
$ rpki-client -vvf rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
File:                     24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft (raw, json)
Hash identifier:          XwYTn0HIz3GjKrr8vUzlBhlF7i1Nd+QJCIHIBRD4JKw=
Subject key identifier:   3E:8F:D9:8B:95:14:9C:C6:0A:42:52:5B:84:0F:57:6B:29:57:F8:5C
Authority key identifier: 24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76
Certificate issuer:       /CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
Certificate serial:       5718AA6429E70BAD4262A0FBAF6E7572A42F3B6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
Manifest number:          9F
Signing time:             Tue 04 Nov 2025 05:04:01 +0000
Manifest this update:     Tue 04 Nov 2025 04:59:01 +0000
Manifest next update:     Wed 05 Nov 2025 06:51:01 +0000
Files and hashes:         1: 323830343a363235383a3a2f33322d3334203d3e20323639323931.roa (hash: 4i35/DDK212Z4khUOosAUbxmpZ/wFg45Y7cXSY+E8/w=)
                          2: 34352e3138332e3230382e302f32322d3234203d3e20323639323931.roa (hash: UnGbdsoU9eY8lDsUGDJ+NceLPEN91iBYZFlapSh04As=)
                          3: 24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl (hash: B9SL+8Odh6rjxX2tQ4VBJPAHKdwtgERrAXvAAIQwzvg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl
                          rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 06:51:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:18:aa:64:29:e7:0b:ad:42:62:a0:fb:af:6e:75:72:a4:2f:3b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DF93832FF71F76C53D63DCFDF3B5BB6879ED76
        Validity
            Not Before: Nov  4 04:59:01 2025 GMT
            Not After : Nov  5 06:51:01 2025 GMT
        Subject: CN=3E8FD98B95149CC60A42525B840F576B2957F85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:b6:0f:5d:85:94:38:f5:8f:d2:cf:9d:78:
                    87:c2:50:86:9e:3d:1e:4c:07:82:0c:56:d2:87:8d:
                    6b:96:66:90:49:a3:bf:f4:7d:e8:e5:4d:27:85:c2:
                    b7:5a:31:b3:8d:19:96:d1:17:a7:a6:45:0d:e9:25:
                    40:81:19:df:7d:25:ef:80:91:14:e7:22:8a:ed:af:
                    fc:c1:80:19:1d:2f:50:48:ba:11:fe:33:2c:c0:e9:
                    75:09:40:48:2d:5e:c2:5a:d2:8d:40:38:46:75:5a:
                    aa:00:a2:7c:98:d3:ed:55:5e:8c:76:d8:01:2c:cd:
                    10:31:52:fe:52:cf:81:96:cd:45:59:32:ee:1a:9b:
                    3e:0c:3b:b1:44:b2:62:04:e6:45:8e:2a:56:25:39:
                    46:51:be:9d:38:31:20:ff:dc:8f:39:b3:e6:a2:5f:
                    4b:c2:d3:d9:1b:37:a2:c5:a3:3c:ee:1f:b1:2f:a6:
                    3c:b0:b5:b0:b7:31:00:5f:15:bc:16:ad:ef:28:4d:
                    ec:68:68:9f:3c:f0:c1:dc:4d:80:5e:53:a4:39:1e:
                    ec:0c:e3:69:ba:94:f5:86:0b:30:9d:be:7b:62:eb:
                    ff:26:c7:84:3a:5e:50:92:9e:9b:5c:8b:af:8d:9d:
                    bf:3b:72:f5:8d:d8:97:af:43:41:38:fc:7a:01:dd:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:D9:8B:95:14:9C:C6:0A:42:52:5B:84:0F:57:6B:29:57:F8:5C
            X509v3 Authority Key Identifier:
                keyid:24:DF:93:83:2F:F7:1F:76:C5:3D:63:DC:FD:F3:B5:BB:68:79:ED:76
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB4d7GHHVpLwanbpMwFRxpTsrbBJvNou2a8ZebqXDpZW/0/24DF93832FF71F76C53D63DCFDF3B5BB6879ED76.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8e:23:a5:e0:25:3c:ec:67:12:56:aa:9d:2e:12:8d:d4:bc:3b:
         64:58:77:6a:c7:8e:a3:c7:85:25:ba:83:b9:d5:66:03:4a:4a:
         86:a3:f3:01:09:57:87:64:3b:85:7c:64:e2:bd:10:33:c7:c9:
         ec:03:28:78:0d:49:37:24:b0:3c:6e:bb:b3:9e:01:66:2a:92:
         60:ad:37:79:3c:8c:06:b7:f5:ba:0d:65:23:55:90:1f:42:ff:
         f1:8d:41:32:9b:6a:9e:69:0c:4d:62:a4:b0:bc:42:e6:48:74:
         11:45:68:d5:94:d7:b5:ac:18:03:2d:ea:08:07:e2:f5:bb:cd:
         16:df:d7:f3:b3:ef:df:aa:1c:c9:53:94:2e:e2:cd:91:24:80:
         ce:4c:d8:f9:5e:3a:fc:ab:e7:a5:cd:a6:c3:d4:fe:2b:a8:5d:
         45:da:cf:00:c0:9c:68:77:ff:78:d9:9f:80:be:15:d1:0f:88:
         39:e6:af:25:1a:27:e6:47:41:4b:ad:ba:5c:5e:17:cf:15:97:
         77:e0:b6:d6:44:d3:8c:02:a5:4e:2d:01:0f:12:a4:e0:ea:cd:
         f0:a4:42:05:4b:a7:a3:77:9b:08:44:9c:81:a2:fb:df:f4:c2:
         47:a3:92:27:e1:1e:6d:fb:ec:2d:e1:32:b7:61:ec:75:bc:31:
         08:0c:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:22:30 2025 by rpki-client