
$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
File:                     CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft (raw, json)
Hash identifier:          pCn1GOYBgPpHsPXC5S//rinSsqputNae7Aq2SCfAVM4=
Subject key identifier:   02:32:AB:CB:44:9C:8A:BE:C5:4C:7F:3B:CE:3F:FF:04:DD:BA:11:D0
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       49484E3B177AF11CC84A44D5923AB5C738C2DD86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
Manifest number:          0303
Signing time:             Mon 03 Nov 2025 04:06:27 +0000
Manifest this update:     Mon 03 Nov 2025 04:01:27 +0000
Manifest next update:     Tue 04 Nov 2025 07:58:27 +0000
Files and hashes:         1: 3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa (hash: 2A4rDuLRFWXAJlapuXpN/E4CaofZs0b0umVtQA4SiGw=)
                          2: 3138372e34352e34382e302f32302d3234203d3e20323638333233.roa (hash: kyNjMzQuGSLsCNXU3CfYinPy8FMhKv4uvylDcPGReeo=)
                          3: 323830343a346636303a3a2f33322d313238203d3e20323638333233.roa (hash: kMEsIsALKKeUQ/kyS9ZYrQhiwDhIgH0vQDcsl0N86gQ=)
                          4: 3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa (hash: BBaYc4m/1X68USip6UBSVWqTl8KexxRRSsfkcn7bYR4=)
                          5: 34352e3137352e3138382e302f32322d3234203d3e20323638333233.roa (hash: RwLUdDz13N/BmIqzrNwzh4q3hMjilT4WEIqV6/ghBbw=)
                          6: 3137372e35332e3132382e302f32312d3234203d3e20323638333233.roa (hash: sdu5+bfodftuulEa9fVD7+XKZZ87v1ITtxwVWjLNRxo=)
                          7: 3139322e3134312e3139362e302f32322d3234203d3e20323638333233.roa (hash: aSLP+VQ2QnTk1424KJet/utalthKp4HIvlfM1VbIxkA=)
                          8: CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl (hash: 1ZidlT9reU1WgQMkp3cuoPgdMWAOqO8tCpJPcvYuWSg=)
                          9: 3230302e392e3136302e302f32322d3234203d3e20323638333233.roa (hash: OUfn275w0xXP56S/hYJpQv1yTT+DWCPdZUZdc5TZ6Mw=)
                          10: 3137372e3132352e3138382e302f32322d3234203d3e20323638333233.roa (hash: Dwz0bJkd5wJgXd0c0J0wgruQvnaKO5QdfcivsmcT6R8=)
                          11: 34352e3233382e3131362e302f32322d3234203d3e20323638333233.roa (hash: JTBq8flR+nhyM/Li4g0y3q+ctvT+oBBg+FwjLBO+xgo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 07:58:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:48:4e:3b:17:7a:f1:1c:c8:4a:44:d5:92:3a:b5:c7:38:c2:dd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Nov  3 04:01:27 2025 GMT
            Not After : Nov  4 07:58:27 2025 GMT
        Subject: CN=0232ABCB449C8ABEC54C7F3BCE3FFF04DDBA11D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:87:c7:5c:21:54:ac:18:b3:55:af:61:e3:
                    4d:05:7d:65:b4:9e:a1:5e:5a:b0:93:24:91:bb:37:
                    c5:9e:93:3b:1e:85:09:11:e1:59:74:51:95:92:5d:
                    e1:7a:ef:b7:05:d8:85:1e:48:0c:99:d6:2f:b9:49:
                    2e:f4:65:86:f3:4f:6d:23:8e:87:11:8d:3f:17:17:
                    80:ed:d1:4e:c6:47:f5:32:92:c7:59:5c:7d:04:43:
                    8f:4c:73:24:4b:9d:95:c1:bc:e3:f6:c6:cf:f7:7e:
                    8c:d3:ac:21:f5:f4:82:3d:f2:c4:2e:49:2d:38:bb:
                    b3:0c:6d:2d:29:49:d2:f4:11:72:26:c0:4f:c9:2e:
                    e9:6e:1c:72:1d:e3:e4:4f:c2:37:32:02:5f:21:12:
                    60:1f:d7:7f:5f:fc:d3:c5:08:61:78:e6:b1:bf:08:
                    e7:02:de:f1:d3:70:0b:3d:85:b7:e8:b6:04:b3:28:
                    16:98:2b:30:aa:d4:c5:8f:8b:c4:9b:9c:21:dd:d2:
                    a7:66:b3:5e:ce:35:18:c1:46:36:6f:25:50:2c:a0:
                    9f:5e:81:33:ef:f5:9b:84:71:9e:15:8a:bb:2d:89:
                    c5:d5:73:2a:14:83:a9:db:62:49:35:d1:c9:bf:b9:
                    24:7f:d6:32:9e:0c:e3:91:e0:8e:bf:25:cb:ee:c3:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:32:AB:CB:44:9C:8A:BE:C5:4C:7F:3B:CE:3F:FF:04:DD:BA:11:D0
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         87:34:65:c3:2c:ea:9d:d2:47:b0:21:25:95:52:54:67:fc:98:
         7c:49:0f:5e:c2:53:73:13:27:4a:1f:cb:21:c1:01:f3:14:8e:
         62:22:06:01:c3:62:2d:dc:62:2a:b3:07:0c:78:79:98:e2:0c:
         15:20:df:53:3a:13:c9:ed:ac:11:d2:66:af:95:de:25:fd:80:
         5b:c1:de:4a:9b:74:63:09:9f:5d:1f:17:82:f7:71:1d:99:70:
         32:70:1d:76:02:d8:01:30:4a:d2:b2:f3:f6:e5:83:13:47:9b:
         09:00:2f:e1:73:4e:4c:21:aa:40:b4:70:5e:d1:fe:b4:88:d2:
         f5:5d:d2:2b:a4:27:4f:04:5a:63:77:10:b5:1b:31:4d:13:a1:
         9f:39:ac:af:ff:a3:73:4d:e3:b2:a0:7e:2a:ca:ed:8a:91:82:
         52:dd:0d:10:2c:c8:1e:83:98:28:fc:5a:3a:b1:cf:a4:fd:8e:
         7e:a3:ad:47:be:97:4d:05:a9:b8:d3:b6:af:02:e0:65:75:66:
         23:38:38:06:68:33:0e:23:6e:bf:05:6f:62:e1:3c:38:84:06:
         f7:3d:46:db:58:da:09:22:ee:06:0e:93:7b:18:33:67:d0:ec:
         fd:47:86:d5:51:ed:4a:ac:c1:8d:1f:75:66:fb:a8:73:bd:f6:
         88:4d:9f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:25:58 2025 by rpki-client