
$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
File:                     B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft (raw, json)
Hash identifier:          vQCZ7mABmY8+BgiNN69H5iMB6ryYj6eCTPFa27PCyuA=
Subject key identifier:   5C:51:EA:D7:B3:F7:6E:EB:4D:E0:33:DE:42:5E:57:0E:77:09:C7:75
Authority key identifier: B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B
Certificate issuer:       /CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
Certificate serial:       2EED2145CAAEA65E657B5B293818CEC7F4C52C09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
Manifest number:          030E
Signing time:             Mon 03 Nov 2025 10:19:10 +0000
Manifest this update:     Mon 03 Nov 2025 10:14:10 +0000
Manifest next update:     Tue 04 Nov 2025 13:39:10 +0000
Files and hashes:         1: B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl (hash: uQZlvzxptZENbWNCvsFGkS359KkKqqaMJFy9fKZyPPQ=)
                          2: 34352e3138352e3130302e302f32322d3232203d3e20323639333638.roa (hash: UQhQsOgn36EjK3paX41KT3moQYvBhQn0tHrFh6xTrqw=)
                          3: 34352e3138352e3130312e302f32342d3234203d3e20323639333638.roa (hash: 5+tRShmBiDV8GaKBwMyMeq9//INf1ED4E9jd1cpd2Mw=)
                          4: 34352e3138352e3130302e302f32332d3233203d3e20323639333638.roa (hash: 36374LnkpjePt0tQOkfIUr6L+EKV8FhqQQU0PhCCark=)
                          5: 34352e3138352e3130332e302f32342d3234203d3e20323639333638.roa (hash: gDCbatDAQJOpr5gFEKSnjLKmmNSFfgeumZltLXgeKIg=)
                          6: 323830343a363338633a3a2f33322d3335203d3e20323639333638.roa (hash: T9IceYPW/a3fvqwgRAzbWKRt5aJjkFLo9iOBnB0GSEs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:39:10 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ed:21:45:ca:ae:a6:5e:65:7b:5b:29:38:18:ce:c7:f4:c5:2c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
        Validity
            Not Before: Nov  3 10:14:10 2025 GMT
            Not After : Nov  4 13:39:10 2025 GMT
        Subject: CN=5C51EAD7B3F76EEB4DE033DE425E570E7709C775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:c5:e6:4b:96:28:7b:6d:2c:c0:a7:45:a5:
                    c7:5d:5b:1c:d7:4f:ac:a3:78:bb:73:ae:cc:3e:7d:
                    b3:fe:13:40:30:4d:5c:80:68:75:85:04:b1:ff:63:
                    4d:b1:8a:80:aa:44:32:43:fc:85:86:21:4a:c8:9a:
                    94:42:a2:83:89:01:cb:19:bf:f0:e9:98:4c:ef:88:
                    c4:9e:4f:9a:10:39:f6:20:6e:99:03:63:23:ca:c7:
                    46:53:6a:23:81:01:73:c5:f1:b5:c6:bc:67:98:4e:
                    8a:cf:7a:70:55:dc:0e:06:4b:90:c9:bd:50:e2:56:
                    df:6e:32:8b:be:ec:70:da:51:6b:27:60:85:92:f9:
                    e4:1e:18:ec:5c:a1:6a:1c:76:85:e7:06:62:90:a7:
                    40:0c:03:89:71:9f:d2:9e:63:31:34:f6:2b:5c:25:
                    0e:36:65:9a:0f:f1:04:5d:ce:bb:bb:51:e9:b8:70:
                    7b:be:ea:c5:34:87:2d:ca:ef:9f:ed:2b:9f:d4:f5:
                    35:74:6a:85:b2:28:ce:4a:66:f2:64:21:2c:ba:f4:
                    d8:aa:25:77:68:77:96:57:1a:2d:c6:08:7f:8e:ec:
                    6d:5b:0d:87:ef:51:63:04:b9:6b:85:59:28:90:a3:
                    ce:52:7c:f9:3f:e4:9e:3e:16:96:9d:9d:34:b7:00:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:51:EA:D7:B3:F7:6E:EB:4D:E0:33:DE:42:5E:57:0E:77:09:C7:75
            X509v3 Authority Key Identifier:
                keyid:B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         bf:d4:2f:8f:30:3e:2d:40:0b:d4:80:1a:81:84:24:57:b0:ed:
         8b:95:58:01:1e:c5:99:0a:d8:66:ba:a4:12:21:15:db:06:6a:
         8f:81:69:2d:96:8c:9e:c2:63:b6:05:ec:9b:a4:68:e7:bd:04:
         1a:48:bd:83:50:67:32:ac:ee:cc:54:1c:3f:ce:0c:7f:b1:0d:
         22:f0:63:d5:f0:35:e8:80:f7:9e:c5:3b:4c:0c:c7:4b:d9:2a:
         5b:b0:2e:7c:e5:1b:26:11:26:b8:98:78:ca:14:28:75:51:84:
         37:15:c2:74:bf:e8:75:8d:80:a2:8c:da:49:25:27:03:df:23:
         85:d5:9e:14:6c:cd:75:00:94:2c:17:d3:1c:65:0f:e2:ff:07:
         74:db:bc:db:2a:84:36:ca:a4:b4:86:fc:73:39:64:fd:d5:8c:
         ad:cc:b1:62:0d:a7:7c:d8:c8:4d:7a:8b:0d:08:7c:73:85:f8:
         ff:9a:32:db:43:01:e8:ed:b4:5e:8a:d2:12:d0:eb:89:cc:72:
         57:3b:8b:87:ea:49:98:61:b0:a6:ee:63:b5:39:5e:5b:7e:e8:
         9c:9f:fb:4a:36:29:b6:30:d6:cc:2b:75:16:91:d1:4b:08:7a:
         0d:b5:84:cb:80:7b:bc:9b:d4:da:c8:69:53:c5:e7:e2:62:0d:
         54:cb:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:26:56 2025 by rpki-client