
$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File:                     CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier:          QRIl7YPboIdCnF1OvUe5Nba3J4/mXTKmCLSNJE9Qg90=
Subject key identifier:   64:68:48:6C:D3:6E:9A:06:05:E0:12:9C:12:99:DF:1D:C9:4B:F3:02
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       3591DA58A74A66F4F5A4D7F812F1AD1403D503DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number:          0303
Signing time:             Mon 03 Nov 2025 06:18:27 +0000
Manifest this update:     Mon 03 Nov 2025 06:13:27 +0000
Manifest next update:     Tue 04 Nov 2025 08:02:27 +0000
Files and hashes:         1: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: 5G9Dy/D8jUa6k6N7o6A0OHuAONqqnFUQzjSegVsSatU=)
                          2: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: 0I6R76WFWVe6GvnC6HPSO5DNoIpkRloxekrdv5uaocA=)
                          3: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: xee9sI4lZhpA/ae1SfSHZt6s0IIwr6d9n4pRuri1Uv0=)
                          4: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: rYD65K+RJQsl0pwQHfCLtTreVoPv3bWQ8ux93C59ieY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
                          rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:02:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:91:da:58:a7:4a:66:f4:f5:a4:d7:f8:12:f1:ad:14:03:d5:03:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Nov  3 06:13:27 2025 GMT
            Not After : Nov  4 08:02:27 2025 GMT
        Subject: CN=6468486CD36E9A0605E0129C1299DF1DC94BF302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:50:83:b8:5b:a2:ce:cd:98:f0:09:66:df:
                    30:2d:bd:b6:f1:8b:57:8f:fc:e1:11:1c:ee:5e:17:
                    9a:80:64:e7:d7:2f:e9:d0:1a:2a:85:0f:cd:a7:94:
                    a9:1e:db:cd:71:e0:d7:d1:14:9b:8c:4e:2b:b4:9b:
                    ee:4b:a9:ef:17:9f:8a:32:aa:fc:0a:5c:f9:3c:14:
                    f5:8b:08:3f:c6:2c:d9:96:cf:24:2e:21:1b:b7:82:
                    04:54:00:1e:73:5e:48:db:f9:6b:e5:c3:b9:52:34:
                    b9:cf:4e:34:b6:e4:10:6e:78:5d:5c:c8:b3:ff:cf:
                    3e:b3:f5:38:0a:6a:1a:18:f1:2a:b5:e9:ec:56:50:
                    87:2c:30:d5:1c:53:f2:02:cf:6c:5f:18:96:a5:ca:
                    1e:b7:21:b3:ef:5f:78:24:b8:7b:26:8d:86:e8:09:
                    c0:cb:4c:05:df:b4:14:db:ae:54:13:6c:47:24:4f:
                    3a:ee:4c:a2:37:bb:81:e4:1e:39:5a:d9:4c:6b:b4:
                    cd:89:d1:c1:7d:64:13:4e:b7:42:08:50:00:4b:0f:
                    eb:8b:31:98:37:2c:d3:2f:c1:b3:3a:ca:3e:12:8c:
                    34:26:6c:23:90:f4:a1:35:38:f4:c8:2f:34:51:11:
                    24:98:7c:bb:96:6e:cf:da:63:02:26:01:cc:af:88:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:68:48:6C:D3:6E:9A:06:05:E0:12:9C:12:99:DF:1D:C9:4B:F3:02
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         71:86:46:f5:20:f9:56:09:7a:18:e5:be:70:8c:b3:55:3b:5c:
         22:fa:29:6a:90:fd:57:f6:3d:cf:d1:c0:ca:61:de:cb:ea:cd:
         be:fa:ef:6e:5e:be:67:30:dd:a7:bf:8f:ad:f9:d2:03:86:3f:
         84:0b:fc:a2:3c:6a:89:a8:ba:82:98:66:2c:0a:78:5b:d8:0a:
         85:84:38:68:a1:20:07:e0:3a:70:c8:75:8a:07:82:7a:7d:30:
         6b:70:b0:72:6b:6f:61:42:c5:a0:1b:36:2b:8f:57:8f:c2:7e:
         df:01:e4:02:41:21:84:76:96:d9:51:fe:8b:10:d2:f6:6b:33:
         e2:51:26:70:36:14:f0:82:39:89:9d:b0:73:a8:21:d0:6f:50:
         75:75:6e:55:e9:c4:ad:52:6a:30:40:5a:55:87:b4:bd:f7:d6:
         60:5b:25:c1:dc:04:8a:2a:c6:2c:c9:fb:9b:30:0c:77:70:65:
         37:66:34:55:d4:15:1f:be:88:a5:90:fe:3f:ae:b9:25:f5:04:
         af:6d:f9:4c:27:c5:21:10:1b:1e:c6:ad:6e:57:4d:5d:c3:54:
         ad:c0:df:65:2c:7c:22:82:b4:d7:38:cf:51:81:a4:36:9a:6b:
         38:19:fa:bc:2e:15:3c:c6:93:95:b0:72:8a:2f:a8:77:06:21:
         8b:4f:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:36:41 2025 by rpki-client