
$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
File:                     CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json)
Hash identifier:          xhfDyT0gwxkn8faj1e5du8jpM9Aeb4MCKqm/hx/wKyY=
Subject key identifier:   70:97:56:E7:A4:E2:77:CD:C3:31:F2:FF:69:B3:FE:7C:9D:28:74:17
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       22D1C12DAD11FB341953FEB7439C6196F8242800
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
Manifest number:          0314
Signing time:             Mon 03 Nov 2025 11:09:26 +0000
Manifest this update:     Mon 03 Nov 2025 11:04:26 +0000
Manifest next update:     Tue 04 Nov 2025 12:19:26 +0000
Files and hashes:         1: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: ssuLAytq/OHz9ywB7G0F/3NjIxPtlXCrc4g55U9IvkI=)
                          2: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: 6qqQly8fj1pIk6aSIlrvnSFvdMYQB2GBvscX+DADI14=)
                          3: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: mWceP2rzR05Egi1VVd5zyaviINwwnfTfMxgvkPFbjos=)
                          4: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: RJSiz6X40u1exZ0lylVroJmRjsSn1sj876c4G/oZyzw=)
                          5: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: pWacx1NTt02D42bFq04vbBmqRB/XXWUQOecty6CnIa0=)
                          6: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: C8nl6i1YJBXuY7KqnNcHZ82XxRjwU4qb4KZwT3Ruswc=)
                          7: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: OC3c68ya1PPbAicf05mvbZC/zGEFhsbFN/1MOqy5Pec=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:19:26 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d1:c1:2d:ad:11:fb:34:19:53:fe:b7:43:9c:61:96:f8:24:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Nov  3 11:04:26 2025 GMT
            Not After : Nov  4 12:19:26 2025 GMT
        Subject: CN=709756E7A4E277CDC331F2FF69B3FE7C9D287417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:6b:b2:a0:a0:2c:32:b2:eb:c0:94:71:9a:
                    61:6e:ac:30:bc:99:d8:2f:12:09:bb:6d:1b:ed:f1:
                    80:72:b9:66:c4:f8:ca:de:a5:19:2b:33:06:05:a9:
                    a9:37:4c:a0:c1:24:5f:c9:32:1a:60:f7:20:1d:79:
                    80:ae:39:bc:20:98:7b:e9:b1:f4:d0:b7:90:06:7d:
                    8a:ce:e1:7a:65:ba:d3:51:1a:60:e5:a3:75:9b:e6:
                    39:d0:de:95:27:5d:68:ad:26:de:8c:9e:1f:48:67:
                    03:77:a2:71:23:1f:77:84:ab:ee:3a:6a:10:76:09:
                    56:58:2d:8a:90:1f:b0:2e:34:da:52:2a:d9:21:4b:
                    cf:8b:db:0b:06:8d:25:9b:57:c2:73:f9:40:86:06:
                    f7:9f:36:fc:fe:7c:2d:58:ab:eb:5e:6e:ba:64:9d:
                    6f:dd:3f:94:51:11:f5:38:30:25:23:16:aa:7a:ec:
                    9a:9b:f3:53:cf:75:3e:b1:ed:1b:8b:c6:fc:89:13:
                    40:1e:f7:14:65:47:89:93:47:b6:9e:2f:7d:47:e1:
                    48:a4:35:5a:d5:89:87:8d:bf:da:5e:86:75:5f:5d:
                    ae:11:d3:40:c9:62:df:2f:e8:a4:5a:4d:57:73:59:
                    41:fd:58:1a:2a:8a:7f:9c:12:7d:85:b8:7c:58:9a:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:56:E7:A4:E2:77:CD:C3:31:F2:FF:69:B3:FE:7C:9D:28:74:17
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1e:61:39:96:b0:40:be:c6:f7:9a:2a:15:2b:9d:0e:4a:74:44:
         7f:de:71:fe:c8:47:b3:24:b0:04:2e:c8:c0:03:a8:50:16:b0:
         54:cd:ed:2c:49:a9:dc:09:6d:00:f5:c1:18:4a:03:65:13:5f:
         43:ca:93:b4:97:60:a6:32:48:c4:e6:17:56:23:0f:77:6f:8c:
         2a:25:ae:29:e1:fd:bf:9d:94:33:74:3c:de:19:4b:dc:1d:82:
         ec:3b:73:af:80:86:83:64:29:fd:b3:a8:89:47:60:63:e3:6b:
         ec:60:91:06:25:3e:6f:ff:9b:d3:df:86:53:ba:4f:2c:d8:25:
         c9:24:07:57:c6:df:81:94:ce:9c:29:1d:1e:72:c1:d6:ce:3a:
         17:f7:79:1e:e0:44:43:79:c0:35:90:aa:9d:62:31:06:a7:29:
         c5:55:ba:44:ba:a4:e8:f5:f7:e6:39:20:f1:af:63:b0:a8:85:
         3b:e1:a4:d3:e0:36:04:45:08:07:df:d4:c5:0a:f5:2b:f0:6d:
         7d:fe:c6:a4:af:3c:00:6b:d7:56:34:43:ff:b7:6d:8f:dd:54:
         a5:8e:d7:68:38:14:9a:42:e6:cc:15:ad:de:1e:c8:11:e1:8f:
         ad:69:32:d5:e1:86:6f:7e:19:d9:66:27:7b:d1:3f:b3:45:0c:
         85:c6:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:09:00 2025 by rpki-client