
$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
File:                     107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft (raw, json)
Hash identifier:          wFpBCxr/vvXISr4338C5G8k9Eo53HY0KoWk3jF4fnEs=
Subject key identifier:   74:8D:B9:9F:5C:59:75:24:93:17:BA:96:79:7A:0A:F3:58:2D:80:10
Authority key identifier: 10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2
Certificate issuer:       /CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
Certificate serial:       07B160EEE907BC10C246349887151BCE5A93885B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
Manifest number:          01AB
Signing time:             Mon 03 Nov 2025 13:50:02 +0000
Manifest this update:     Mon 03 Nov 2025 13:45:02 +0000
Manifest next update:     Tue 04 Nov 2025 13:50:02 +0000
Files and hashes:         1: 3139312e372e3130342e302f32322d3234203d3e20323731303134.roa (hash: XUsSySj6ADF+27v7JUTc9Ng2e8dEvdj+QtYffBX/3BM=)
                          2: 107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl (hash: FHqwCiemKpW8fNFxVOYVBuDSDfuSycMjbj2WD9LJoj0=)
                          3: 323830343a373466343a3a2f33322d3438203d3e20323731303134.roa (hash: ppHLnUyIsK5T+46iMty9nXKM89F82FfFvAYn8gOfxX8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl
                          rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:50:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b1:60:ee:e9:07:bc:10:c2:46:34:98:87:15:1b:ce:5a:93:88:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2
        Validity
            Not Before: Nov  3 13:45:02 2025 GMT
            Not After : Nov  4 13:50:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:cd:b4:ae:cb:5d:3c:2d:7f:45:df:31:0c:
                    99:ff:9f:4f:a9:b8:52:a2:87:d8:12:1d:d2:92:bb:
                    4f:16:81:ed:00:27:8d:2d:1e:f6:e7:b2:3b:28:05:
                    42:5b:6c:ab:6b:b2:cd:17:4d:57:51:a0:e5:7e:c0:
                    79:a4:aa:b0:af:3e:f5:f9:14:c1:a7:bb:a5:95:4c:
                    9b:b1:e6:5e:61:ee:6d:8e:75:bc:0e:ca:51:1f:d7:
                    a2:71:65:64:72:1d:70:5f:d2:21:26:cf:c8:39:64:
                    e2:97:7e:b4:da:3c:68:c6:34:84:a8:21:36:53:b3:
                    1c:28:1c:1c:1d:9c:ad:e1:fd:07:2c:14:0b:bc:50:
                    f8:31:5e:d7:48:f9:3e:c5:85:39:87:d3:4b:26:48:
                    2f:39:c0:ff:67:4c:5f:1a:f3:68:dd:91:04:a3:ef:
                    4c:eb:57:f3:2b:20:53:64:cd:bc:19:aa:6f:d7:f0:
                    ac:73:77:4d:0e:70:92:c0:f5:b7:96:37:93:a9:72:
                    c3:70:ae:9f:dd:0d:8e:46:5e:30:f2:4c:0c:b0:28:
                    39:21:dc:ba:d4:1b:d4:11:4e:2d:97:be:ca:22:02:
                    ae:f6:cf:59:7f:1f:4c:12:5a:72:14:7d:84:e7:d9:
                    e3:c8:ab:5b:c0:65:8a:67:dd:68:ce:a3:8d:d3:6f:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8D:B9:9F:5C:59:75:24:93:17:BA:96:79:7A:0A:F3:58:2D:80:10
            X509v3 Authority Key Identifier:
                keyid:10:79:56:E9:CD:07:A3:AA:E9:EF:EB:AE:A7:DD:FB:1C:27:A1:16:D2
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/107956E9CD07A3AAE9EFEBAEA7DDFB1C27A116D2.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         51:e2:d8:7b:3f:6d:95:a6:a5:4f:2b:b0:94:28:5f:1e:36:8b:
         44:30:af:0f:a6:09:f8:86:1f:10:a2:91:bb:ce:f6:06:72:83:
         16:0c:87:cd:f1:49:40:48:4d:8d:1a:9e:57:62:f3:61:d1:fa:
         97:95:08:d4:33:6b:80:78:fd:8c:b4:1c:ff:03:38:5d:75:f7:
         73:37:1c:53:f2:ea:97:ab:49:2a:92:79:c0:15:09:fe:ec:a4:
         5e:1c:5b:2d:71:e0:bb:a7:4e:9d:7e:7a:3a:12:a7:30:5f:eb:
         8f:b5:23:c4:cf:7d:45:4b:87:0b:24:6a:fa:11:97:8e:80:ec:
         78:40:1d:29:8e:3c:0f:ad:34:9a:f3:51:85:48:96:9e:a6:90:
         e2:b5:ef:fe:70:c8:50:61:ed:d2:ca:3a:32:ad:fb:6b:05:cd:
         57:6c:8f:e8:0c:59:6b:24:10:68:3c:9b:da:fd:cb:5c:b1:b0:
         c0:5f:7a:74:b2:38:5a:e7:55:b2:81:2d:64:48:d1:4c:85:62:
         8f:34:6f:af:2f:91:32:c8:34:28:ca:71:ae:44:a2:18:42:49:
         5b:46:fd:aa:6c:b3:a5:9e:db:8c:59:40:61:de:c2:05:c7:4b:
         83:61:b4:f7:b6:8a:a2:e9:82:49:4a:09:46:2a:03:98:5e:99:
         4d:25:fd:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov  4 05:06:40 2025 by rpki-client