
$ rpki-client -vvf rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.mft
File:                     B44D3F216BC388705EB728F618C985D7B6CB8F81.mft (raw, json)
Hash identifier:          iokFx/qm+ABwiaRCjBjhNFnOjE7qCpAf0p1WXXgCPQk=
Subject key identifier:   37:C4:A6:AA:95:EE:1C:03:F7:C2:34:C0:97:F9:97:16:27:64:3B:7B
Authority key identifier: B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81
Certificate issuer:       /CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
Certificate serial:       252F5D7A6B7CAE9BAEE940FDFBA8EEDB2737C9FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.mft
Manifest number:          0129
Signing time:             Mon 03 Nov 2025 14:36:18 +0000
Manifest this update:     Mon 03 Nov 2025 14:31:18 +0000
Manifest next update:     Tue 04 Nov 2025 18:17:18 +0000
Files and hashes:         1: B44D3F216BC388705EB728F618C985D7B6CB8F81.crl (hash: yTzmRGHOPwptXOvSJ/ypFW6N55RUZSbjKhr/xjh13uU=)
                          2: 34352e3232372e3134342e302f32322d3234203d3e20323637303336.roa (hash: VFiMPTWJgyq/ee27jfvZqioV7BRJoAS45gwMZkDUf0c=)
                          3: 323830343a343732633a3a2f33322d3333203d3e20323637303336.roa (hash: 8hVO6SXXNM/iIuGHi+xKzoCytcjfaLGyYXAT61955hI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl
                          rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:17:18 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2f:5d:7a:6b:7c:ae:9b:ae:e9:40:fd:fb:a8:ee:db:27:37:c9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
        Validity
            Not Before: Nov  3 14:31:18 2025 GMT
            Not After : Nov  4 18:17:18 2025 GMT
        Subject: CN=37C4A6AA95EE1C03F7C234C097F9971627643B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:b6:78:04:20:9c:1b:1e:f0:cd:02:4f:13:
                    89:5d:54:a6:ef:5c:cc:c7:0e:8e:81:dd:0c:40:5f:
                    ce:3f:e8:38:2e:91:ba:81:d1:4c:ea:c7:65:47:29:
                    30:57:c8:03:72:75:77:ef:76:84:ff:47:d5:2d:fc:
                    96:49:6e:35:a0:9d:c3:83:75:86:72:63:b4:a5:9e:
                    32:77:2a:b1:a3:a6:8f:38:24:11:14:a0:3f:b3:ca:
                    64:0e:11:40:9c:da:02:6b:bd:49:40:ce:37:c8:56:
                    e0:ef:13:cf:15:df:a8:ac:c8:e0:e5:91:3b:b1:05:
                    33:3e:82:74:64:88:38:ab:05:0d:9d:36:90:fe:42:
                    62:e4:0e:4c:90:eb:95:7f:a9:aa:13:8c:fd:6f:c9:
                    a0:44:37:8c:25:74:6e:17:ad:28:14:45:eb:2b:de:
                    fe:e6:ae:17:22:12:1e:4b:b2:67:47:2b:74:5b:93:
                    f2:78:c0:b7:4f:9f:e9:e0:c2:59:b7:f8:86:98:e6:
                    1f:4b:28:ce:0d:55:01:ea:f6:da:cb:27:6c:35:9b:
                    17:ca:64:45:a3:7d:d7:f5:28:1c:60:f2:d1:ee:b3:
                    a5:ae:0e:0b:18:51:fe:22:9b:11:fb:3c:42:b2:85:
                    a5:d2:8f:9d:5e:b7:49:13:3a:ac:5f:f4:6b:08:ca:
                    0e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:A6:AA:95:EE:1C:03:F7:C2:34:C0:97:F9:97:16:27:64:3B:7B
            X509v3 Authority Key Identifier:
                keyid:B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         63:91:43:12:e2:0e:66:8d:8a:f5:c5:3b:ea:14:49:47:0b:5d:
         85:35:b0:7a:d5:f3:0d:29:83:b4:65:57:08:d0:2d:8a:dc:4f:
         99:20:e7:f4:08:0f:10:b3:c8:5c:77:0b:b9:75:6b:2c:e6:80:
         4a:4e:32:ec:32:15:a2:c3:bf:ae:7f:5c:0c:5b:60:b3:e0:c7:
         c4:01:be:5b:d1:af:a2:fe:b6:11:95:63:10:62:4a:cf:f6:fc:
         9a:b1:55:3e:be:1e:bc:15:4a:a4:73:5f:1a:b1:15:99:ec:5b:
         1c:d9:5b:5f:2d:df:3e:02:7e:b2:93:97:54:84:5c:34:5e:6a:
         0d:4b:bd:3f:66:76:10:e9:a2:70:0e:e7:76:f3:49:0c:69:f4:
         8e:ed:6e:28:50:38:bc:75:21:a5:20:ac:3e:41:f9:22:57:34:
         42:4d:1a:e6:3b:dc:1a:55:e4:ab:d9:ba:3e:b7:08:df:54:77:
         df:6c:0e:01:4a:dc:f2:9a:3d:13:37:5a:bf:7c:ad:0c:2d:b1:
         44:95:2e:75:56:ab:65:49:6e:9a:87:a8:74:f5:28:78:97:ce:
         2b:91:7c:f0:29:a1:58:32:24:6b:75:6b:ab:f2:97:e7:f4:0d:
         a5:75:c1:6b:f4:3b:41:08:7c:45:dc:cd:f5:62:1d:5a:ee:f9:
         af:f7:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:13:45 2025 by rpki-client