
$ rpki-client -vvf rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
File:                     D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft (raw, json)
Hash identifier:          W1WRd2NOzMVWQFYHxNczCraUmDB5h4QY4omFvVQPqnU=
Subject key identifier:   30:02:5F:21:48:02:DC:0B:5A:93:83:58:A5:99:C2:24:2A:91:A8:3D
Authority key identifier: D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
Certificate issuer:       /CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
Certificate serial:       58F3D6635ECCF4A7715D4188BF1FD7E006B42008
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
Manifest number:          0304
Signing time:             Mon 03 Nov 2025 12:33:34 +0000
Manifest this update:     Mon 03 Nov 2025 12:28:34 +0000
Manifest next update:     Tue 04 Nov 2025 14:17:34 +0000
Files and hashes:         1: D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl (hash: vr2HEg2aGgSKyCQ7jVlQMprM+m3jzodrAL+VOQoUuMM=)
                          2: 3133312e3130382e32382e302f32322d3234203d3e203631363539.roa (hash: LpLs+i3g/uLpn4OYQy4EM5R0tGf85XQBkDf3K9t6dhk=)
                          3: 323830343a316338343a3a2f33322d3438203d3e203631363539.roa (hash: nZ1gopaqkmRR4chzafMFQB8Y4M4MiBNQU4L++aKleIU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
                          rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:17:34 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f3:d6:63:5e:cc:f4:a7:71:5d:41:88:bf:1f:d7:e0:06:b4:20:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C94E0B7C905030F4DB01C33BF8C1682B2E042F
        Validity
            Not Before: Nov  3 12:28:34 2025 GMT
            Not After : Nov  4 14:17:34 2025 GMT
        Subject: CN=30025F214802DC0B5A938358A599C2242A91A83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:2b:82:3a:5e:18:9e:ae:13:f1:7a:9c:d6:
                    46:28:ca:86:5d:5e:1e:02:7e:77:11:24:59:dd:b6:
                    25:77:99:10:d9:63:ab:10:9c:1c:d1:a1:e9:14:90:
                    58:dd:87:ea:99:e7:c3:15:33:ba:ff:49:20:cf:9e:
                    54:34:30:0f:05:fa:97:c8:60:3d:d2:fe:6b:3b:82:
                    40:1b:25:2e:37:d5:39:f1:57:6e:05:cd:a1:ae:98:
                    34:06:d9:0d:37:6a:7b:32:c9:55:28:6a:5b:54:61:
                    d2:f3:be:ca:31:f1:2a:37:e5:34:12:20:be:8a:66:
                    04:e3:b9:35:dd:ae:ce:aa:ea:ae:8d:43:4d:5e:dc:
                    fa:68:b6:05:dd:a3:79:89:2e:4f:66:27:2c:8b:31:
                    80:5b:f5:4b:0a:b0:84:3e:46:37:d7:c4:4a:0e:b1:
                    39:8e:a5:f3:ce:d6:50:e4:05:c6:0e:e3:c4:c2:d3:
                    78:4d:26:08:00:9d:81:47:00:ca:ed:4f:a0:ad:b3:
                    74:67:64:c8:16:d2:58:2d:e5:05:c6:75:32:b6:56:
                    3c:1d:ea:c6:46:4d:6c:95:a9:bb:e0:8e:b0:8b:33:
                    1e:4e:6f:f1:fe:80:64:da:f5:94:7e:30:17:6e:bf:
                    d4:d0:a9:68:5d:ac:69:1d:a3:8c:56:72:69:e4:ae:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:5F:21:48:02:DC:0B:5A:93:83:58:A5:99:C2:24:2A:91:A8:3D
            X509v3 Authority Key Identifier:
                keyid:D9:C9:4E:0B:7C:90:50:30:F4:DB:01:C3:3B:F8:C1:68:2B:2E:04:2F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EP8YnvYer8ik6M3PLht3qXWcuYhQ5bZYgW5aLswQXdeY/1/D9C94E0B7C905030F4DB01C33BF8C1682B2E042F.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         46:68:7e:b6:67:da:e8:a7:a7:54:a7:4d:f4:54:1a:1d:96:bd:
         37:cb:83:70:2d:5e:9a:55:11:27:fb:c3:5f:b6:b5:e6:4e:ae:
         cf:38:0b:95:79:ab:60:ac:54:9f:b9:e2:be:41:5c:17:88:29:
         2d:9d:23:c1:00:29:ca:00:95:a9:f7:cc:0a:99:b4:84:c8:97:
         8b:db:74:d3:c8:31:6d:57:9e:d0:95:d8:bd:35:03:d2:7f:b6:
         e5:c0:03:64:aa:f2:77:80:b5:e3:33:76:a3:8f:e6:c0:01:35:
         7a:2e:1a:50:ef:47:50:bb:69:24:30:1a:0c:5b:3d:c8:c9:07:
         f9:7d:d1:49:d0:56:d1:05:8a:95:12:9b:5d:05:30:89:41:36:
         b4:c8:77:b0:cd:4f:94:e4:b5:9a:74:2a:96:a0:72:dd:fa:be:
         ee:6e:9a:21:19:88:eb:70:48:22:28:8e:7b:55:fb:a1:9f:07:
         21:fd:22:2a:1e:79:41:57:db:48:fb:e1:9e:a6:9d:c7:6b:76:
         93:ef:e7:7b:f1:c5:5c:e1:8c:01:c8:ec:f0:c9:ad:f8:de:95:
         45:bc:97:bf:c3:0c:5c:7a:42:79:d6:6f:ce:5a:b5:ba:d6:a7:
         75:a0:84:41:46:59:03:bc:82:82:d1:c0:b0:0b:3f:2d:04:b6:
         60:e9:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:06:49 2025 by rpki-client