
$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
File:                     FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft (raw, json)
Hash identifier:          ARQtg+KfHrCpXa0yHwYxvfhQvlcoHyiEJQ6AKN3YmkA=
Subject key identifier:   9E:46:F4:EA:34:75:D1:59:AB:11:72:3D:49:1C:25:77:12:BD:3F:EB
Authority key identifier: FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB
Certificate issuer:       /CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
Certificate serial:       6BF8933EECE20655FAE5F4FC6FED095360871984
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
Manifest number:          21
Signing time:             Mon 03 Nov 2025 10:15:12 +0000
Manifest this update:     Mon 03 Nov 2025 10:10:12 +0000
Manifest next update:     Tue 04 Nov 2025 12:02:12 +0000
Files and hashes:         1: FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl (hash: LJJcI+TWEDuglb7q+9KShQ0yR6kfcdrtkYsWGnup7Us=)
                          2: 3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (hash: UTVJfypfok615iRWk1ayEw/rK8U4eAbDusVkYJUItSA=)
                          3: 323830343a333233303a3a2f33322d3438203d3e20323635303631.roa (hash: BFiGML4qKgrDNllHxX9UFDMYcUOmP4sHHRK0xqQ3GS4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl
                          rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:02:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f8:93:3e:ec:e2:06:55:fa:e5:f4:fc:6f:ed:09:53:60:87:19:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB
        Validity
            Not Before: Nov  3 10:10:12 2025 GMT
            Not After : Nov  4 12:02:12 2025 GMT
        Subject: CN=9E46F4EA3475D159AB11723D491C257712BD3FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:6c:7d:cb:f2:8f:6c:b4:73:95:33:00:ca:
                    c1:14:e4:af:bd:3c:f0:e7:c2:d9:46:6b:b1:04:94:
                    da:06:6d:10:4a:87:60:97:b5:f7:f2:88:e9:8f:5e:
                    71:b9:6b:1b:81:0f:76:7f:31:d2:67:e0:3c:b6:2c:
                    96:81:ba:c9:44:f2:94:dd:74:36:12:06:11:08:f8:
                    49:4c:75:62:ab:d1:c5:95:75:84:7b:73:05:8f:9e:
                    c2:f4:36:78:88:f4:ff:67:22:29:a0:19:25:94:f1:
                    49:70:ad:82:c4:d9:03:98:79:6a:de:ec:1a:9f:ba:
                    a9:64:43:ea:c0:53:e4:e1:f9:bb:d8:56:8b:46:da:
                    f0:ef:9d:d3:5d:d8:20:9e:9d:9b:c8:f2:42:ca:95:
                    9d:66:22:ac:d0:21:78:44:bb:7a:ef:5b:07:b5:86:
                    a6:7c:0a:fa:bd:6a:72:51:23:ec:e9:56:ff:61:30:
                    cd:e3:ff:67:b6:73:6b:37:f4:91:94:83:5b:18:10:
                    56:dc:96:8f:8e:8f:ee:9b:7c:46:9f:60:f8:f8:0f:
                    c1:5b:d7:69:9a:a5:93:11:17:74:af:81:1a:27:86:
                    d5:03:ec:63:29:fb:71:8a:c2:b2:71:d3:20:7e:e6:
                    8b:34:15:51:87:94:9a:2d:ad:8c:1a:9b:be:a3:22:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:46:F4:EA:34:75:D1:59:AB:11:72:3D:49:1C:25:77:12:BD:3F:EB
            X509v3 Authority Key Identifier:
                keyid:FD:CF:6A:6B:F7:DB:13:21:6C:1A:A8:AD:94:05:9A:DD:9B:00:58:AB
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/FDCF6A6BF7DB13216C1AA8AD94059ADD9B0058AB.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:6c:89:a5:3f:50:ec:80:6a:f8:83:43:e5:e1:f0:2b:6d:
         c9:b3:38:1d:f2:6c:28:08:20:d3:87:1f:67:cf:3f:f0:5e:1e:
         4e:59:a8:91:8d:b5:38:74:3e:02:c4:fc:0c:5f:8b:c0:59:5e:
         68:fd:50:42:fd:ce:4c:61:e1:0c:3f:a8:8e:43:1f:aa:46:49:
         d7:da:07:0c:e5:94:26:8a:7b:49:be:44:53:02:01:8b:9a:3e:
         00:81:22:43:cd:75:18:1a:ac:f1:4d:c6:97:f3:95:aa:0c:6b:
         d4:85:df:cc:b6:44:94:1a:2b:ff:37:9b:55:3a:92:8d:ad:17:
         1c:1c:fa:5f:f1:17:ad:1a:0f:49:ec:8c:4b:13:e8:9d:f0:3a:
         2c:31:b9:c0:99:f7:6c:b5:45:e7:a2:d4:e9:e1:90:7d:19:f7:
         c6:10:16:62:d2:3a:09:0f:eb:10:ae:21:98:b2:26:03:5c:69:
         c5:fc:8d:96:ff:71:6e:42:83:d1:f1:f2:9c:1f:1c:ab:d9:27:
         46:4e:be:99:00:1a:65:e3:58:76:22:48:b0:a9:de:00:77:e2:
         c1:fe:ca:a5:5c:5c:42:50:e4:7a:04:f5:b5:74:58:52:fa:e2:
         4f:72:1a:26:0e:91:ef:cb:91:19:0f:55:01:0c:e3:d9:f7:08:
         d0:77:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:15:24 2025 by rpki-client