
$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
File:                     968400C9DFC16D643EF5C94C34F993F17C7568AA.mft (raw, json)
Hash identifier:          J7mQ5vI/PlzPBKcjWoJFzpCLR7pUjv+pxKV2sZxn32s=
Subject key identifier:   89:38:15:D1:29:7A:3A:21:CF:EA:1F:15:E6:B7:F9:1E:1D:68:35:C1
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       74ACEFB5062A1BE8E6125B99D7F0906AA91C194C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
Manifest number:          02CE
Signing time:             Tue 04 Nov 2025 00:39:33 +0000
Manifest this update:     Tue 04 Nov 2025 00:34:33 +0000
Manifest next update:     Wed 05 Nov 2025 04:35:33 +0000
Files and hashes:         1: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: ZWKOFtJRLdp2SLpB4KN+ZC/34+ue9ju+E35hP3Fz4ZI=)
                          2: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: euHAp7+9vRWrpVJOCBtQMlM0mKiy4FhOArKfKYePGc4=)
                          3: 968400C9DFC16D643EF5C94C34F993F17C7568AA.crl (hash: NgmnqzNDSskH+0L/XKe0rVmJZJCBtYE9As+4lkEAaYI=)
                          4: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: H7O0RgQD2YQmmg/zd/Dw8LRIlxXUh+E2tsnun3K5MkM=)
                          5: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: XohZhw/qfHKZPzmoxfjStIrmnl3pqxRNfLqhu9QyNn0=)
                          6: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: KXUZqQdV0NiuXnQfwlKO9KEf9ReLWB0t167GugqP9FI=)
                          7: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: 4RWdX36bZMJLXgoSRSa1Ymc4At0rCJL3dL7BLqRu0LE=)
                          8: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: fG8mMWmzrS7pxGB0+b9dBFu9DpydOy3tC0sVdHradZo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 04:35:33 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ac:ef:b5:06:2a:1b:e8:e6:12:5b:99:d7:f0:90:6a:a9:1c:19:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Nov  4 00:34:33 2025 GMT
            Not After : Nov  5 04:35:33 2025 GMT
        Subject: CN=893815D1297A3A21CFEA1F15E6B7F91E1D6835C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:06:58:84:1b:c3:35:05:61:50:b5:c3:3e:
                    6e:f7:9d:40:5a:60:94:88:4b:14:ba:f5:c0:fb:86:
                    49:c9:1d:2f:ba:c6:49:b3:ef:7b:9f:89:26:a1:59:
                    a3:b0:4a:51:4f:73:78:02:d9:eb:01:eb:57:e0:dc:
                    e4:5e:6d:03:6f:ba:4e:31:ec:ae:13:59:f5:90:68:
                    a5:3f:c8:c6:6c:34:6f:b6:09:d4:73:5d:8d:8e:95:
                    4b:9d:4b:34:03:28:66:93:53:b2:1f:8d:6f:e4:8d:
                    7a:ad:ae:51:15:aa:73:94:fa:22:20:e9:95:9d:ff:
                    bd:4e:51:b1:cd:f4:5b:de:66:8c:dc:78:1c:4c:b4:
                    c4:ed:d5:28:da:3b:57:36:5d:c7:c9:ee:27:27:a4:
                    5d:1f:d5:82:42:0a:bd:92:df:05:b9:63:0a:e8:1d:
                    30:bd:16:6e:ba:b5:2c:f9:04:6f:04:1c:1c:a2:ee:
                    f8:cf:e0:79:79:99:27:47:04:34:08:43:4c:16:d1:
                    b4:be:25:ba:01:63:42:88:71:f0:ea:0c:ad:77:a4:
                    83:04:32:2d:7f:d6:e2:79:3d:8f:e1:e6:c5:eb:4a:
                    72:19:7f:48:93:dc:6f:ae:19:46:bb:00:76:85:e7:
                    b2:ba:ae:f4:a6:79:6c:f9:6c:22:d9:60:ec:9c:c5:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:38:15:D1:29:7A:3A:21:CF:EA:1F:15:E6:B7:F9:1E:1D:68:35:C1
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9b:15:8a:45:b8:53:dd:6e:e5:0a:79:68:34:a3:e7:27:41:7f:
         ac:b4:c4:5f:45:aa:8c:50:d7:6b:5b:1a:f8:fd:82:50:63:9d:
         1c:76:34:13:44:11:b6:4d:56:ed:34:43:c6:f0:c2:c6:15:ec:
         61:07:86:ad:f6:ea:96:97:89:f2:da:3d:7a:44:ba:ed:b9:ed:
         ae:83:f5:2a:98:b4:82:42:04:30:f2:fa:9c:8f:f6:2f:f1:32:
         6b:ba:99:3b:31:d3:4a:aa:1a:c7:e3:91:03:67:08:dd:2c:7d:
         3e:c4:d4:aa:f3:c6:6c:45:90:6f:79:bd:fc:e3:a6:fb:a4:b4:
         46:98:2e:ff:0d:23:db:9f:b0:70:01:78:65:00:26:7a:f0:cc:
         c3:51:45:b2:ff:0b:03:41:49:25:10:30:21:18:f7:06:7e:d2:
         1b:6c:1a:04:c0:ca:19:26:74:85:be:cb:6e:e5:fc:df:f6:f3:
         4b:a7:30:be:5c:bd:e3:9b:5d:dc:fc:22:90:c3:01:fe:c6:9b:
         9b:50:ed:36:4a:63:67:48:3a:4c:70:ae:67:cc:6c:84:0b:f9:
         e8:4f:77:f2:c1:64:ac:64:ba:41:c6:65:68:84:16:8a:65:2b:
         fd:82:eb:15:c3:02:08:a1:da:de:82:5e:b1:a5:f2:d6:3b:df:
         27:38:98:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:51:38 2025 by rpki-client