
$ rpki-client -vvf rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
File: 45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft (raw, json)
Hash identifier: ncw6/BwW9I/z/n5pTS/QSc08pDfNtg+2MpP70VrTNX8=
Subject key identifier: 36:EF:97:31:48:B9:48:F9:8C:BC:FF:1A:14:46:6E:C5:0E:12:34:E3
Authority key identifier: 45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
Certificate issuer: /CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
Certificate serial: 249F7A89F2C0C0ADED41969A34111850888B0384
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
Manifest number: 02BC
Signing time: Mon 03 Nov 2025 17:34:14 +0000
Manifest this update: Mon 03 Nov 2025 17:29:14 +0000
Manifest next update: Tue 04 Nov 2025 21:20:14 +0000
Files and hashes: 1: 45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl (hash: arvko1nEYlV4okXjbUH/BO2KWq32BqZY1kuutASiM0I=)
2: 34352e3138362e36302e302f32322d3332203d3e20323639343133.roa (hash: aYLUnaEk5/eEpdjPz/8IX91Zbr9U6MwpviJJOdOEB7c=)
3: 323830343a363433343a3a2f33322d313238203d3e20323639343133.roa (hash: eehfHlz0WhARoSbQARn99KJmMCchoedoMtm9f7fciU8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl
rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9f:7a:89:f2:c0:c0:ad:ed:41:96:9a:34:11:18:50:88:8b:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
Validity
Not Before: Nov 3 17:29:14 2025 GMT
Not After : Nov 4 21:20:14 2025 GMT
Subject: CN=36EF973148B948F98CBCFF1A14466EC50E1234E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:86:c2:cd:48:72:1c:b9:7d:f8:df:0a:62:
ed:8d:33:a4:4d:8f:af:dc:56:39:fd:6c:2d:5a:1d:
52:a1:34:6e:94:1b:e4:e8:4a:f4:17:3d:d4:33:5c:
85:1c:a9:57:d0:3b:fc:42:d7:e7:54:ea:60:1e:cc:
fa:8a:20:3f:53:1e:da:ac:5a:da:6d:10:7d:0a:11:
9a:b3:65:b8:c1:d1:68:a2:13:21:ee:d0:30:27:0e:
e9:1a:99:d7:c7:6f:40:4d:68:d4:d2:cf:44:ea:19:
24:82:5e:ac:13:93:ed:02:64:1d:30:15:06:93:57:
f6:6d:b7:83:dd:5b:3f:9a:6a:1a:b0:95:5e:bb:f7:
40:b0:26:11:59:4b:db:85:8b:1b:3a:4c:82:53:19:
18:37:98:0a:fa:35:fd:df:90:61:59:60:b7:6c:79:
88:13:4c:4d:9f:01:1f:ab:a8:3e:66:7e:0e:a6:1e:
97:ca:e4:e4:3a:10:d6:fd:ff:62:f9:69:0b:d8:5b:
66:f0:21:01:10:96:01:5a:eb:c9:6e:e5:e7:ba:7e:
58:4e:b8:4b:a9:02:a1:9a:94:32:6b:5f:d1:d4:61:
e5:fc:32:8e:6e:35:fe:2b:9f:a0:53:4c:33:80:8e:
14:cf:f6:20:8c:d2:64:e1:eb:40:b9:c8:8c:32:4a:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:97:31:48:B9:48:F9:8C:BC:FF:1A:14:46:6E:C5:0E:12:34:E3
X509v3 Authority Key Identifier:
keyid:45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d2:7e:13:58:47:6f:db:2e:d0:2f:02:d2:41:a6:b6:ea:64:
86:91:c2:04:94:97:cd:ff:ea:4b:42:7a:6b:c3:6e:d1:cb:78:
6a:9c:79:a3:06:03:80:f9:a8:f4:02:d2:a5:5d:f7:da:47:bc:
1c:f4:f7:86:41:7f:db:7a:2c:4a:55:e7:a5:d9:5b:26:5a:2e:
e0:3d:62:a2:4c:20:cd:2a:b2:71:5c:71:21:97:a5:e9:e8:3b:
ac:87:f6:24:2f:e2:f3:39:fd:36:52:d4:2a:cd:7c:d8:26:ff:
32:b2:7f:6b:cc:90:ac:ca:30:66:6d:73:e0:2b:28:09:6c:22:
ef:e2:19:9c:21:12:f7:65:c3:c9:99:e7:a5:41:ed:f2:0f:77:
42:9f:85:ed:e4:32:95:15:f0:b8:ec:2d:60:05:67:a8:f2:ec:
35:57:e6:d1:80:c7:2e:31:75:99:8d:db:cd:16:e8:be:32:1d:
f7:b5:ac:9d:fb:7a:d9:bd:a5:ce:17:8b:0f:ca:03:31:41:37:
dc:86:c1:14:fa:26:dc:39:35:d5:d6:00:e8:02:d7:9d:6f:b2:
29:48:a0:15:23:fe:3e:ae:b0:24:6f:b9:46:b5:c7:06:5a:a6:
9c:f2:45:80:9a:ba:f4:2a:32:95:9b:d5:5a:9b:8c:c9:88:be:
f6:db:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:39:53 2025 by rpki-client