
$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
File: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft (raw, json)
Hash identifier: 39iyKTk4E/M/Jaksrr+VZndIi8oVh+xYZtLufgo3x9w=
Subject key identifier: AA:07:8F:2F:05:A8:9D:3E:8E:90:71:F1:BF:CC:23:BC:5E:02:52:3D
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Certificate issuer: /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial: 6CAE03A4C3B2FEE184BBDB59C64BEF6FF9E5687C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
Manifest number: 0308
Signing time: Mon 03 Nov 2025 03:16:33 +0000
Manifest this update: Mon 03 Nov 2025 03:11:33 +0000
Manifest next update: Tue 04 Nov 2025 06:26:33 +0000
Files and hashes: 1: 3133382e3132312e3138342e302f32322d3234203d3e20323633303433.roa (hash: t31E7lvTR/lLlptpM+wkGzdViGt4jKXDtcm+wD6jrQU=)
2: 323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (hash: TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=)
3: 2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl (hash: pgqRz6/uz1cgETZsaMVmxiAtSw1XwHbIjESgbIJwWK4=)
4: 3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (hash: TM8EFrdqP8xJWUHtOwxrWKv1VfOWeTZaGy5GBdWevQ4=)
5: 3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (hash: onXRDoXh2p9baTThbUNhz9bbCLW3hh2NresCt/EzEg4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 06:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ae:03:a4:c3:b2:fe:e1:84:bb:db:59:c6:4b:ef:6f:f9:e5:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Validity
Not Before: Nov 3 03:11:33 2025 GMT
Not After : Nov 4 06:26:33 2025 GMT
Subject: CN=AA078F2F05A89D3E8E9071F1BFCC23BC5E02523D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:eb:39:08:5b:23:e3:e6:65:f4:44:ef:99:
4e:0c:ab:35:f5:3b:7b:18:c5:78:2d:ec:9c:18:b2:
dc:78:2e:32:27:fe:21:07:86:24:88:95:3a:01:f0:
09:3b:c5:65:38:aa:d5:b6:a7:da:4d:3b:7c:c8:ec:
4f:87:a1:ec:2a:51:5d:00:cd:3c:41:8b:dc:5e:a0:
e5:d8:b7:1e:66:1f:3c:58:46:52:67:51:0e:1e:79:
cb:54:a4:64:a1:0c:c8:f1:02:ff:ec:c2:10:80:b0:
ce:11:6d:00:48:dc:17:07:23:09:7d:f1:5f:b5:d9:
48:56:e7:74:1b:a8:1a:b1:3f:b3:9f:35:6f:ed:f0:
1f:ef:a7:17:6d:ec:40:6e:ce:2a:31:39:fb:01:94:
8e:19:bd:58:9b:cd:18:c5:ba:a2:25:10:bc:3f:28:
33:56:06:ba:73:25:26:23:d1:84:61:47:b7:47:e3:
18:54:e9:01:b3:27:a8:4a:ca:ac:e2:84:fd:8b:0f:
12:f4:ff:62:55:47:69:97:5d:56:3a:9e:94:68:cc:
2a:a2:ba:c6:d2:90:3e:3f:e4:14:46:d1:5b:f2:dd:
ed:20:70:a4:bc:f7:1f:a6:5c:85:8a:db:da:4d:e9:
6f:12:b7:5f:9d:34:b1:af:c0:6d:f9:c6:ae:c2:57:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:8F:2F:05:A8:9D:3E:8E:90:71:F1:BF:CC:23:BC:5E:02:52:3D
X509v3 Authority Key Identifier:
keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:89:5f:14:99:21:52:08:ea:b5:5a:cd:bf:0a:73:d8:12:
cf:4f:6b:bd:77:70:3a:c6:61:b5:14:f8:e1:0e:b2:fc:e8:0b:
2e:b0:5d:b8:4c:56:e0:e5:fe:21:27:0f:a1:1a:dd:53:f3:65:
f0:c4:79:1c:7e:76:e8:95:e9:60:2c:8d:50:8c:6a:da:2a:44:
5b:9b:e5:69:eb:ac:23:7d:fe:c8:40:ef:b0:ba:a8:60:6f:9f:
b1:bb:1f:b4:4e:a0:4d:78:a4:b2:c2:0c:d1:9f:c9:fb:00:55:
11:dd:e2:10:df:15:c4:df:d7:2b:ab:35:bf:31:b7:99:f7:22:
11:4a:ba:41:a2:9a:21:54:13:0d:64:94:1e:4f:42:b1:92:b1:
fc:0c:25:27:6d:d1:a5:f3:ba:c8:73:98:d5:5b:dc:12:a9:58:
6b:35:ce:f9:8d:ea:d6:01:ab:68:6b:8f:7f:f7:13:bb:13:21:
56:90:ce:3b:78:ee:47:5c:c1:ca:9a:6d:da:30:f8:22:0f:62:
e6:af:6f:99:4e:f7:f9:19:ad:b3:f5:49:d0:dd:f2:7a:b5:f0:
3c:9a:0a:46:ab:ee:45:72:51:e3:a5:6a:2b:c3:11:c9:b1:0f:
a5:aa:89:79:2f:eb:7e:ec:c5:f8:da:43:e3:0e:52:6c:f8:b8:
4a:2f:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:30:51 2025 by rpki-client