
$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json)
Hash identifier:          ikElFfjLSBRqklki5QBbU1hy/pfroM3zX+68iTFy/GE=
Subject key identifier:   26:6E:8A:FD:0B:DB:EA:95:85:A5:FD:FC:B2:33:56:78:00:3B:FD:C1
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       2EC711C0218B65F472495F58ABF5DA7FE44A0479
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 20:43:27 +0000
Manifest this update:     Mon 03 Nov 2025 20:38:27 +0000
Manifest next update:     Tue 04 Nov 2025 21:02:27 +0000
Files and hashes:         1: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: jQJWw8X3LDJrTgI0zL1FRYfj5oQwQjVkmPgJnvL5k+k=)
                          2: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=)
                          3: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:02:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c7:11:c0:21:8b:65:f4:72:49:5f:58:ab:f5:da:7f:e4:4a:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Nov  3 20:38:27 2025 GMT
            Not After : Nov  4 21:02:27 2025 GMT
        Subject: CN=266E8AFD0BDBEA9585A5FDFCB2335678003BFDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:06:b9:d7:be:f4:04:e1:e6:19:ac:15:f9:
                    55:d5:cf:75:69:e9:a0:e7:6c:95:66:8e:28:4c:0a:
                    61:48:99:8c:57:a2:40:4e:1e:d7:49:47:09:e4:e9:
                    d6:2e:64:d7:90:26:34:c9:60:6d:22:57:ea:65:9a:
                    19:90:14:81:d7:15:22:35:4e:c3:ec:21:73:09:5a:
                    d3:a2:e1:eb:8c:4f:b4:d8:eb:6e:2a:b3:75:c6:2d:
                    28:75:d2:ae:2d:85:09:f7:5d:ae:28:87:f0:61:28:
                    cd:87:f7:5c:94:71:5c:c0:b6:b8:05:82:aa:19:3d:
                    a9:de:95:27:e8:b6:fa:d3:93:ce:85:2f:cb:58:bd:
                    0d:8e:87:c7:a4:a4:48:64:ce:0f:e3:61:11:bc:6b:
                    cd:c3:0a:04:20:8d:37:3b:23:64:7a:ee:48:37:9f:
                    7c:23:4e:1d:42:93:37:3c:e9:dc:b0:80:22:f1:4d:
                    93:e9:31:27:f0:ae:5b:d8:38:c3:cf:3c:43:a8:ea:
                    52:b2:43:72:4c:9d:f7:85:0b:9e:ba:50:9c:3a:0a:
                    ef:0e:dd:8f:6f:74:5d:68:15:3e:2a:e1:bc:3b:6a:
                    b3:bd:10:48:b4:4e:9b:9c:34:55:07:78:de:bf:d7:
                    91:b8:1f:24:ad:26:d3:1a:10:b0:5d:55:a8:6f:6a:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:8A:FD:0B:DB:EA:95:85:A5:FD:FC:B2:33:56:78:00:3B:FD:C1
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2b:71:7b:f4:56:3e:12:4b:2c:5b:7e:da:13:a3:0d:0d:6b:80:
         47:73:3b:e2:41:7d:15:d1:b1:77:e5:2e:40:83:78:79:5e:a1:
         95:dd:cf:9a:ab:c7:fb:0f:51:65:cc:72:87:8f:a9:70:dd:8b:
         95:03:65:bb:e8:22:24:1e:a7:a5:29:94:36:60:0d:45:f8:33:
         bb:d7:d6:f2:b4:c6:76:d2:a2:54:12:b0:db:2a:2e:22:34:92:
         5d:d4:65:33:6f:d5:d7:c9:52:59:f8:67:c6:32:df:cd:e9:ce:
         42:a1:bb:6a:fa:c2:1a:2e:3c:8d:3e:81:d0:30:b5:80:2a:2e:
         2c:3c:6b:26:88:ce:b9:38:85:22:22:11:95:fc:0c:23:8f:9d:
         97:00:8e:7c:40:43:4e:ba:7d:4f:9f:b4:a7:f0:be:59:f6:c2:
         04:dd:43:35:b4:c8:1c:0a:16:ea:eb:cb:33:f4:36:fd:a6:f5:
         91:6f:47:46:37:96:97:e8:54:8f:c3:eb:27:7b:d6:64:e7:ad:
         6f:9b:24:6a:d5:07:e5:ed:28:1c:a0:4e:b0:1c:c8:6d:a7:15:
         b8:21:43:bf:d6:b7:ae:1e:95:64:ec:eb:cb:53:1e:50:bf:84:
         74:79:d3:e3:60:6f:10:1c:dd:33:6d:e2:b9:c0:64:f1:57:fd:
         81:e4:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:26:23 2025 by rpki-client