
$ rpki-client -vvf rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
File:                     497BAE4A3C3F168148480552DC251C198E80E35D.mft (raw, json)
Hash identifier:          EvutOwxAQy5dfvIgllXd/ZU+lLP28fRMCxyFoK1DDFU=
Subject key identifier:   1D:35:D5:C8:F1:6D:62:5D:B7:41:72:60:C5:26:D9:2A:C6:5F:5C:26
Authority key identifier: 49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D
Certificate issuer:       /CN=497BAE4A3C3F168148480552DC251C198E80E35D
Certificate serial:       71769D022F9F692E65B6B999432030331DB9BDA5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
Manifest number:          17
Signing time:             Tue 04 Nov 2025 01:49:01 +0000
Manifest this update:     Tue 04 Nov 2025 01:44:01 +0000
Manifest next update:     Wed 05 Nov 2025 03:23:01 +0000
Files and hashes:         1: 323830343a356662303a3a2f33322d3438203d3e20323639313137.roa (hash: Na3YvVpkHFVuytUIqDmGLgFlIgoEZir0oJ0kqyLE3S0=)
                          2: 34352e3138302e35322e302f32322d3234203d3e20323639313137.roa (hash: 9hJwoN0GWb/tKd7eKwbHJ1+J3QD5zi8hpvZGNfEoDL8=)
                          3: 497BAE4A3C3F168148480552DC251C198E80E35D.crl (hash: fszKG05TOVGHdIQ9937+RqbEWFxmagDpyHFPG4rRXvs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.crl
                          rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 03:23:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:76:9d:02:2f:9f:69:2e:65:b6:b9:99:43:20:30:33:1d:b9:bd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497BAE4A3C3F168148480552DC251C198E80E35D
        Validity
            Not Before: Nov  4 01:44:01 2025 GMT
            Not After : Nov  5 03:23:01 2025 GMT
        Subject: CN=1D35D5C8F16D625DB7417260C526D92AC65F5C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:d6:a1:37:f9:be:fb:c5:9e:7b:d8:69:7c:
                    81:17:30:b4:7d:36:ce:45:ae:c1:9f:92:e8:17:20:
                    1a:89:f8:3a:2c:f3:42:ce:9c:93:33:58:2a:ff:02:
                    84:ac:70:f1:ca:de:21:6b:6c:45:f1:54:bc:5e:ee:
                    e4:c6:98:65:03:cc:94:78:9c:30:04:87:61:af:e2:
                    7a:e3:c5:9b:f4:6f:42:b8:62:bb:39:da:c3:f8:08:
                    18:15:5c:c6:93:9b:2d:5a:b6:72:3b:8e:41:33:66:
                    9a:f7:e5:a1:bf:18:86:59:38:5f:94:c4:6c:a8:ec:
                    fc:9f:c0:f2:5b:ce:93:ad:9c:01:ee:85:cc:36:57:
                    69:0a:5b:b9:31:56:71:95:b3:4b:90:53:34:1b:cb:
                    59:5a:10:f0:91:65:d2:0b:49:74:3f:57:10:d0:4f:
                    89:9b:25:98:50:c4:44:87:2a:09:ef:2c:27:59:d8:
                    f1:7f:da:8f:63:3d:99:23:b3:12:f5:68:8d:ba:4f:
                    4e:e6:27:61:f9:fa:f4:fa:df:c1:8c:22:22:4f:a6:
                    73:54:2a:d7:7c:56:b1:dc:51:d7:ed:bb:97:e5:bd:
                    08:92:90:9d:09:78:28:14:90:f4:ea:f1:96:e9:e2:
                    90:9a:f1:57:b6:9f:a1:2e:ef:f2:33:62:bc:3b:fe:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:35:D5:C8:F1:6D:62:5D:B7:41:72:60:C5:26:D9:2A:C6:5F:5C:26
            X509v3 Authority Key Identifier:
                keyid:49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         78:ff:2e:81:13:b0:6e:5d:0c:09:34:68:b5:7f:71:23:7c:da:
         71:2c:d6:8b:22:53:e0:af:df:8b:ba:39:fc:ea:84:90:9c:ed:
         b1:97:0a:52:e0:ab:80:15:6a:ac:46:95:07:5c:2b:14:e7:69:
         c1:40:41:cd:ba:d9:86:ea:3c:87:14:9e:eb:e9:6d:22:74:16:
         b2:47:ca:8b:68:5d:16:09:e9:64:20:6b:38:b6:72:21:24:f3:
         2c:ff:e9:44:18:3f:c2:73:5e:e5:85:15:69:24:65:7f:82:09:
         a6:0e:b8:0f:fb:52:91:02:a1:60:81:ca:48:1f:e4:7b:05:66:
         8e:2a:1f:9c:34:27:78:53:74:46:8e:8e:aa:23:0b:b6:16:33:
         d1:8e:a4:fd:0e:8c:ee:90:14:10:16:3c:0d:29:47:a1:36:9f:
         6f:95:56:90:3a:cc:8b:35:2f:e3:08:d4:44:24:a3:ab:f9:03:
         1c:09:2f:04:92:12:3f:57:70:76:c1:ae:64:95:c5:0b:db:0c:
         17:da:00:63:c3:b2:b6:a3:76:99:0c:d2:bc:a0:e0:59:99:8a:
         38:b2:2c:78:d2:f0:d6:bc:72:22:a1:af:ad:96:73:88:d2:5d:
         c9:e9:bd:dd:19:41:1c:b1:87:cf:d0:84:73:1e:69:56:9f:c5:
         6b:2d:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:05:34 2025 by rpki-client