Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
File:                     BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft (raw, json)
Hash identifier:          1eIhjNR9CZygdGx1g7OHTuQvdtmq4tRQvhfpS7iPMZI=
Subject key identifier:   B7:52:4D:D4:F9:45:12:A2:75:65:CA:8F:95:8D:A2:88:74:6C:DA:32
Authority key identifier: BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1
Certificate issuer:       /CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
Certificate serial:       13970828DBF27EDF4285491336BD04DE5196E5A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
Manifest number:          02EF
Signing time:             Mon 20 Oct 2025 07:09:46 +0000
Manifest this update:     Mon 20 Oct 2025 07:04:46 +0000
Manifest next update:     Tue 21 Oct 2025 10:45:46 +0000
Files and hashes:         1: BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl (hash: CAcci5wnqW68c4qApagdXJEyQQwXN42S+tnUtkewVzg=)
                          2: 34352e3137332e38382e302f32322d3234203d3e20323638383139.roa (hash: f61UtWClOyp6Kh10ULsTV0tVHLCtuW2TgahnSxPC6co=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl
                          rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:97:08:28:db:f2:7e:df:42:85:49:13:36:bd:04:de:51:96:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1
        Validity
            Not Before: Oct 20 07:04:46 2025 GMT
            Not After : Oct 21 10:45:46 2025 GMT
        Subject: CN=B7524DD4F94512A27565CA8F958DA288746CDA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:9e:2a:77:3c:8c:2f:7a:66:b8:91:a5:f6:
                    1b:52:6a:a7:6c:5b:c3:8a:38:8a:8d:7f:97:2e:5a:
                    de:8f:5d:3f:ae:a0:bf:26:ad:2b:2e:4e:ae:53:db:
                    12:c7:85:10:95:e5:58:3d:ac:f9:d0:4d:3e:eb:76:
                    ca:4f:eb:c9:1b:d4:65:30:0a:17:22:95:7f:7f:f2:
                    ca:82:d8:1f:e1:14:e0:49:8b:5f:4c:b3:3b:40:d8:
                    3e:9f:ee:76:a9:58:b5:72:4c:d0:81:81:c3:cd:34:
                    56:28:a3:af:2d:75:a9:1a:51:f8:60:9e:d0:5c:e4:
                    30:97:7f:a4:20:46:46:c5:91:78:4f:35:fa:e0:13:
                    4a:c3:47:62:a3:7d:41:03:cf:15:bb:15:86:a4:42:
                    5b:a8:49:18:ac:38:b6:4a:17:4a:db:2f:ee:e8:0a:
                    55:da:be:ce:4d:74:c2:97:56:9e:13:9a:23:85:5d:
                    89:1e:e1:e9:bc:20:64:6e:e7:ef:1c:f6:9d:d7:04:
                    90:a3:eb:7a:c2:82:cf:81:b2:50:9a:0f:88:e3:69:
                    c8:a0:94:ef:67:21:af:e4:90:32:5b:34:6a:0b:a1:
                    38:53:6d:52:6e:fb:64:fb:5e:36:c3:4e:7b:c6:57:
                    35:ba:41:af:ce:98:c4:80:46:e3:0c:a5:7b:66:24:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:4D:D4:F9:45:12:A2:75:65:CA:8F:95:8D:A2:88:74:6C:DA:32
            X509v3 Authority Key Identifier:
                keyid:BE:A5:95:98:3F:C6:8C:8E:F9:A5:46:D7:E9:A4:A4:8D:FE:2A:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/1/BEA595983FC68C8EF9A546D7E9A4A48DFE2A88D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:1a:62:12:74:7b:ee:cb:b4:52:5d:e1:13:93:dc:c1:70:
         4d:ea:45:1b:ac:a7:22:90:bd:88:5e:8a:2f:df:d9:24:4a:6e:
         93:f5:90:43:41:2f:32:5f:e4:d4:bf:47:dc:d0:05:21:71:fb:
         83:cf:90:16:38:14:83:06:14:fb:82:e7:42:2d:94:b3:dc:65:
         ba:a2:f3:53:2f:69:a1:e1:47:4b:3c:17:54:c5:86:86:5d:39:
         66:3f:38:cb:18:18:66:70:47:94:ef:f0:82:f9:a5:6f:c4:36:
         97:a5:0d:3e:1c:e1:fa:54:7a:28:98:c1:39:e3:8f:05:cb:eb:
         29:64:2b:2b:49:a8:ea:01:f5:0a:d1:31:46:15:76:64:84:e6:
         f7:3a:6d:d0:41:be:a4:4f:f8:a1:a0:9d:b2:cb:ca:d5:5e:be:
         da:9a:47:88:38:02:8e:c1:06:22:d8:c1:66:26:0d:fb:08:3b:
         94:0f:52:16:b9:00:4a:76:45:e4:9e:d9:7e:bf:4f:63:79:7d:
         aa:c4:24:19:c0:c1:ca:50:a3:37:26:64:49:81:9a:cf:de:a7:
         7e:d3:9d:e8:88:87:fe:43:61:24:6c:45:1d:61:d5:9a:08:4d:
         bb:31:a3:56:0e:f1:33:5b:6c:89:89:83:6a:38:5c:2e:62:cb:
         4a:e4:57:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:05 2025 by rpki-client