
$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json)
Hash identifier: +iKdrlwjCLQnwzfUGJZzUOFsjd9QP595WlO+24z1D+s=
Subject key identifier: 4A:8F:FE:CC:B1:08:92:C1:A4:09:C4:67:2D:AE:77:4A:D4:AD:3F:52
Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Certificate serial: 45AC2632778159295794B6E3B796A21F4C30F5AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
Manifest number: 0304
Signing time: Tue 04 Nov 2025 17:30:57 +0000
Manifest this update: Tue 04 Nov 2025 17:25:57 +0000
Manifest next update: Wed 05 Nov 2025 19:20:57 +0000
Files and hashes: 1: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: edA3Rs6eMjpScHqME9Ghe5dGKocqfYma+Nqo84HmhRQ=)
2: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: SIANWJe1TYfzkwVF4kJstOJVQXseEJWN/qlu+I1w0Ng=)
3: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: KM9thWqBbCezSnN/udktn45yMz+Zf63QSRQur/etjgw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ac:26:32:77:81:59:29:57:94:b6:e3:b7:96:a2:1f:4c:30:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Validity
Not Before: Nov 4 17:25:57 2025 GMT
Not After : Nov 5 19:20:57 2025 GMT
Subject: CN=4A8FFECCB10892C1A409C4672DAE774AD4AD3F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:f0:88:bf:e1:e6:b8:e3:32:88:f6:ff:1e:
ad:48:5c:c3:54:a1:55:e6:20:de:05:7d:59:6f:30:
10:7b:16:f6:de:01:35:c9:1e:4e:cf:cf:fd:e4:bc:
41:33:8d:c0:05:65:31:1f:52:50:68:6e:5c:12:c7:
d3:3d:28:f9:87:2a:c0:c0:ef:2b:65:87:3e:74:d7:
23:d0:30:5d:bb:91:04:7c:72:4a:14:02:89:bc:c4:
d8:b5:61:b5:cb:82:09:5a:95:cd:e6:fa:d1:76:8e:
7c:5f:fa:eb:66:5e:a6:89:0e:43:0a:b7:db:2c:93:
94:ff:03:cb:e5:14:8c:ae:b9:5c:da:c8:59:5c:f8:
56:b4:0a:72:03:fb:bb:84:64:ec:45:01:36:a3:78:
3f:6a:34:f2:e2:ba:29:c6:32:24:f8:ee:e3:00:39:
b8:8c:e2:8c:60:cf:ab:ad:99:54:d6:5c:bd:e8:e7:
f3:56:99:24:c4:fb:75:2c:78:0e:6e:c0:90:9c:5f:
aa:c6:96:d2:bc:86:9f:7a:e4:38:84:70:dc:55:23:
10:25:dc:5c:75:a6:a3:54:2a:5f:5b:75:50:0f:de:
43:40:a3:54:89:e3:27:e1:04:07:36:44:2e:91:6a:
b1:fe:66:cb:a5:8e:80:2f:c5:4e:a7:ce:63:dd:8e:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:FE:CC:B1:08:92:C1:A4:09:C4:67:2D:AE:77:4A:D4:AD:3F:52
X509v3 Authority Key Identifier:
keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:7b:22:33:c8:7a:33:10:8e:24:74:89:31:36:5a:4f:11:
e4:e3:2f:11:f1:32:16:18:1f:1f:19:62:bf:1b:0b:c3:b2:df:
9f:5d:1e:64:b4:f3:04:11:2e:99:f2:50:5c:91:49:00:de:af:
3b:c8:e5:15:be:40:10:06:ce:d1:8c:3f:69:38:bb:03:36:21:
25:9f:d8:cd:1e:a5:ff:50:01:f4:31:55:87:a1:b4:2b:5a:c1:
06:9c:44:a9:ce:85:e2:a0:15:f7:17:2c:9a:9f:ea:7f:2b:b0:
a8:9b:4f:0a:c5:a5:22:62:9b:94:89:a6:85:f7:14:ae:0b:7d:
34:a5:7f:13:64:f4:4b:31:2d:0f:e1:b6:f7:ca:db:73:de:03:
85:e3:dc:cb:20:45:c0:53:ec:d4:97:6d:99:92:de:7a:a1:9b:
85:60:9e:97:2d:59:78:f4:68:91:2c:f1:2e:61:ec:16:29:e9:
7d:81:92:73:49:50:08:1c:0f:3c:e7:12:6e:3e:45:01:d7:6f:
61:03:34:cf:e3:8f:07:ac:b4:18:55:8e:9c:a3:f7:f8:d1:d6:
90:7c:81:09:05:4c:e4:cd:6d:51:a7:76:29:96:02:c2:af:8f:
75:a6:ed:6e:be:92:cb:33:83:34:c4:8c:b1:3a:db:00:fe:d5:
22:c0:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:14:58 2025 by rpki-client