
$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
File:                     8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft (raw, json)
Hash identifier:          24xH+UnSeZJySMFjzqXJf8GcIHX9kPiz2iH4H8EPIdk=
Subject key identifier:   F9:EE:83:53:13:13:01:04:51:34:BD:2E:D8:FC:CA:DE:13:DC:20:D9
Authority key identifier: 8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69
Certificate issuer:       /CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
Certificate serial:       2441C85B0252734B7CC385B8FE354D08BB569540
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
Manifest number:          8D
Signing time:             Tue 04 Nov 2025 01:53:01 +0000
Manifest this update:     Tue 04 Nov 2025 01:48:01 +0000
Manifest next update:     Wed 05 Nov 2025 03:00:01 +0000
Files and hashes:         1: 323830343a333666343a3a2f33322d3333203d3e20323636333832.roa (hash: wPIOZ8Ul1AxBBiyWU4mcaCjW4REdoKQ54xNQmYT9274=)
                          2: 3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa (hash: w4CagkdE6IQsNyGNbwUW6u/8F39GLS9ffyESTz/W1mQ=)
                          3: 8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl (hash: u1OJ7aDoPZ/m7SpUIgiWOTbROz3gWiu/cjt8uMCWOWk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl
                          rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 03:00:01 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:c8:5b:02:52:73:4b:7c:c3:85:b8:fe:35:4d:08:bb:56:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
        Validity
            Not Before: Nov  4 01:48:01 2025 GMT
            Not After : Nov  5 03:00:01 2025 GMT
        Subject: CN=F9EE8353131301045134BD2ED8FCCADE13DC20D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:e6:ec:d2:a5:88:55:48:c5:30:d1:6a:97:
                    08:fe:d0:10:41:95:6a:d4:74:61:1a:8b:23:16:73:
                    4d:fe:57:e9:e0:f5:42:b5:21:29:92:99:86:6c:0c:
                    2d:39:36:4a:64:54:45:67:14:6a:46:0d:66:15:43:
                    af:46:c8:51:22:3d:ae:7c:58:84:ef:d0:a5:6b:23:
                    67:72:09:2d:7b:99:e4:2c:d0:c2:85:23:15:5d:3c:
                    42:95:b5:69:fc:47:96:64:83:a2:9c:68:c7:92:74:
                    e9:f4:05:ed:fd:95:af:55:d0:a8:1e:ca:c1:1c:a5:
                    06:86:79:eb:07:9c:38:66:44:5f:8b:af:8e:3e:af:
                    51:6e:f0:12:17:cd:72:df:67:b0:55:d3:26:f8:ac:
                    2a:9d:12:a6:ef:1d:fe:33:7f:b6:43:52:d7:13:9d:
                    75:3e:5c:be:3f:15:24:e1:d5:20:4f:6f:2b:02:74:
                    cf:c0:e1:62:95:21:ef:e1:20:99:42:52:b0:d6:6a:
                    f1:c4:e1:24:d9:08:8a:52:c7:d9:e6:7c:19:02:9b:
                    b4:3a:b8:4e:b0:d0:f0:8e:89:73:64:67:7d:ac:0d:
                    db:80:bd:05:bf:34:3e:4f:c2:9b:48:c8:c4:2c:05:
                    19:43:b2:73:91:34:19:4a:d0:21:2a:a9:d0:ac:64:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:83:53:13:13:01:04:51:34:BD:2E:D8:FC:CA:DE:13:DC:20:D9
            X509v3 Authority Key Identifier:
                keyid:8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2f:da:f2:b8:0a:45:a1:45:3c:8c:98:48:06:04:90:c8:25:72:
         fe:42:5c:60:44:12:52:64:2e:8a:13:20:ae:64:a2:a1:d4:98:
         83:ce:f0:25:d4:1f:ba:20:9d:43:00:af:4f:fc:ab:98:82:0d:
         f0:7d:71:9e:e6:8a:62:35:d8:fe:9f:67:8c:55:58:c9:01:f1:
         27:c0:33:32:fa:a9:1b:8a:ea:58:fb:d9:86:88:bc:7b:9c:2e:
         6d:a6:3b:ba:74:d0:fc:a1:81:b9:1b:7b:35:91:26:e3:fa:fd:
         68:9e:c6:72:da:2c:cc:6d:c5:6e:fa:ac:45:0d:17:21:e8:27:
         5b:05:9b:a8:18:ea:02:3f:cc:b9:c2:28:0d:36:42:0e:74:52:
         2c:27:29:08:89:1b:6e:c7:5b:a8:86:31:dd:f3:ca:d8:10:bf:
         20:9c:e3:37:ae:ff:ca:c3:9d:53:b3:2f:96:b8:80:ac:2c:c8:
         22:71:37:7f:94:67:10:42:7d:20:19:b4:e1:f0:8e:ba:35:4b:
         6a:60:e5:74:5f:53:68:05:7d:a8:eb:54:d5:e7:db:18:5d:c3:
         2e:12:32:37:f5:1e:a7:be:f8:da:af:03:5a:db:c6:80:f4:48:
         c4:0c:ef:ae:5a:e7:29:c4:df:ec:f8:5b:2d:d9:93:42:20:d5:
         ff:f4:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:06:52 2025 by rpki-client