
$ rpki-client -vvf rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.mft
File: 24C0476767C3C7C82C851EA372EA9F4876F63E37.mft (raw, json)
Hash identifier: x+eXFRNEGrUUDOXWYmBD76ea+EH/FBc9NDrxXOc28xQ=
Subject key identifier: 8B:DF:5F:A2:45:BD:B6:FA:25:CA:E1:7A:62:C9:71:0D:C9:B7:8F:5E
Authority key identifier: 24:C0:47:67:67:C3:C7:C8:2C:85:1E:A3:72:EA:9F:48:76:F6:3E:37
Certificate issuer: /CN=24C0476767C3C7C82C851EA372EA9F4876F63E37
Certificate serial: 37CCCD871D28419476B443F8EF3D148DA40EE269
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0476767C3C7C82C851EA372EA9F4876F63E37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.mft
Manifest number: 9D
Signing time: Mon 03 Nov 2025 07:11:21 +0000
Manifest this update: Mon 03 Nov 2025 07:06:21 +0000
Manifest next update: Tue 04 Nov 2025 08:44:21 +0000
Files and hashes: 1: 323830343a363736633a3a2f33322d313238203d3e20323639363237.roa (hash: qYiZq4oZcM4m30/4A8bDDQKW7GHK6oMM8u6BJgQ1/cQ=)
2: 24C0476767C3C7C82C851EA372EA9F4876F63E37.crl (hash: FupqJYCqne4hj69CyrAN/MrdvpsCkc7AvglReDyuVSw=)
3: 34352e3139302e35322e302f32322d3332203d3e20323639363237.roa (hash: tYzsr/QWxHzN1zTxM9TZJ6kZwPFrl3I+G4J1TiIloxU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.crl
rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0476767C3C7C82C851EA372EA9F4876F63E37.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 08:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:cc:cd:87:1d:28:41:94:76:b4:43:f8:ef:3d:14:8d:a4:0e:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24C0476767C3C7C82C851EA372EA9F4876F63E37
Validity
Not Before: Nov 3 07:06:21 2025 GMT
Not After : Nov 4 08:44:21 2025 GMT
Subject: CN=8BDF5FA245BDB6FA25CAE17A62C9710DC9B78F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:59:04:6f:41:c2:c9:a9:89:54:5d:13:8e:
0b:a9:e8:d3:e9:fa:ba:b1:f2:a9:26:ab:2d:ae:cb:
61:a0:1e:19:9d:ec:1d:28:2e:0d:eb:ed:87:71:38:
7b:86:76:74:9e:0b:20:bb:01:f1:5d:a4:55:ef:45:
8f:32:48:36:8a:f1:dc:8b:59:90:fe:0c:4a:3a:6c:
39:95:18:59:81:a2:2c:ae:f9:14:ca:1b:a4:5e:fa:
4a:20:1b:dd:ad:2e:44:ca:37:81:85:0b:ab:79:3f:
b6:d2:90:74:38:13:b1:46:61:39:ab:0c:88:bc:a6:
5e:f5:27:b3:90:ae:06:92:d2:5e:65:8f:6e:5d:15:
ee:ab:55:81:c2:bc:8b:f0:d2:e6:c2:26:12:6b:19:
88:6b:9f:12:96:a2:2b:54:27:16:e7:81:69:00:e3:
34:71:26:c4:e0:04:56:c0:54:d8:36:79:41:9e:b8:
5c:33:af:0d:10:6e:d6:6f:ed:9d:47:67:22:37:e9:
1b:04:d5:45:04:f6:07:11:0d:b6:2b:15:22:63:be:
e0:53:62:06:dd:c4:03:d6:a5:5c:b7:79:95:69:c8:
ec:e3:3d:91:67:dc:bc:60:f2:c5:00:d7:49:55:43:
f1:3f:78:c1:b4:2f:36:51:ca:f3:96:f7:50:b9:0a:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DF:5F:A2:45:BD:B6:FA:25:CA:E1:7A:62:C9:71:0D:C9:B7:8F:5E
X509v3 Authority Key Identifier:
keyid:24:C0:47:67:67:C3:C7:C8:2C:85:1E:A3:72:EA:9F:48:76:F6:3E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0476767C3C7C82C851EA372EA9F4876F63E37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4g3xkibrC87NNF4hSCJVeKiWiuamHrMDHpWe8pUzpRzo/0/24C0476767C3C7C82C851EA372EA9F4876F63E37.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:65:f6:9a:c1:76:9a:90:1e:0e:d0:ca:4b:49:45:fd:6b:58:
72:61:69:bd:66:14:01:b6:d1:a4:ff:e0:ce:e2:cd:5b:90:97:
b6:62:e9:98:e9:fe:34:6c:07:cf:8e:54:f6:7b:41:24:a8:31:
93:ea:6b:2b:8a:8e:fb:e1:86:be:f1:03:85:a6:27:55:3e:58:
38:64:ec:1e:b4:d6:f1:b3:3b:08:b9:20:f1:e1:29:3d:ac:cc:
af:7d:b5:a3:dc:34:b4:9b:6d:32:84:fd:29:f2:f9:04:f3:cb:
99:9a:a0:3e:04:0c:ac:82:44:f4:b8:8d:d3:22:f7:3d:60:b3:
e2:62:fa:b6:3d:c0:ab:aa:9b:75:07:44:27:f6:12:89:5c:a8:
58:60:17:d1:9d:8a:d1:ae:a1:cc:99:73:ff:fa:1e:e2:51:b2:
ec:ab:ad:aa:c7:45:93:48:e0:4c:84:41:1f:83:12:da:f4:0a:
b7:fd:00:57:8d:58:fb:7b:21:00:89:6c:ec:8c:e5:d7:a3:f6:
44:34:a0:78:47:e4:72:13:8c:43:8a:fc:32:6e:bc:4b:60:64:
2d:af:01:13:9f:7a:d3:31:24:69:01:cf:64:6c:7d:af:89:36:
9f:14:43:66:29:d1:b5:c8:64:16:44:d0:73:09:1a:87:a2:88:
c7:8d:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:58 2025 by rpki-client