
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft
File: 8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft (raw, json)
Hash identifier: 9YOcRJfQYVRpgaKckDGQo2Qtq4PPDH9yYAz3Qu1ul0Y=
Subject key identifier: 5D:59:AC:3A:FD:38:2F:CB:9B:5E:27:06:92:C8:D2:83:40:9F:91:03
Authority key identifier: 8E:15:6E:28:45:BD:30:97:BB:B7:46:34:CA:6C:CF:12:9A:FE:F8:8D
Certificate issuer: /CN=8E156E2845BD3097BBB74634CA6CCF129AFEF88D
Certificate serial: 66E3288EC379CACD040626C57E4C1DFAAF4E6937
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft
Manifest number: 017F
Signing time: Tue 04 Nov 2025 02:00:10 +0000
Manifest this update: Tue 04 Nov 2025 01:55:10 +0000
Manifest next update: Fri 07 Nov 2025 03:06:10 +0000
Files and hashes: 1: 8E156E2845BD3097BBB74634CA6CCF129AFEF88D.crl (hash: 3O9eIMWQ9XPy7GV5aYLEL1Lb/UCLGjPvqtxwyIIRZEs=)
Validation: OK
Signature path: rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.crl
rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 17:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e3:28:8e:c3:79:ca:cd:04:06:26:c5:7e:4c:1d:fa:af:4e:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E156E2845BD3097BBB74634CA6CCF129AFEF88D
Validity
Not Before: Nov 4 01:55:10 2025 GMT
Not After : Nov 7 03:06:10 2025 GMT
Subject: CN=5D59AC3AFD382FCB9B5E270692C8D283409F9103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:eb:04:df:59:fd:1d:83:b1:75:0d:89:6d:
98:48:a4:c7:36:1f:39:e2:07:cb:32:63:23:9a:b4:
bf:11:6e:ef:c6:58:2d:bb:3f:7f:79:44:a3:87:39:
7a:f8:31:06:43:61:b0:5e:8e:a0:ad:c0:c7:2c:fb:
1d:f2:f6:65:6f:29:17:7f:3b:ba:ad:c4:3b:bd:45:
db:7f:78:76:16:f1:87:ee:83:58:5d:45:51:49:9c:
39:41:cc:14:c5:36:10:a8:1a:bd:fc:b1:2e:24:87:
06:26:98:ae:46:14:90:bc:31:00:f3:8e:29:35:4b:
f0:69:f3:43:28:e6:84:e3:c2:7f:11:c5:35:f9:73:
a5:e2:f9:5f:a6:cb:f6:f9:97:1d:ef:84:e0:d4:cb:
9b:f2:6f:2e:87:71:4d:95:bd:ef:64:3f:3b:c1:bb:
2e:07:b7:9c:bd:dd:e8:aa:2a:de:9a:fa:a9:c0:30:
52:39:d3:27:ff:48:17:1d:75:dc:6b:87:d6:02:66:
93:b2:da:6a:30:b3:e6:31:20:98:b6:b8:5c:f8:77:
e8:50:ea:1c:67:6a:c5:df:73:02:75:c0:2c:1d:ca:
f1:72:01:0c:90:15:62:9c:46:64:a9:cc:b8:54:d2:
1a:04:bf:d1:16:b3:b3:55:d8:c1:44:11:d1:ab:91:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:AC:3A:FD:38:2F:CB:9B:5E:27:06:92:C8:D2:83:40:9F:91:03
X509v3 Authority Key Identifier:
keyid:8E:15:6E:28:45:BD:30:97:BB:B7:46:34:CA:6C:CF:12:9A:FE:F8:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ae:33:df:4d:fb:6d:4a:ca:c8:fe:64:a6:a0:dc:fe:32:f1:
b6:bf:68:59:61:67:82:a6:27:7a:f9:ac:b8:57:96:ab:06:bb:
9f:e8:9a:6c:6b:2c:58:14:37:04:89:e0:f7:97:17:1d:01:3c:
18:cb:aa:17:0d:5f:49:a9:cd:7f:5a:0a:c8:6d:b6:ab:90:16:
08:bd:ac:9b:a0:b1:cb:da:d6:0b:8a:a6:c1:e6:64:1c:a1:0d:
1c:ef:eb:c7:38:9a:3f:3e:9e:35:53:37:32:df:58:07:8d:2e:
c5:87:b6:51:2a:57:41:7d:4b:97:1c:17:ac:57:18:35:c6:43:
40:11:a6:ec:77:7f:7c:2c:53:21:43:c0:68:d9:f0:49:af:ed:
14:74:3f:36:55:69:87:aa:3f:55:86:06:d7:7e:3e:b6:e7:ae:
2b:42:86:ad:5b:6a:e5:7e:5c:ee:53:95:09:b8:e1:0a:17:47:
16:fe:1e:ba:54:a7:53:9a:f3:1b:41:d1:54:20:d6:41:6a:ad:
c6:30:69:ae:59:68:89:fe:ee:97:71:3c:c4:92:fe:73:5d:ac:
b9:12:73:4b:e0:a6:43:42:57:9b:14:6e:e7:b3:9d:6b:8e:22:
a0:40:05:87:1a:13:0e:b5:b0:c7:11:21:30:0f:b5:71:45:c6:
1d:c2:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:48 2025 by rpki-client