
$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft
File:                     CE5B1C22F785931FD04E35B0D10299499369B6B2.mft (raw, json)
Hash identifier:          a8+6r3Z1/XSAwF/lY1WZGTMPU/1NrWJliwMsI3t67bo=
Subject key identifier:   EC:DF:6B:E4:F1:BD:43:5B:9D:CC:D3:12:0C:36:1D:E1:B5:EC:9A:7F
Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
Certificate issuer:       /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
Certificate serial:       5A0F0CEB73AD3B1F77AE607183710DFA530965C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft
Manifest number:          019B
Signing time:             Mon 03 Nov 2025 16:01:01 +0000
Manifest this update:     Mon 03 Nov 2025 15:56:01 +0000
Manifest next update:     Tue 04 Nov 2025 18:37:01 +0000
Files and hashes:         1: 323830343a363366343a3a2f33322d3438203d3e20323639333934.roa (hash: UBu5Y7FkfT84tG4S64OaB++UzchsBiP2H+xlWG2/Pfw=)
                          2: 3133382e33362e382e302f32322d3234203d3e20323639333934.roa (hash: tij9FKzC91VBHN0WPcLYiVs8GFhUSdRjTx2luDLCvSs=)
                          3: CE5B1C22F785931FD04E35B0D10299499369B6B2.crl (hash: hAAwCvKyBBShZT/S0T/c0IrGmf6x67NR3F158uhs7OU=)
                          4: 34352e3138352e3231362e302f32322d3234203d3e20323639333934.roa (hash: xvr6WcI45paGyB/m/RZmcH8whbfAYZMaTmhPpuc3n4I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl
                          rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:37:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0f:0c:eb:73:ad:3b:1f:77:ae:60:71:83:71:0d:fa:53:09:65:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2
        Validity
            Not Before: Nov  3 15:56:01 2025 GMT
            Not After : Nov  4 18:37:01 2025 GMT
        Subject: CN=ECDF6BE4F1BD435B9DCCD3120C361DE1B5EC9A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:b9:7a:48:e1:19:c3:f9:d4:5c:9b:f3:7c:
                    cc:bc:10:60:01:d8:de:ec:00:63:38:f6:68:df:ed:
                    7b:2c:1f:07:9f:57:0e:c4:6f:0e:03:cb:08:ed:b2:
                    c2:a2:d4:1a:f5:ad:73:27:fb:46:2b:b5:ae:62:46:
                    55:64:87:0c:57:f3:f6:ce:66:0a:13:60:c6:18:a9:
                    ec:3f:82:44:0b:09:31:f1:e5:bd:78:df:5e:30:8e:
                    f2:e3:c5:b7:ca:96:bc:27:a8:a6:86:3a:da:86:8c:
                    0a:15:b8:e2:c4:1d:e7:1f:71:4d:67:b3:c8:85:18:
                    66:85:e3:c5:2a:d9:46:55:f1:84:a9:ea:fb:31:69:
                    a6:1b:23:fc:c1:1d:67:e1:4e:00:30:90:ef:b6:63:
                    86:7f:43:ca:5c:34:a8:dc:4f:0d:7a:f2:6e:42:aa:
                    8c:99:e6:2a:ce:3a:e9:80:86:b5:10:90:7b:07:15:
                    2a:90:6a:6d:c7:e6:63:44:0e:ec:bd:05:3f:83:80:
                    aa:ab:c5:48:81:8a:8c:b7:21:a4:8b:5c:cd:f1:16:
                    a9:6f:54:46:93:b9:55:8a:f9:8b:e5:5f:d0:3b:be:
                    51:be:37:c6:2a:b4:ee:dd:e5:64:ad:90:6c:45:ea:
                    39:87:cf:d1:be:7a:8e:a1:99:6b:0a:f0:4f:91:50:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DF:6B:E4:F1:BD:43:5B:9D:CC:D3:12:0C:36:1D:E1:B5:EC:9A:7F
            X509v3 Authority Key Identifier:
                keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         29:6e:78:42:6d:70:8d:7d:68:02:25:b3:98:75:3d:e6:17:32:
         b2:5b:19:7f:c2:c0:a5:90:32:cd:12:80:fc:d4:d4:a9:29:fc:
         fe:ec:2f:d8:d1:88:ea:05:a2:18:3d:c9:57:74:92:03:90:27:
         9e:3c:a7:f9:27:b8:73:e4:00:2d:4e:8c:0c:5a:bb:e9:01:c1:
         1e:6b:3f:2e:92:62:71:8a:ab:0d:0b:d3:6b:82:48:b0:29:f5:
         30:52:98:a6:30:66:c1:39:2a:8b:18:99:94:f2:49:2c:10:2a:
         f1:41:13:94:3e:27:f9:a7:1e:eb:f6:bb:0b:8c:b9:4f:65:b0:
         f7:13:05:17:88:ad:1d:4a:5e:50:05:e4:36:64:eb:75:5f:11:
         1a:16:1e:29:83:63:47:71:b2:73:13:d1:56:74:4c:f5:ef:cd:
         07:c9:b3:ce:5e:0e:93:37:fb:3a:45:ce:68:74:5f:cc:a8:16:
         cd:f4:56:ea:51:71:73:d1:f2:51:00:0e:bf:4e:fa:cd:22:b0:
         7e:b6:c2:2a:9c:0a:50:aa:95:e7:cd:2e:cd:e2:67:cb:19:ee:
         c5:30:ba:e4:b4:b8:b9:63:39:aa:f1:0a:42:85:d0:15:ff:4b:
         48:28:d0:2e:16:6e:17:13:4e:20:47:fe:ec:ba:ea:12:74:40:
         9f:13:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:12:16 2025 by rpki-client