Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
File:                     BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft (raw, json)
Hash identifier:          4R6BlEnkCNZ6Ymn1ZfEk+q1cgdGzvecrq8l9vqHQCxY=
Subject key identifier:   86:10:3C:9B:23:37:DA:40:1E:84:5B:06:AC:CD:96:6E:49:83:36:3D
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       0D0385A0C2857CF53D33950038782D04EB6869B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
Manifest number:          02F2
Signing time:             Mon 20 Oct 2025 15:46:39 +0000
Manifest this update:     Mon 20 Oct 2025 15:41:39 +0000
Manifest next update:     Tue 21 Oct 2025 17:17:39 +0000
Files and hashes:         1: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: lOCKM/sQAwSd7fbV32ekt353a4Mylb2zpS9lMCOS1fU=)
                          2: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl (hash: 7YCjv22DXf3bsfYMiwilO92q9EtRW+9AO61amLOQd6c=)
                          3: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: w5z1HthZl83Aa957U97ag5iKaSLAiUssy3Tahv7R50E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
                          rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:03:85:a0:c2:85:7c:f5:3d:33:95:00:38:78:2d:04:eb:68:69:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Oct 20 15:41:39 2025 GMT
            Not After : Oct 21 17:17:39 2025 GMT
        Subject: CN=86103C9B2337DA401E845B06ACCD966E4983363D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:a3:a4:27:8c:f1:ca:39:10:6d:68:fd:70:
                    92:2e:7b:16:95:19:48:87:ee:e4:20:72:dd:df:f5:
                    5d:3d:7b:e0:78:a3:bc:ab:f0:a3:66:b0:4a:32:d5:
                    75:71:e1:62:a3:44:f2:b1:8f:8d:b2:4c:b5:ed:6f:
                    7a:ee:b4:2b:35:5b:76:5f:9f:88:8d:b9:c3:83:89:
                    99:e4:4a:f4:b0:31:e2:1d:18:be:26:aa:7b:2b:70:
                    de:27:13:9b:c2:7d:49:1c:cc:96:5e:71:e0:40:44:
                    88:73:9a:20:3d:9f:a5:ff:d3:79:94:5f:cf:cf:15:
                    e4:97:8e:82:e1:11:ef:79:48:3d:7a:29:d5:53:74:
                    e3:68:07:a5:01:2e:09:69:26:91:a9:90:72:90:eb:
                    96:0e:3b:e8:84:7e:1c:3f:94:e7:29:ca:dc:91:63:
                    ce:cc:21:ef:ae:f2:a9:a6:43:10:f2:81:23:51:b9:
                    3f:11:78:52:06:cc:71:f7:f4:0f:08:f4:63:01:7f:
                    57:51:53:6d:55:ba:d6:4b:d5:f7:14:99:e3:b7:ad:
                    06:be:d2:8d:37:de:22:9e:85:92:2b:eb:44:59:a1:
                    78:44:f0:59:1b:00:c9:c5:77:41:ec:9f:2c:61:38:
                    7c:61:15:43:e8:20:1d:b1:86:83:a1:01:1c:74:57:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:3C:9B:23:37:DA:40:1E:84:5B:06:AC:CD:96:6E:49:83:36:3D
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:18:0c:ae:97:73:77:9c:c1:ee:ed:0c:5b:72:fb:6a:e3:
         55:cf:a0:81:f3:cb:47:27:d7:9e:93:86:3e:e0:f4:70:2e:e8:
         b7:8d:4c:59:29:d3:ca:f7:e5:93:fd:ef:96:5a:ad:09:d7:0b:
         e5:52:f4:32:4e:09:65:bf:f6:e4:f8:f8:7d:17:8c:37:7d:56:
         93:69:81:4f:4a:33:03:c6:55:56:90:43:21:15:54:21:47:65:
         63:31:ae:8f:24:8d:f4:65:1d:a0:5c:a3:e3:4b:fe:60:7a:ca:
         49:a7:ac:35:21:bb:75:9f:6a:75:60:74:c2:d2:5f:76:15:d9:
         e0:d4:f6:68:23:00:3e:6a:02:f6:ef:23:3b:85:7f:1c:8d:df:
         a9:4f:67:dd:b4:17:80:9d:60:6c:1b:af:14:29:aa:6e:a4:f4:
         95:62:e7:50:02:23:6a:29:f9:b7:f0:f0:41:85:c8:37:b4:a5:
         63:43:3a:f1:df:c5:94:ca:a6:6b:2c:fb:0f:59:77:4b:1b:c9:
         eb:e5:0e:fa:cb:3f:52:8d:3e:3c:47:67:9b:0d:59:e7:47:1d:
         fb:b7:88:90:0e:dc:66:57:0d:f2:52:d6:5b:4a:68:2c:07:57:
         4d:92:d1:9d:4c:35:c2:8b:e4:20:5e:29:85:ff:b2:81:fc:dc:
         e3:82:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:51 2025 by rpki-client