
$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
File:                     57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft (raw, json)
Hash identifier:          5hBNTbrHGd3esEIDV6CVCT9k0E5p64eh6acFlPBt+4Q=
Subject key identifier:   BE:1F:99:17:B3:BF:92:7C:93:71:EA:9D:7B:03:A6:C0:F2:3D:50:3C
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       4FEA24F48E7E4005BB8BEAE1D19BBBE8BB19AD3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
Manifest number:          0302
Signing time:             Mon 03 Nov 2025 10:40:00 +0000
Manifest this update:     Mon 03 Nov 2025 10:35:00 +0000
Manifest next update:     Tue 04 Nov 2025 12:27:00 +0000
Files and hashes:         1: 323830343a343032383a3a2f33322d3332203d3e20323635393338.roa (hash: 6qZ8zmpuOaFhMXoayskpgmq+BGiXMMGpn7OSIsZ6ijU=)
                          2: 3136342e3136332e34352e302f32342d3234203d3e20323635393338.roa (hash: Ufh1eKwDLRCi3LSwXGHN9eEBRlZKln7tVqkgAUmJ7Cc=)
                          3: 3136342e3136332e34362e302f32342d3234203d3e20323635393338.roa (hash: 5MPPlDShKVjYItiN+1CcTT2GhsPKBB2Mm13CtGUvX7s=)
                          4: 3136342e3136332e34362e302f32332d3233203d3e20323635393338.roa (hash: VCvDrQd+QVT3HeVPzsxrfh+4Lco4C+uJntp7xlF++P4=)
                          5: 3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (hash: IV+umiwcbaphbwtIAU5dnHoPxm5SaOa5Tk+QrVwz8l8=)
                          6: 3136342e3136332e34372e302f32342d3234203d3e20323635393338.roa (hash: yNpE3IEN8x94OueC84lrCBdj1zZLI9BtE7e50Zrvi40=)
                          7: 57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl (hash: riL7c7dE1tWnKCJJD8YpFl5LiP0jU534XXrKpGUCkVg=)
                          8: 323830343a343032383a3130303a3a2f34302d3430203d3e20323635393338.roa (hash: fkHQEuSOHoE5dVY5xvX/W+XcEReHvc3/OU7hBrpsvBg=)
                          9: 3136342e3136332e34342e302f32342d3234203d3e20323635393338.roa (hash: fmfNmeRygsVh71ENtTNaatQpnGkRypqsQcbCzD+SuOI=)
                          10: 3136342e3136332e34342e302f32332d3233203d3e20323635393338.roa (hash: B7jNt1FGYUgMflo+0ZsY9hYhkRswxvyJpESyxoI6HXo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:27:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ea:24:f4:8e:7e:40:05:bb:8b:ea:e1:d1:9b:bb:e8:bb:19:ad:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Nov  3 10:35:00 2025 GMT
            Not After : Nov  4 12:27:00 2025 GMT
        Subject: CN=BE1F9917B3BF927C9371EA9D7B03A6C0F23D503C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:d7:87:99:f1:66:d6:32:56:b9:78:85:46:
                    17:23:3f:a7:0f:7b:fe:c4:d8:3f:66:55:00:71:a2:
                    e3:b0:23:03:51:d4:f2:12:34:15:95:f3:13:cc:50:
                    1d:b2:c0:1d:52:a6:4c:3e:12:37:2d:99:59:44:9d:
                    9c:4d:65:88:5e:e2:5b:5b:5a:c0:0a:20:48:71:86:
                    39:c6:3c:49:a5:6f:17:ba:9b:c2:ee:c1:37:41:20:
                    e1:d7:4a:cf:02:4c:c4:ef:86:f8:6d:90:de:07:b4:
                    9a:0d:23:d7:09:d2:c2:17:82:3c:37:a4:7e:06:b1:
                    59:74:5e:07:d4:5f:e2:5e:94:12:bf:4a:d9:b3:b9:
                    5e:dc:10:33:51:24:3f:7e:03:51:7d:54:0f:76:95:
                    4c:f3:92:8f:0f:33:9d:fc:3b:fb:ff:01:c2:3f:c8:
                    91:f0:2e:d9:ae:9e:db:b9:cb:8d:14:0b:16:2f:db:
                    37:9e:57:3b:33:d3:0f:3a:e2:44:2c:2e:c0:06:2d:
                    8a:67:9a:7d:9b:cc:c5:b7:de:13:58:55:17:d3:4d:
                    d7:d8:6f:18:e5:6a:7d:1f:18:19:eb:6d:58:3c:31:
                    b3:ca:2d:9f:90:22:4d:b8:fe:1d:3f:d9:47:d8:18:
                    78:f3:0a:d4:89:28:58:ef:5e:eb:e5:56:52:78:12:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1F:99:17:B3:BF:92:7C:93:71:EA:9D:7B:03:A6:C0:F2:3D:50:3C
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         46:44:3c:9d:db:0d:45:b9:1d:9a:9d:47:a2:ed:e3:58:f7:e0:
         9d:f9:83:7d:70:d8:dc:79:5a:24:f0:41:4b:3f:14:23:2a:f3:
         47:7b:11:ea:7b:93:43:f3:36:6f:49:1d:06:15:4d:35:bf:f7:
         ed:58:6e:89:4c:10:f2:02:c1:2d:c7:b9:72:52:38:ec:c3:c6:
         f3:83:ae:4f:08:78:ce:1e:5c:88:94:d3:4a:3a:4d:b9:85:de:
         31:a1:8d:5c:fb:e5:8e:7c:ef:6b:69:51:7f:b2:18:2e:96:fd:
         a5:67:47:57:3f:9e:b4:a2:3f:69:1d:d6:16:ca:2b:95:3b:17:
         f7:1a:b8:a1:1d:7c:a4:61:53:86:56:f3:e1:c2:44:fb:ff:51:
         f9:32:f5:ab:ea:f3:fa:8e:5a:f4:30:17:6c:8c:73:86:db:05:
         4f:e5:20:1f:96:bd:fa:2b:3d:36:36:a0:24:61:21:4d:11:13:
         ca:76:be:56:15:24:49:39:3b:e2:b7:30:47:69:28:f8:ee:e1:
         a1:15:8c:c2:23:59:9f:ac:ef:c6:54:0e:5c:26:c9:5b:7d:83:
         02:57:d7:1d:03:b0:ec:74:17:4e:b9:74:c6:17:8e:e5:3d:04:
         3e:21:b6:3a:d0:a8:f8:b9:80:27:4a:2c:7c:a4:d0:35:82:22:
         6e:57:4c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:28:04 2025 by rpki-client