
$ rpki-client -vvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
File:                     624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft (raw, json)
Hash identifier:          uas4oUzX+sm8XPvHgW5gA8EqOfVl3Lzdzp7OBBCQKwU=
Subject key identifier:   EF:04:DE:FA:F0:F3:09:37:50:9B:BC:E3:E1:CF:57:7C:39:97:E5:79
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       6CFDF6A83F35B484F450CBE62A484BC5B49B2008
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
Manifest number:          31
Signing time:             Mon 03 Nov 2025 20:45:02 +0000
Manifest this update:     Mon 03 Nov 2025 20:40:02 +0000
Manifest next update:     Tue 04 Nov 2025 20:54:02 +0000
Files and hashes:         1: 3137372e3138342e3138362e302f32332d3233203d3e203532393233.roa (hash: GOSa0WZJcEkjSIjAJl0VUUC/RrHL89Y3FsGcW0WuPt0=)
                          2: 3137372e3138342e3138312e302f32342d3234203d3e203532393233.roa (hash: 8ouyOu5AlqqUp8kyJf415n6Iz+l4DoX0MRJdS3PNWuo=)
                          3: 3137372e3138342e3137362e302f32302d3230203d3e203532393233.roa (hash: 8ZFUoxLgSZ1DxrIPi+lxbHhqxY86uVD8wJvTxZNSkxc=)
                          4: 3137372e3138342e3137362e302f32332d3233203d3e203532393233.roa (hash: DkCiEKStfIHgO43kbu74AownWatynYXbVIvlhTlEHb0=)
                          5: 3137372e3138342e3137362e302f32322d3232203d3e203532393233.roa (hash: u0Sm26O6dSQIkWEwWNzVH6cTzHBoxuAHd7V7mjor3vM=)
                          6: 3137372e3138342e3139312e302f32342d3234203d3e203532393233.roa (hash: t9JuWBdF8ariGshz739nhMxR1KaZZ/nOk6B6uuvmtIU=)
                          7: 3137372e3138342e3138302e302f32342d3234203d3e203532393233.roa (hash: wfqXQBZkVckrhs9aLlBdM0VKK7cnWTFpqEEG9vNZXKE=)
                          8: 3137372e3138342e3138342e302f32342d3234203d3e203532393233.roa (hash: YUTF7zsVzBErSWBhymJo/CSv9hP9jprAVej9OFoWHpA=)
                          9: 3137372e3138342e3138372e302f32342d3234203d3e203532393233.roa (hash: 0gdtCQnmcKIx4efrwczVva3KQgPI8Xg4VsRZItrz4YM=)
                          10: 3137372e3138342e3138332e302f32342d3234203d3e203532393233.roa (hash: XxYvhV0Nxig+oz+bWXbMEe7YTY9r9oOnbM2o1AeUebA=)
                          11: 3137372e3138342e3139302e302f32342d3234203d3e203532393233.roa (hash: aGH0GbzEzquqiWX2pe5Gubj3h0eFkZ0vN/npQBFfTmI=)
                          12: 624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl (hash: 9smxQcycWfgWbI6m4O/6dETMoRon4MmGAE1rd9EYNC0=)
                          13: 3137372e3138342e3138382e302f32332d3233203d3e203532393233.roa (hash: TWHuYR9a22DnFMDFPjiGOD0mVPC2xZ1bvx2+YvRNKjw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:54:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:f6:a8:3f:35:b4:84:f4:50:cb:e6:2a:48:4b:c5:b4:9b:20:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Nov  3 20:40:02 2025 GMT
            Not After : Nov  4 20:54:02 2025 GMT
        Subject: CN=EF04DEFAF0F30937509BBCE3E1CF577C3997E579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:5a:88:7d:3c:3e:47:67:13:4f:0a:2a:83:
                    69:a0:65:de:a1:31:a8:32:43:e8:19:67:71:5e:d3:
                    73:1d:39:9c:30:6c:8e:57:b9:e4:bf:59:bd:7a:c7:
                    c8:1f:e6:76:48:63:bc:bd:ec:fd:8c:fc:5c:b5:16:
                    bc:45:c7:5b:bc:4f:c5:2e:06:76:d7:95:40:fe:d2:
                    df:29:d3:fd:e8:8e:2c:9d:4c:3e:7e:2e:bd:27:65:
                    46:a3:3e:76:cf:74:ea:17:0e:64:6b:89:4a:e2:3b:
                    05:1e:04:9d:0a:77:54:38:c4:af:df:16:5d:c7:d5:
                    85:33:cb:f6:3c:07:d8:72:bc:df:30:a4:55:6a:5c:
                    20:69:92:a4:9f:36:e8:a6:d8:0a:7d:2d:c8:de:03:
                    15:eb:9a:46:5a:cd:cb:16:51:03:6b:e3:bb:1a:89:
                    b7:f0:70:02:90:59:ad:4a:b9:f4:6c:4c:fc:48:ea:
                    d0:41:6f:51:f5:77:cf:09:56:95:ca:f9:43:28:7c:
                    4f:0e:b2:8d:1d:27:a9:53:4b:80:81:1f:67:9e:eb:
                    b5:60:7e:f1:9a:a1:71:93:a7:1e:d2:2d:2d:6a:bd:
                    e4:5d:60:7b:41:6a:ea:12:e0:c1:35:bb:4d:25:27:
                    34:24:9a:93:30:25:ec:df:9f:41:42:a9:70:88:de:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:DE:FA:F0:F3:09:37:50:9B:BC:E3:E1:CF:57:7C:39:97:E5:79
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:3a:8d:8b:39:3c:ec:d5:be:fa:df:32:5a:a4:86:64:99:8c:
         2a:9d:ba:be:0a:b2:98:2e:1f:4b:aa:48:2d:ba:74:c8:89:5a:
         bc:da:1a:21:ec:de:66:e9:59:0a:91:38:bb:ad:ee:42:ee:a2:
         46:28:2a:71:7c:24:b2:bf:ea:ca:41:ff:21:9a:f3:d1:f9:e6:
         67:9b:4b:25:70:ce:79:58:be:16:72:6f:f0:dd:0e:2c:28:c8:
         c9:f3:51:ce:ab:4d:40:5d:3c:24:50:df:77:e5:ff:74:65:d2:
         0d:ab:cb:43:83:ed:0c:76:5d:69:4e:5e:b9:ea:81:c2:7a:48:
         37:10:2a:9c:63:08:09:44:b8:9b:6f:28:af:b7:e1:fc:13:cf:
         56:38:7e:70:c7:de:e1:85:d5:67:b5:fe:05:31:c5:76:0e:f4:
         94:cf:c3:1c:e8:fb:fe:80:99:0d:bf:a8:76:fb:00:1a:63:d4:
         e7:c4:c5:1c:f1:98:79:d0:91:99:36:e3:89:1f:21:02:f3:6a:
         58:59:73:cd:2f:d4:83:98:03:9b:91:34:2b:14:b2:d6:2b:51:
         f9:d4:7b:3e:04:63:4e:6c:c6:8c:45:2d:a8:6d:ef:21:ee:1f:
         09:36:56:e8:48:9c:e3:de:e1:ed:6e:33:0c:cf:df:c4:e5:09:
         d9:10:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:14:19 2025 by rpki-client