
$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
File:                     64F0BC2149C243BFA686EEB3823182E372255DFA.mft (raw, json)
Hash identifier:          bKLfuVAK1uXatltCkzyGdoQGNnxeU8BBc2UkSFdtXK8=
Subject key identifier:   A9:E5:AB:85:49:43:CF:4A:A0:4A:B4:CF:B6:8B:3F:04:48:A9:A8:BB
Authority key identifier: 64:F0:BC:21:49:C2:43:BF:A6:86:EE:B3:82:31:82:E3:72:25:5D:FA
Certificate issuer:       /CN=64F0BC2149C243BFA686EEB3823182E372255DFA
Certificate serial:       4377F5662E9D596543BB3B34BC765F2A10D76BED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
Manifest number:          17
Signing time:             Tue 04 Nov 2025 01:56:00 +0000
Manifest this update:     Tue 04 Nov 2025 01:51:00 +0000
Manifest next update:     Wed 05 Nov 2025 05:02:00 +0000
Files and hashes:         1: 323830343a356332303a3a2f33322d3334203d3e20323638383930.roa (hash: eiH19wRtxxKWmEYwwaGj1ft3uaL5tG3RN0O0K9ps7S8=)
                          2: 64F0BC2149C243BFA686EEB3823182E372255DFA.crl (hash: nRDVobs8jLZKxYkjbbAopAz1vHkNHvd1nMFCubYcr44=)
                          3: 34352e3137352e37362e302f32322d3234203d3e20323638383930.roa (hash: nzWORvceCO3rXo6Eca3kRIF+Td54EnyUicBgbeaIvhA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:02:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:77:f5:66:2e:9d:59:65:43:bb:3b:34:bc:76:5f:2a:10:d7:6b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F0BC2149C243BFA686EEB3823182E372255DFA
        Validity
            Not Before: Nov  4 01:51:00 2025 GMT
            Not After : Nov  5 05:02:00 2025 GMT
        Subject: CN=A9E5AB854943CF4AA04AB4CFB68B3F0448A9A8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:77:95:62:a6:2e:3a:f2:28:ca:6c:ae:eb:
                    de:ba:2a:74:ac:2c:9b:ea:53:9c:f0:3f:c7:da:db:
                    5b:65:96:f1:1f:7c:6a:b9:b2:df:f6:2b:3c:64:dd:
                    c7:d5:cb:12:df:9a:ac:c1:6f:27:30:0c:8d:f3:d3:
                    24:c6:86:3c:2e:e7:46:06:bb:3d:ae:08:4b:4b:04:
                    b5:f1:72:83:a9:af:aa:a9:af:03:9d:eb:11:2a:d1:
                    4d:b8:9b:c5:29:cd:40:81:e9:9a:65:60:3c:e3:89:
                    45:c2:6c:74:39:87:5b:86:7b:60:b0:46:cb:d0:4a:
                    42:2b:3c:7d:02:0a:90:c1:59:b4:b7:bb:c9:ed:fc:
                    aa:e5:15:1d:9a:bc:28:2f:4e:3f:fb:d1:88:f0:64:
                    40:1c:95:a9:e6:ab:20:30:8a:67:fa:3f:51:9f:a5:
                    9d:d3:25:9a:85:dd:d9:01:7e:f5:85:cd:76:df:fc:
                    06:07:41:92:3a:57:22:ba:a9:27:e0:28:69:78:da:
                    cb:d0:17:aa:6f:30:7b:cd:99:74:5b:78:86:f1:3a:
                    20:8d:c7:df:58:c3:5b:3d:8b:26:47:c0:68:4d:75:
                    6e:4a:fb:82:ba:5b:c6:6d:bf:7a:a6:a8:7f:54:f9:
                    03:5f:fd:f9:ee:54:da:6a:a1:a5:f7:0e:50:a3:5c:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:AB:85:49:43:CF:4A:A0:4A:B4:CF:B6:8B:3F:04:48:A9:A8:BB
            X509v3 Authority Key Identifier:
                keyid:64:F0:BC:21:49:C2:43:BF:A6:86:EE:B3:82:31:82:E3:72:25:5D:FA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F0BC2149C243BFA686EEB3823182E372255DFA.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/64F0BC2149C243BFA686EEB3823182E372255DFA.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:75:48:5c:a8:3f:0d:d1:48:76:f5:fe:7d:e7:1c:0d:44:
         f9:67:41:23:d1:6d:5f:36:4f:b4:80:ba:5e:64:37:9d:a9:27:
         96:32:8c:92:59:46:3f:8e:d1:84:15:a8:0a:98:f1:61:4c:c3:
         47:37:96:78:8c:04:90:36:0b:2d:3b:51:f8:a3:c6:01:a6:3e:
         42:3c:a7:81:74:f4:6e:0e:c5:0e:63:09:47:6f:04:56:db:4c:
         53:32:7a:47:94:15:9f:eb:09:5c:61:95:1b:54:66:7c:62:ad:
         65:32:f9:33:85:bf:30:c4:04:20:18:c3:37:46:88:e0:4b:5a:
         3c:2a:4d:c2:ef:86:74:8d:f1:93:20:d1:f7:c2:1d:49:48:db:
         80:61:a4:fd:e6:08:91:f4:ff:42:b8:9b:e6:00:92:de:92:53:
         49:e7:2b:f1:a8:c0:06:af:4f:3d:3e:f5:9a:32:8d:fa:a7:24:
         4d:a0:9d:eb:a4:7b:19:99:b9:fd:a5:00:e1:44:d7:50:c2:8f:
         61:e1:94:f6:50:d9:b3:37:0b:bb:3a:7d:8c:ce:19:82:ec:11:
         c3:e0:63:48:b8:e4:6f:6f:2e:54:86:3c:8c:02:cc:e0:84:de:
         29:6e:72:a2:a0:2f:8b:d9:6c:5e:9b:12:da:d5:66:03:40:ec:
         e3:b5:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:05:43 2025 by rpki-client