
$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
File:                     296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft (raw, json)
Hash identifier:          V9+sXIpwMKZm86gfOYPEiQnx4YUGlOqUSEJNUX6IMaY=
Subject key identifier:   87:82:F6:91:66:C0:5F:14:0A:E7:55:AB:5D:14:7B:C8:5D:26:0F:51
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       1BFA0DDB3A139A629239177CA84646AA3D716C88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
Manifest number:          30
Signing time:             Mon 03 Nov 2025 19:35:02 +0000
Manifest this update:     Mon 03 Nov 2025 19:30:02 +0000
Manifest next update:     Tue 04 Nov 2025 21:35:02 +0000
Files and hashes:         1: 323830343a353633303a383030303a3a2f33342d3334203d3e20323637393832.roa (hash: e2Pv5RMrLEWnZedVRmHvF3K76dksCIU3TDeqXumy11A=)
                          2: 323830343a353633303a343030303a3a2f33342d3334203d3e20323637393832.roa (hash: f9oD6suBN2i0icLEQlb7kKJnqSku0tyk+HCPKJWJ+js=)
                          3: 296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl (hash: GNWrRUFTuic+VQJ7vwidR4mWXc7EDXbF3pTfrLFQbsE=)
                          4: 34352e3136372e32392e302f32342d3234203d3e20323637393832.roa (hash: SIbrx2B5742GrdoaylzjlpV8dfnFISkAsYh8SJnHtrY=)
                          5: 323830343a353633303a633030303a3a2f33342d3334203d3e20323637393832.roa (hash: QSUi8Vt1LKIJgkkIiqtTxGUdWoSTA+GYlOfGbKnTE/Y=)
                          6: 323830343a353633303a3a2f33342d3334203d3e20323637393832.roa (hash: ai66r+DzujauIIE3JHyH3QPR6xaWx0fDbGIYITmfag0=)
                          7: 34352e3136372e33302e302f32342d3234203d3e20323637393832.roa (hash: frGYKa8SaoBTvjw98PkiUOVzVKuiSv3XydiaAkXkCzo=)
                          8: 34352e3136372e33312e302f32342d3234203d3e20323637393832.roa (hash: +OID8zmPwy3mT3bvb0BNuZ4L5qjoc2Ytnj/J/WbPfUg=)
                          9: 34352e3136372e32382e302f32342d3234203d3e20323637393832.roa (hash: ucC5snWhg5qA4rU4vbaD94g5k/dGiPGR9drh36AdBfk=)
                          10: 323830343a353633303a3a2f33322d3332203d3e20323637393832.roa (hash: /7V5NdPBrVLXq/Ni3PZU5zqBLe7E2WqF6r8EsPREJcc=)
                          11: 34352e3136372e32382e302f32322d3232203d3e20323730393330.roa (hash: ccsZ0NYjs+21pPs2m+lFpbFDcE/aeNoeXMBC189LKCw=)
                          12: 34352e3136372e32382e302f32322d3232203d3e20323637393832.roa (hash: 8F6avyfAtGRsXclQrkpjm5tfq/ubrZthAH7j+V6RYPk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:35:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fa:0d:db:3a:13:9a:62:92:39:17:7c:a8:46:46:aa:3d:71:6c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Nov  3 19:30:02 2025 GMT
            Not After : Nov  4 21:35:02 2025 GMT
        Subject: CN=8782F69166C05F140AE755AB5D147BC85D260F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:98:e2:d6:d6:41:ed:7c:e7:e1:0d:d8:b1:
                    c7:5c:f8:b2:96:0a:68:3d:f0:24:38:d3:20:30:4d:
                    06:74:a3:a2:8b:5c:00:18:37:d1:1b:db:6c:0a:bc:
                    cd:d9:22:97:e0:f2:94:d3:c1:c0:f6:e6:2c:03:7a:
                    e2:92:77:9f:93:6c:09:25:bc:d8:87:58:2c:fb:95:
                    7a:f4:0f:21:33:5d:c9:3b:2b:44:e9:a5:35:94:d4:
                    13:c7:c1:02:b5:60:08:fa:36:e8:c6:be:76:3e:97:
                    21:eb:d5:fa:9d:77:e6:6c:5d:32:b6:49:a1:b7:08:
                    c3:55:f8:fd:6d:ab:a6:81:97:a2:0e:61:c8:c5:ac:
                    ca:eb:6b:c4:52:ee:b1:18:0b:c9:10:46:d5:53:46:
                    7a:27:56:bc:ee:dc:07:17:d7:98:70:e5:b3:94:ef:
                    e0:8f:ab:c8:72:5c:ce:2f:00:b4:72:8b:88:95:9b:
                    94:cc:80:34:bb:1c:91:94:bb:0d:b9:80:34:98:64:
                    77:e2:6b:8b:ba:eb:99:e0:2a:c5:60:94:8d:04:b2:
                    c6:cd:b3:e3:cb:ff:c9:03:0f:ba:ff:1c:d9:ba:96:
                    4b:c2:77:c5:32:2e:64:d3:98:f8:40:50:9c:20:5f:
                    ed:1b:16:f2:c2:c2:47:73:de:a9:e9:b6:f9:cd:39:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:F6:91:66:C0:5F:14:0A:E7:55:AB:5D:14:7B:C8:5D:26:0F:51
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         20:c0:64:97:20:b6:6f:85:38:28:af:58:bd:d4:05:9e:ce:54:
         ba:66:18:19:8e:68:83:b2:b5:b9:09:37:69:84:28:b9:54:bd:
         8a:92:cb:dc:3b:e0:c2:c4:1b:09:04:f2:83:91:bd:ff:58:26:
         98:db:b3:88:3d:a0:a3:12:1c:06:25:eb:86:5d:ac:81:8d:27:
         81:2f:ef:23:8c:21:34:c7:1d:dc:32:dc:4c:8b:c3:ab:35:05:
         7c:39:0a:d4:63:33:21:02:33:95:74:96:db:ba:94:ff:7c:9c:
         df:24:ab:a0:a9:dc:b6:81:82:58:82:38:00:d6:01:f3:df:dd:
         a6:56:0d:da:05:87:15:20:54:c7:eb:fa:56:7d:06:51:39:ba:
         22:04:dc:26:a0:9e:21:6d:b3:c2:76:75:1b:a5:5f:2d:32:b4:
         ac:02:b7:ac:8b:19:07:36:0f:b6:d3:5a:69:4a:b3:33:54:8a:
         a0:8d:9e:c9:1e:25:57:39:a4:51:d2:3a:46:56:08:31:37:30:
         59:de:46:27:8e:91:94:93:18:bf:27:7b:bf:ad:c2:f8:5f:9e:
         d1:08:b3:8d:89:30:c7:ec:51:19:a1:c2:68:02:57:a5:50:db:
         cd:7d:86:4e:e0:1d:7d:0e:75:04:94:3a:ee:21:1a:74:d5:41:
         d3:a8:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:05:32 2025 by rpki-client