
$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
File:                     CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json)
Hash identifier:          Vgh6XXxlnFrgF+bVCEYyluu2VsB9EZXoWlFz4udV0QY=
Subject key identifier:   13:68:E8:2B:E1:51:2E:70:67:C0:72:4B:55:CF:8E:4E:D6:FD:24:65
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Certificate issuer:       /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial:       26140F996A5066BB73ADD7D5F7EA42EC0AEA8FB0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
Manifest number:          37
Signing time:             Mon 03 Nov 2025 21:36:14 +0000
Manifest this update:     Mon 03 Nov 2025 21:31:14 +0000
Manifest next update:     Tue 04 Nov 2025 23:04:14 +0000
Files and hashes:         1: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: a6/cnkRPhhya0erN/VF7mPR7uEQmQNyKjyrYZo088aM=)
                          2: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=)
                          3: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
                          rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:04:14 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:14:0f:99:6a:50:66:bb:73:ad:d7:d5:f7:ea:42:ec:0a:ea:8f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
        Validity
            Not Before: Nov  3 21:31:14 2025 GMT
            Not After : Nov  4 23:04:14 2025 GMT
        Subject: CN=1368E82BE1512E7067C0724B55CF8E4ED6FD2465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:a3:3a:4a:53:b5:0c:fd:a7:11:35:04:3d:
                    f6:c0:8c:4c:d2:be:77:3d:4e:81:95:5e:c9:70:d0:
                    d3:d0:fb:45:35:d5:c6:60:eb:af:f5:0e:af:c0:0e:
                    c7:dd:da:7f:b1:fc:21:e6:b8:d1:89:5b:d7:19:27:
                    4d:d2:90:5c:e7:bb:9f:c2:06:96:ba:fa:9b:ca:27:
                    7e:27:09:fc:3a:be:b1:62:ef:1f:e8:10:11:c3:a3:
                    22:52:25:5b:a1:f9:5f:3d:23:64:00:16:4e:41:c8:
                    04:20:82:9f:34:aa:16:3c:f5:af:de:71:a1:ee:63:
                    da:12:fa:4b:b9:7c:b0:fd:78:7e:21:91:89:dc:a3:
                    51:80:5b:67:04:a6:da:1a:cb:c9:d1:5d:c2:2f:bc:
                    e6:62:ca:15:f1:4b:89:e0:51:6a:6e:57:b5:0d:1f:
                    a9:c5:9e:d4:c3:f4:cc:b1:4d:06:bf:c5:69:17:1a:
                    63:9a:3b:c1:63:29:44:43:2f:f1:97:8b:6d:4f:ad:
                    68:f6:32:30:4a:a5:08:6d:4d:8d:0b:7a:5b:68:e1:
                    0f:59:b7:b6:79:0a:9a:05:ce:ba:76:fa:69:4b:67:
                    4b:04:38:42:54:18:0e:cc:4d:aa:f6:c4:97:9c:e5:
                    81:ed:b3:ff:1f:96:6f:96:bb:b4:af:71:fc:31:e3:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:E8:2B:E1:51:2E:70:67:C0:72:4B:55:CF:8E:4E:D6:FD:24:65
            X509v3 Authority Key Identifier:
                keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         13:99:8c:57:f8:08:47:88:f0:80:7c:74:0c:b1:f8:1b:e0:81:
         fb:bd:4c:45:c8:04:28:4f:fc:86:9c:75:74:a6:d3:e3:50:0d:
         21:a9:89:99:7a:5a:17:4f:dc:50:7e:9d:77:a8:65:df:80:8d:
         f4:17:c6:2e:cc:d4:79:bb:f4:02:82:96:6e:4d:ee:57:ac:45:
         88:4e:63:cc:11:e9:95:cf:06:30:c2:32:54:ff:4f:fa:fc:b7:
         41:7d:7a:d7:2e:c8:b9:af:d9:74:9d:32:73:bf:6c:b0:c3:fc:
         e0:69:2b:0f:04:a7:d6:3a:8d:c5:3e:5d:f4:7e:8f:93:e6:32:
         fa:28:eb:d9:15:0a:c6:0d:ba:e6:26:36:39:6f:01:66:f2:3b:
         15:74:67:eb:e6:81:50:04:e2:a3:70:b7:fe:00:3a:b7:2f:2a:
         6d:3b:82:37:52:dc:74:28:5f:36:ae:6a:d8:5c:a3:4d:67:8c:
         ae:c6:59:2a:c2:71:d7:40:4e:c7:6c:87:af:6a:69:bc:23:27:
         77:1a:82:de:27:9b:a5:70:24:a1:1d:e9:17:68:27:20:00:ec:
         f1:b7:0d:1a:f2:50:55:fa:3a:1f:68:16:40:f4:83:f6:59:9d:
         64:60:c0:9b:05:e6:02:a4:bc:d3:3b:8a:fa:c8:bb:35:7e:25:
         b8:4e:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:05:43 2025 by rpki-client