
$ rpki-client -vvf rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
File:                     43A7C7C2B310D67DE688F19B159433597525FE31.mft (raw, json)
Hash identifier:          PH0tIMGqP/QkNmZBaqwv1YElz+hTBy+Mgxg/JB2lfn8=
Subject key identifier:   94:C9:1F:EB:7E:29:CB:26:00:CA:E3:B3:FB:5B:04:A0:36:66:B6:10
Authority key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
Certificate issuer:       /CN=43A7C7C2B310D67DE688F19B159433597525FE31
Certificate serial:       1A8B353FCD8EA0F33BD043B61B83111DD5D8B3A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
Manifest number:          033D
Signing time:             Mon 03 Nov 2025 09:00:00 +0000
Manifest this update:     Mon 03 Nov 2025 08:55:00 +0000
Manifest next update:     Tue 04 Nov 2025 09:00:00 +0000
Files and hashes:         1: 323830343a336233383a3a2f33322d3438203d3e20323636313336.roa (hash: BsAdEqunEhJCfkGUPGa8OoXqKBbybo/Jki+SLpM68lM=)
                          2: 43A7C7C2B310D67DE688F19B159433597525FE31.crl (hash: EQlsb86KkHuidtgxS7zJqB0PH41fXuyOMuAhx2tYgck=)
                          3: 34352e362e3133362e302f32322d3234203d3e20323636313336.roa (hash: xVTS9aY7JJWTF69eZmGnn2UtRow1ARVcIof6mdgGYvk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
                          rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:00:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8b:35:3f:cd:8e:a0:f3:3b:d0:43:b6:1b:83:11:1d:d5:d8:b3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A7C7C2B310D67DE688F19B159433597525FE31
        Validity
            Not Before: Nov  3 08:55:00 2025 GMT
            Not After : Nov 10 09:00:00 2025 GMT
        Subject: CN=3082010A0282010100C7281CF582FDFA81E265E822EA911CF2077288DBB78114350B76764713CB9194E5C66B53E8CCB4E70A1DBDD97F574A1F11B40E5FDAFF2438910544510E9AA192D701A3FA484F79C8252B43EF2DA970253185343CB0619D3C47E7B665A01151D8F4D2C63CB321E20D04E91C69C0CAB965DCCC344AB0AD2CAF98495AB2974BDBE75E80E5795114087CDAC480A161B4D39687A3B3BCC554B168B4A8EC16ED7938BD420225A9525A633D5464C84D05A0352B9EDCF7E985D184F1257356262F387D2BF5CA0114307C118D9922D0DFAE134E41BC065E6E7C33B5BCA7A86BB07F46F8636D03E1D6022ADD21140A4E8DB38E49FE65C488096B2F7A2545D48FEBDA26FE050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:1c:f5:82:fd:fa:81:e2:65:e8:22:ea:91:
                    1c:f2:07:72:88:db:b7:81:14:35:0b:76:76:47:13:
                    cb:91:94:e5:c6:6b:53:e8:cc:b4:e7:0a:1d:bd:d9:
                    7f:57:4a:1f:11:b4:0e:5f:da:ff:24:38:91:05:44:
                    51:0e:9a:a1:92:d7:01:a3:fa:48:4f:79:c8:25:2b:
                    43:ef:2d:a9:70:25:31:85:34:3c:b0:61:9d:3c:47:
                    e7:b6:65:a0:11:51:d8:f4:d2:c6:3c:b3:21:e2:0d:
                    04:e9:1c:69:c0:ca:b9:65:dc:cc:34:4a:b0:ad:2c:
                    af:98:49:5a:b2:97:4b:db:e7:5e:80:e5:79:51:14:
                    08:7c:da:c4:80:a1:61:b4:d3:96:87:a3:b3:bc:c5:
                    54:b1:68:b4:a8:ec:16:ed:79:38:bd:42:02:25:a9:
                    52:5a:63:3d:54:64:c8:4d:05:a0:35:2b:9e:dc:f7:
                    e9:85:d1:84:f1:25:73:56:26:2f:38:7d:2b:f5:ca:
                    01:14:30:7c:11:8d:99:22:d0:df:ae:13:4e:41:bc:
                    06:5e:6e:7c:33:b5:bc:a7:a8:6b:b0:7f:46:f8:63:
                    6d:03:e1:d6:02:2a:dd:21:14:0a:4e:8d:b3:8e:49:
                    fe:65:c4:88:09:6b:2f:7a:25:45:d4:8f:eb:da:26:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C9:1F:EB:7E:29:CB:26:00:CA:E3:B3:FB:5B:04:A0:36:66:B6:10
            X509v3 Authority Key Identifier:
                keyid:43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         85:e3:6e:87:74:21:fb:c3:5d:91:14:20:58:5f:5f:42:f5:22:
         d1:8e:58:d4:36:38:ef:88:d4:89:b2:18:ca:aa:72:5f:69:a0:
         1d:d8:f8:ea:8b:d3:37:39:d3:60:fa:81:b5:00:ef:82:e3:26:
         fa:d9:83:1e:34:27:8e:e6:d3:8c:ec:f3:c4:11:ef:13:0c:2f:
         1a:f4:4a:4e:5e:43:a8:b3:36:c6:a6:64:40:f3:42:47:cc:bb:
         5b:2e:b5:e3:af:fb:27:6b:b0:d5:b1:4f:fa:34:11:ed:6d:2a:
         a7:d7:12:9f:58:25:d3:e9:33:8d:f9:ea:fe:a6:93:df:89:58:
         8f:2b:be:d8:06:68:cc:7e:76:d1:b1:f6:e2:61:0d:1b:11:ba:
         11:4c:92:b0:5d:50:1e:0d:6f:4a:ba:84:44:48:3e:0a:5b:fc:
         18:fc:cf:5a:56:4d:ab:26:b8:26:7f:5c:b4:a3:b7:04:b5:95:
         52:f7:fc:31:78:83:c7:81:77:6e:1a:1a:ef:a1:e2:41:4d:e3:
         1d:6a:3d:66:7f:97:74:92:59:f9:b0:01:75:26:14:84:da:07:
         5c:30:81:5d:15:12:51:65:a8:c7:23:60:8e:28:b8:74:54:af:
         44:ae:dc:5a:04:69:40:72:22:2c:9e:ae:ee:b8:85:e8:a4:64:
         02:92:01:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov  4 01:57:35 2025 by rpki-client