
$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
File:                     F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft (raw, json)
Hash identifier:          HTk8LQHFibeu81L0AZgWc7+tz/u7iJ6zkyTihwguJks=
Subject key identifier:   AE:C5:F8:79:D7:E1:01:17:F5:38:40:22:DC:CE:EE:1C:18:7F:DE:97
Authority key identifier: F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
Certificate issuer:       /CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
Certificate serial:       08A7E6D15CC3921B71EC4255F4C3E7AF8A1191A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
Manifest number:          02D0
Signing time:             Mon 03 Nov 2025 22:40:26 +0000
Manifest this update:     Mon 03 Nov 2025 22:35:26 +0000
Manifest next update:     Tue 04 Nov 2025 22:42:26 +0000
Files and hashes:         1: 323830343a346663383a633030303a3a2f33342d3334203d3e20323638333439.roa (hash: JX/yeHynKplujRMdoekwSXz+gxE11nm3FE8N5QiqKh0=)
                          2: 34352e3233392e372e302f32342d3234203d3e20323638333439.roa (hash: u1CAIGm2x068ZqgSLFbGce2st9yDi5LVwZZfZuFa97M=)
                          3: 34352e3233392e362e302f32342d3234203d3e20323638333439.roa (hash: Wbx664VW3ZXnDOE70dzvm6BGptGXbjN2PY0lTxwKR1M=)
                          4: 34352e3233392e342e302f32332d3234203d3e20323638333439.roa (hash: Fu0ny41Cq+/Fq5vzl46B9Yz0T6kOVnl4z1bxqWVoFC4=)
                          5: 323830343a346663383a3a2f33332d3333203d3e20323638333439.roa (hash: 8Yhzl9LD7MmbBimCzlPJhVt28ch/VSRwLHcl4xJZS94=)
                          6: F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl (hash: U6JvQ2/LqO06/XehIZCuqS+Yq8K2MyFX7Xhl8EzrqIc=)
                          7: 323830343a346663383a3a2f33322d313238203d3e20323638333439.roa (hash: Ps5DM/QbpgbKJQbSR9zedTqbEWDPvHL3Xs8+T+Ea5ag=)
                          8: 323830343a346663383a383030303a3a2f33342d3334203d3e20323638333439.roa (hash: GB2dn2jqInxowCK65hQb5/35rJxoB+Ev/GqR0KDF6dc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
                          rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:42:26 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a7:e6:d1:5c:c3:92:1b:71:ec:42:55:f4:c3:e7:af:8a:11:91:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21385055D4BA00AF1EC37AF53C91C003B6A5F8A
        Validity
            Not Before: Nov  3 22:35:26 2025 GMT
            Not After : Nov  4 22:42:26 2025 GMT
        Subject: CN=AEC5F879D7E10117F5384022DCCEEE1C187FDE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:36:89:13:ef:22:74:41:60:e7:dd:ff:03:
                    31:6b:bb:af:ec:ff:c4:fe:00:74:db:9b:ac:17:ad:
                    47:58:8b:c4:46:6c:b6:dd:38:c0:e0:3d:87:63:83:
                    97:56:74:5a:ff:fc:34:aa:bf:e2:f6:41:fa:54:74:
                    2b:a0:62:28:a7:b4:3b:35:3a:b4:53:53:48:be:85:
                    76:66:40:68:4b:94:9f:ca:df:26:cc:43:5e:28:0b:
                    ad:f7:7b:21:04:dd:50:eb:30:65:a0:1c:a3:2e:93:
                    61:19:0f:70:81:70:99:ba:7a:1a:c9:ed:c6:2a:62:
                    31:10:da:d6:62:b7:67:21:38:7b:ce:b3:97:fc:c1:
                    44:f2:b5:1c:68:b5:f8:65:ba:ca:08:9d:a1:d4:cd:
                    69:cc:fe:75:9c:d4:16:78:68:e3:10:0d:bb:e5:9a:
                    17:d8:db:8c:28:8c:11:0d:2f:51:01:84:62:fb:b5:
                    d3:b3:bb:f2:40:b6:a0:0b:67:b4:04:27:21:e2:4d:
                    de:5b:5d:b4:f6:10:df:d6:be:b1:7b:4e:e3:62:57:
                    04:54:94:1d:ef:39:a6:4f:0f:fc:de:71:cb:7d:81:
                    ec:ff:a7:d1:34:87:6f:79:2d:47:0a:9f:6d:fa:9d:
                    77:3f:c7:a2:0b:2b:4a:38:9d:d3:02:37:1a:1a:7d:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:F8:79:D7:E1:01:17:F5:38:40:22:DC:CE:EE:1C:18:7F:DE:97
            X509v3 Authority Key Identifier:
                keyid:F2:13:85:05:5D:4B:A0:0A:F1:EC:37:AF:53:C9:1C:00:3B:6A:5F:8A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/F21385055D4BA00AF1EC37AF53C91C003B6A5F8A.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         58:50:76:03:82:ba:be:de:1b:98:54:73:21:78:54:09:a4:3f:
         8a:76:87:5e:f3:10:9c:7f:44:01:3e:c8:c4:07:d7:d9:e5:80:
         b4:13:65:f6:b7:6a:55:46:52:8b:58:43:4a:4a:ba:37:af:3a:
         4e:41:e9:a5:ab:4e:74:bc:68:d9:41:99:13:06:25:ad:f7:35:
         65:30:77:67:9e:4a:5b:26:fc:c2:6d:56:7f:5f:3e:3d:44:3c:
         34:64:32:28:23:02:b4:e0:13:5c:cb:3e:1c:fb:d5:cf:85:bc:
         96:02:0d:8b:1c:8f:19:1f:9a:e6:29:6e:86:57:5b:80:3d:d9:
         d2:df:b4:f2:61:77:e8:a4:dd:54:52:cc:5b:e4:e0:63:58:8b:
         47:00:83:a1:0f:2e:20:89:b9:98:7f:34:01:31:41:86:2a:f5:
         80:65:c2:1f:ab:5b:ed:b5:0c:85:f6:74:3d:27:20:ef:0e:cf:
         71:ce:b0:ba:35:cd:be:8f:08:d2:cc:2d:c7:21:91:16:20:50:
         8e:6e:b7:b2:b0:3b:99:7d:e7:96:21:99:c0:8d:50:1e:78:77:
         f7:d3:86:b8:e6:48:64:e3:10:29:a1:1e:0b:c2:be:e6:1b:ab:
         17:c6:c3:86:c2:d9:90:32:12:2f:61:47:fb:96:0b:07:b4:87:
         a3:a3:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:27:16 2025 by rpki-client