
$ rpki-client -vvf rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
File: 964DA9AAC4C916D348B028DBC19BD5C08E437560.mft (raw, json)
Hash identifier: M8WyaY57B80RyHYzTl+jeYEoJrr028AbAwNaQfUwzfo=
Subject key identifier: B8:BB:6B:08:03:4A:EB:00:9D:2A:65:63:DA:7E:12:C1:D4:E3:F8:7A
Authority key identifier: 96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60
Certificate issuer: /CN=964DA9AAC4C916D348B028DBC19BD5C08E437560
Certificate serial: 1183D95D8AA7C2B5825950CDD0E4E703365D3E3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
Manifest number: 24
Signing time: Mon 03 Nov 2025 05:38:59 +0000
Manifest this update: Mon 03 Nov 2025 05:33:59 +0000
Manifest next update: Tue 04 Nov 2025 06:35:59 +0000
Files and hashes: 1: 323830343a383138343a3a2f33322d3438203d3e20323732343539.roa (hash: nV+YnLkMXJ7NLvIA4eiIiwEhwUO0vMdc2CE6F8m39Pw=)
2: 34352e3138342e3230342e302f32322d3234203d3e20323732343539.roa (hash: mA2x0qV3KIplcTlRhrF70yJUuAie/XmNs1/bE1FVb5M=)
3: 964DA9AAC4C916D348B028DBC19BD5C08E437560.crl (hash: R9W3nvVHC8EC63yzFlV99BU+z5YmyV8+MXz63gbOBM4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl
rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:83:d9:5d:8a:a7:c2:b5:82:59:50:cd:d0:e4:e7:03:36:5d:3e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964DA9AAC4C916D348B028DBC19BD5C08E437560
Validity
Not Before: Nov 3 05:33:59 2025 GMT
Not After : Nov 4 06:35:59 2025 GMT
Subject: CN=B8BB6B08034AEB009D2A6563DA7E12C1D4E3F87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:ba:26:5c:45:f7:c1:3d:70:7f:32:88:f3:
6d:50:63:7b:ab:90:7a:14:dd:d6:e2:91:d6:b5:46:
49:00:75:d7:24:62:73:38:62:33:fa:4a:c5:dc:3b:
ff:4f:09:a8:d7:c9:d8:2f:d1:06:33:57:98:ef:33:
c0:11:50:c6:6c:37:bc:f4:3e:a3:30:68:4e:15:82:
34:d7:ac:ac:92:61:79:a8:5b:1d:0a:63:b8:24:64:
9a:99:a8:fc:1d:bb:14:99:80:c9:ce:fc:f1:7e:72:
95:09:ca:29:54:0a:a3:ce:ea:63:d4:48:f5:88:fc:
19:16:d5:70:9f:41:7a:cf:48:69:59:19:2b:4f:3b:
d1:fa:11:d0:a9:40:a3:35:5d:0b:3c:7d:3a:f7:b3:
ad:da:97:97:ee:b7:af:19:39:99:d3:20:08:9a:ef:
e7:62:46:e7:c3:9a:45:6c:fb:dd:be:e9:f7:be:e6:
4b:0a:81:ee:19:9d:59:92:72:6e:20:ed:ec:79:c9:
ab:32:1f:15:5e:4f:ce:91:7c:f4:9b:ed:b3:16:2c:
ff:ca:7b:48:c2:7e:77:ae:27:9d:83:ed:31:ed:ca:
d7:e5:b1:4a:4f:2e:50:c0:f7:a9:2a:54:03:3b:7f:
56:5c:9e:80:b4:19:1e:9d:ac:78:bc:4d:88:11:42:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BB:6B:08:03:4A:EB:00:9D:2A:65:63:DA:7E:12:C1:D4:E3:F8:7A
X509v3 Authority Key Identifier:
keyid:96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:74:50:a3:1b:6d:48:5f:96:db:86:c9:43:d5:33:53:ff:
e8:16:dd:5c:bd:51:d5:f8:ef:05:e1:89:7b:6f:15:fb:8b:00:
d2:de:35:64:4f:ef:70:a7:e8:1f:14:74:f8:ff:63:f7:2f:ab:
9d:44:6a:83:9c:ae:59:67:ea:ba:a6:96:8a:d2:52:cc:fb:e8:
54:3f:54:7c:64:79:1a:ce:a2:2a:9a:bc:6e:f4:9d:8f:a0:7e:
a5:89:0d:b5:f5:82:d8:87:f8:9c:bf:1e:d9:79:68:2e:aa:dc:
ac:e6:d7:cf:55:b8:54:0a:c2:c3:bb:53:8c:4a:83:16:d3:c5:
21:9d:60:36:ff:f7:f3:f5:2e:12:8b:32:77:23:51:88:db:67:
74:97:45:84:ab:8b:8d:42:4f:59:f0:e9:d6:6a:99:00:f4:60:
80:8c:96:72:a7:c6:09:2d:8a:c3:38:e5:ca:cd:86:96:4c:7c:
50:93:ea:4b:70:68:28:8b:0f:a2:25:0e:b7:05:d9:a2:ee:8d:
35:3d:4b:25:cd:e5:09:bd:60:e4:05:3a:b1:2d:9d:92:46:69:
e6:0a:56:ed:20:e1:6f:da:09:40:22:b9:4a:88:05:48:d5:67:
cc:05:45:a2:52:b3:fe:e4:ea:ec:07:22:9b:76:b7:db:db:cf:
50:8a:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:11:56 2025 by rpki-client