15:40:80:71:4e:08:9d:01:8e:a0:32:61:fc:a3:
         9e:ca:18:4d:a9:f0:77:d8:a3:f7:d3:a0:03:ad:42:3d:fd:69:
         b5:25:10:da:8c:1e:b7:6f:23:bc:3a:88:30:b0:04:0a:3e:3a:
         83:18:ba:3d:e3:64:99:d8:68:6e:81:21:68:0a:6e:f8:e0:e9:
         38:8d:f7:43:9f:59:64:71:ee:d3:ab:11:3a:71:a0:f3:a5:aa:
         69:74:5c:a2:3b:17:12:79:d6:71:44:0a:a7:d3:ec:8a:b3:76:
         77:7d:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:26:02 2025 by rpki-client