
$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
File:                     1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft (raw, json)
Hash identifier:          rE8uqrhFfzaLbwzla1nivlSiM1a/3w1h/SMv6to9aDg=
Subject key identifier:   91:68:98:9B:FD:7C:6A:A8:DA:18:E5:1F:20:A0:F7:6D:9B:2C:D7:BC
Authority key identifier: 10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
Certificate issuer:       /CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
Certificate serial:       1ECF891ADA8B9D1874DEF674526F888E816F6FA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
Manifest number:          38
Signing time:             Mon 03 Nov 2025 14:58:24 +0000
Manifest this update:     Mon 03 Nov 2025 14:53:24 +0000
Manifest next update:     Tue 04 Nov 2025 16:45:24 +0000
Files and hashes:         1: 34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (hash: Qz8oVXgN5YpEgYsxAfQi1SFoSqt45EkW4UjY0tA85ow=)
                          2: 323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (hash: 60BHpnz6u50/eMwN4Pe9Kfx9pF1BlKP6R240ePjTG1c=)
                          3: 1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl (hash: uLCuQ2PkSElZFP40cPhmnyHR8K0UWTJ2onqMImHnoeY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
                          rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:45:24 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cf:89:1a:da:8b:9d:18:74:de:f6:74:52:6f:88:8e:81:6f:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
        Validity
            Not Before: Nov  3 14:53:24 2025 GMT
            Not After : Nov  4 16:45:24 2025 GMT
        Subject: CN=9168989BFD7C6AA8DA18E51F20A0F76D9B2CD7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:93:8e:aa:8b:25:85:b2:80:0b:4a:ed:b3:
                    79:ef:55:56:61:10:d4:35:87:f7:01:65:c0:d8:46:
                    fc:42:93:d4:ed:52:0b:c2:e9:49:fd:1b:7c:6d:8e:
                    10:d3:d1:83:29:bb:87:07:d9:36:a6:dd:24:ab:df:
                    86:a2:4e:dd:98:c0:02:13:58:bf:5c:c8:ff:9b:e5:
                    57:51:d8:8f:e8:1f:d5:6a:cf:c5:3f:ed:7d:1b:11:
                    08:35:24:8f:d8:2e:74:a9:e0:7c:2e:29:63:3f:f7:
                    8d:ad:29:42:30:4c:f6:da:59:53:b1:c8:3f:d3:0e:
                    4e:37:8d:d9:f5:61:0f:32:be:73:db:bc:7d:fc:04:
                    30:a3:50:99:05:fc:a6:38:d1:1f:76:45:cb:4a:ac:
                    1e:b4:36:25:ec:7d:24:7b:e2:17:f2:9a:c4:76:4b:
                    5d:f0:88:76:e8:73:16:67:e7:d0:f9:97:af:d6:89:
                    44:02:6f:6c:c7:fc:f0:c7:46:a5:f5:c2:73:e8:ba:
                    ef:5a:7f:08:d9:28:e0:b4:69:a1:60:d0:01:8c:95:
                    38:3b:aa:ad:69:04:6f:73:d2:57:1d:cc:69:40:e3:
                    b5:b4:cb:eb:73:3e:0d:93:45:1b:43:04:b7:88:92:
                    c6:15:52:18:9d:ff:37:b8:a6:6d:08:e8:fd:82:e2:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:98:9B:FD:7C:6A:A8:DA:18:E5:1F:20:A0:F7:6D:9B:2C:D7:BC
            X509v3 Authority Key Identifier:
                keyid:10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         65:56:13:3f:75:af:ba:ab:72:73:71:cd:73:0d:65:ca:3c:00:
         b8:b6:db:46:df:ce:96:19:ab:a5:76:b9:2b:c6:e8:aa:59:92:
         38:f2:c1:b8:58:24:10:7c:03:44:82:8e:f3:b0:98:10:30:c7:
         7a:d9:f7:59:74:78:6a:2d:b1:18:ca:e9:fc:60:b1:f1:58:75:
         35:1b:d0:e0:fe:c2:5d:88:17:c1:6a:92:c9:94:c1:e7:94:14:
         bf:5f:2a:77:e5:d7:6b:04:56:99:84:bd:c3:cc:a8:26:7c:08:
         8b:a4:0d:65:02:ca:ae:ba:ff:fe:5d:dc:5e:e5:02:a9:b3:4f:
         7b:b8:8d:4c:c7:a0:62:c5:83:56:59:22:6f:91:bb:26:8b:28:
         aa:71:44:70:ff:fa:78:5a:09:1c:78:e3:00:57:11:ea:b2:99:
         c7:b4:d6:df:89:07:cb:10:0a:3f:bf:44:2f:51:d7:c0:8d:55:
         9e:7d:03:5d:2c:82:56:ca:f8:aa:c0:f5:5b:97:ee:08:60:8d:
         ec:f4:d0:cf:b1:a7:c1:ee:e0:5e:d7:f6:54:6d:4f:86:42:64:
         3e:d3:d4:aa:21:e2:e7:93:80:4e:1e:d5:75:21:80:1c:02:4b:
         4c:93:1d:31:66:ee:c6:2f:7d:c1:cd:1f:e6:c3:1a:be:60:9d:
         b4:b4:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:15:22 2025 by rpki-client