
$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.mft
File:                     030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.mft (raw, json)
Hash identifier:          cfLDbbOmNUfFiMgGSMhhgrGWGJqd0RTwQBQgQF+JZuc=
Subject key identifier:   2F:94:D8:97:AE:5F:8E:B2:89:17:04:E0:03:AB:D8:97:34:B2:40:2C
Authority key identifier: 03:0C:5E:7C:94:E0:48:76:B1:C8:6C:B9:0D:68:00:BE:0F:07:B2:F4
Certificate issuer:       /CN=030C5E7C94E04876B1C86CB90D6800BE0F07B2F4
Certificate serial:       2530B82D0AC8F97DC7CB1E7CE2468CFDD607C8D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.mft
Manifest number:          B4
Signing time:             Mon 03 Nov 2025 08:16:03 +0000
Manifest this update:     Mon 03 Nov 2025 08:11:03 +0000
Manifest next update:     Tue 04 Nov 2025 11:18:03 +0000
Files and hashes:         1: 3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa (hash: 2jFRp1W3ZwMxYxtvNKCW9H+N1Nyx/4cYwU3HkdE9unk=)
                          2: 030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.crl (hash: QuZ+YkZJNaJTgzXY8asAlc4Fj4j6C4dRlul87Q6MUbQ=)
                          3: 323830343a336663343a3a2f33322d313238203d3e20323635393133.roa (hash: mMmeXeNaDXhzi/suwoC0/PvN3KeYLg6rEaemOc0uH/U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.crl
                          rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:18:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:30:b8:2d:0a:c8:f9:7d:c7:cb:1e:7c:e2:46:8c:fd:d6:07:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030C5E7C94E04876B1C86CB90D6800BE0F07B2F4
        Validity
            Not Before: Nov  3 08:11:03 2025 GMT
            Not After : Nov  4 11:18:03 2025 GMT
        Subject: CN=2F94D897AE5F8EB2891704E003ABD89734B2402C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:5b:a0:fd:cd:6e:1e:bf:db:e1:db:09:86:
                    69:1b:ba:b8:00:5b:39:74:e4:4a:b4:6e:4e:94:bd:
                    bc:f1:5d:8e:fd:c1:f9:a8:35:e3:59:8e:21:83:5c:
                    f4:06:65:78:77:8a:0c:90:3a:34:6e:99:ec:2e:b7:
                    58:29:51:ba:3b:b9:51:e3:82:6c:c8:c2:66:f2:06:
                    7c:c8:5c:6a:81:24:c3:7f:ef:bf:a9:53:83:b5:a1:
                    5e:c6:42:4a:4a:0d:e3:bb:90:b9:07:ae:91:8f:8a:
                    48:c6:24:f1:63:6a:f5:ef:fc:d2:24:ec:39:07:58:
                    7f:44:c1:4e:8f:50:d0:ad:15:1a:20:9b:c0:40:b4:
                    75:90:16:e8:32:d6:12:51:e2:01:58:3a:0e:e1:bf:
                    c1:36:8a:8d:28:a0:b9:c4:45:85:95:6c:97:a7:4e:
                    9d:85:f6:1c:ad:a8:27:f6:81:9a:47:72:53:2d:47:
                    2f:e0:a0:bf:32:5e:71:0b:66:c0:5c:45:78:81:24:
                    ad:6e:52:91:ce:b5:37:41:0e:22:70:c9:12:c4:1a:
                    18:43:19:3d:3d:79:99:a2:4a:ea:b6:f7:9a:09:3e:
                    a1:94:bc:8f:dc:a5:48:e4:e6:b6:16:7a:b8:a2:ef:
                    56:8a:b6:f3:b6:49:25:c1:99:2c:4c:ad:a3:3b:00:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:94:D8:97:AE:5F:8E:B2:89:17:04:E0:03:AB:D8:97:34:B2:40:2C
            X509v3 Authority Key Identifier:
                keyid:03:0C:5E:7C:94:E0:48:76:B1:C8:6C:B9:0D:68:00:BE:0F:07:B2:F4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/030C5E7C94E04876B1C86CB90D6800BE0F07B2F4.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:17:37:fc:b3:5d:0b:7a:ef:a3:6a:08:68:fa:8f:d1:99:
         da:94:ab:e7:64:9b:7e:0f:48:50:0a:8c:42:91:27:ad:5c:df:
         f0:05:ea:9a:d8:e4:42:5a:0d:b6:1f:0a:a5:db:00:9e:7c:4c:
         5c:eb:a5:16:3f:d7:e2:c5:ea:4a:77:94:b2:67:0e:bf:8b:a9:
         18:7b:f8:e2:ed:52:45:2d:b8:c8:67:e0:40:f7:81:9a:98:8d:
         44:ec:96:88:c6:1e:d3:a7:3c:1d:63:bb:c4:a9:d4:e0:e3:fc:
         43:b6:2e:d3:24:c5:00:a7:47:eb:0a:fd:66:d2:ce:69:76:64:
         73:34:5d:f0:29:a4:a3:ca:43:ae:ad:aa:a7:ad:68:f5:42:c9:
         34:ed:30:99:d7:9d:e0:43:bf:92:7b:c4:06:eb:81:b6:42:94:
         99:3f:ed:54:f2:4b:bf:17:8b:34:5c:1a:00:54:79:6d:4d:3a:
         90:76:77:1b:7f:ca:09:ba:93:ed:ac:01:5a:87:64:de:bc:e9:
         25:74:f9:bb:18:ef:ec:37:b7:18:e8:65:9d:1e:03:bb:8c:e4:
         38:be:0f:b1:a5:ad:fc:23:fd:7b:ce:7a:92:af:69:af:65:4c:
         95:e5:bb:31:87:0c:dd:a3:76:e7:54:c4:f5:e5:70:12:48:a8:
         18:b9:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:29:02 2025 by rpki-client