
$ rpki-client -vvf rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
File:                     66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft (raw, json)
Hash identifier:          UHL+oYNlNbitwlPTkksegUNe/QBVct8wO3iqDszV+lg=
Subject key identifier:   10:1C:2C:A9:72:05:01:35:68:29:53:09:03:6F:5E:1F:50:4D:D2:80
Authority key identifier: 66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
Certificate issuer:       /CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
Certificate serial:       446B961857DFA4B63CDE3AC14D184342639E818A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 20:31:09 +0000
Manifest this update:     Mon 03 Nov 2025 20:26:09 +0000
Manifest next update:     Tue 04 Nov 2025 22:25:09 +0000
Files and hashes:         1: 66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl (hash: c5CpVvfpGGpUwBLWOZM0lFjbJknM6xJpsL058bc/9v8=)
                          2: 323830343a333239633a3a2f33322d3438203d3e20323635303838.roa (hash: V5ZwvzsPbrm0wg2SvSp6bmf2WTQwfvtm0/TNKPkDSeI=)
                          3: 3137302e3233332e3134302e302f32322d3234203d3e20323635303838.roa (hash: o6oFku4kx860FKukKcCZJURbiw/6uG5NcqPEJ5jlNaU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl
                          rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:25:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6b:96:18:57:df:a4:b6:3c:de:3a:c1:4d:18:43:42:63:9e:81:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
        Validity
            Not Before: Nov  3 20:26:09 2025 GMT
            Not After : Nov  4 22:25:09 2025 GMT
        Subject: CN=101C2CA97205013568295309036F5E1F504DD280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:24:57:a9:6b:c1:fa:2c:f8:b7:f4:7b:0f:
                    9d:07:d1:91:cc:d9:c0:1e:66:3c:29:2b:2e:4f:62:
                    d9:af:05:ad:45:29:b2:8e:3a:63:ba:cb:57:82:c2:
                    9d:6a:5e:42:c1:01:63:77:25:99:6d:11:64:a4:12:
                    33:87:7d:8b:56:e3:0e:6c:02:4d:9c:12:30:d5:a4:
                    e0:a9:a8:81:4e:ab:a8:20:42:28:fd:77:9c:dd:6a:
                    18:e0:95:e3:8a:7d:9a:22:96:d8:df:9f:7c:d1:48:
                    dd:f6:7a:61:39:8f:71:de:13:ab:c5:74:e2:3d:26:
                    c0:0a:82:e4:ff:78:35:e1:e3:36:f6:e6:f2:9d:95:
                    1d:b9:bc:91:63:46:28:40:ee:9c:d8:c8:aa:55:48:
                    d1:9d:22:d9:09:a8:15:f5:01:83:fa:62:e7:f7:30:
                    9c:ee:5e:7b:1e:06:6d:18:ba:2d:fa:ca:a7:03:e3:
                    97:6d:4c:9d:bb:1f:c3:82:73:03:5d:c6:f6:63:fb:
                    80:41:d5:09:43:05:8e:d5:89:5b:14:c7:33:07:37:
                    4c:b6:b8:21:f1:8d:ce:3b:0c:cc:1c:55:73:89:ef:
                    af:6f:10:c9:6d:b2:0c:ba:7d:14:f2:8e:f3:34:7e:
                    75:a6:e0:ad:57:41:e1:10:cc:a7:55:40:66:5c:bc:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:2C:A9:72:05:01:35:68:29:53:09:03:6F:5E:1F:50:4D:D2:80
            X509v3 Authority Key Identifier:
                keyid:66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         19:31:9e:eb:08:23:e9:b0:9b:e9:b8:9d:09:4b:f2:2b:78:3c:
         c4:a7:da:a9:1f:21:58:08:dc:3b:fe:04:78:53:7e:76:19:00:
         16:50:bd:eb:c5:fb:3c:f5:7d:9d:47:02:ac:50:bf:7b:dd:e1:
         06:df:d8:b6:ab:ed:5c:ed:bb:71:2c:59:e0:41:04:32:b5:31:
         3a:96:d0:39:74:9d:22:b9:4e:81:3b:b8:b1:4a:1c:39:66:d2:
         9a:e7:cb:50:1b:0d:d4:e1:6f:de:18:d7:cb:29:19:ed:e1:d4:
         92:30:7a:84:66:79:b7:b4:3d:e3:13:ac:dd:8f:dc:b3:4e:93:
         90:6d:7f:65:43:ee:53:91:2a:aa:42:10:22:e2:b9:4e:7d:22:
         31:43:ed:37:f9:29:97:db:de:0b:c9:4e:3b:a7:9a:ff:03:87:
         29:f9:36:7a:2f:77:4d:8b:eb:55:53:42:77:6c:89:4c:ce:bf:
         12:8b:1a:96:a8:d8:44:b7:58:89:51:f2:fc:ec:ee:24:e5:fc:
         9e:5a:15:33:c1:61:ed:a4:f3:e2:43:a6:5d:05:81:65:22:83:
         c5:0e:34:d2:b1:e8:3e:c4:8d:68:38:1f:89:f0:09:ed:b7:55:
         af:b3:ed:1d:29:11:07:9f:f0:3f:a1:14:ab:e5:2f:b4:58:ba:
         fc:57:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:27:02 2025 by rpki-client