Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
File:                     BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft (raw, json)
Hash identifier:          JfmIsmhDnsuDht63Qpgb9CjWQIH+c21AgsE0xR4NdZY=
Subject key identifier:   73:4A:61:E2:C4:B1:1E:8F:2B:BA:56:AF:58:60:4B:C5:18:2A:F4:2F
Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3
Certificate issuer:       /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
Certificate serial:       241265691C464C150C8EA76E8CB31243B1D8F8AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
Manifest number:          04E3
Signing time:             Thu 29 Oct 2026 09:23:54 +0000
Manifest this update:     Thu 29 Oct 2026 09:18:54 +0000
Manifest next update:     Fri 30 Oct 2026 12:30:54 +0000
Files and hashes:         1: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl (hash: vjLOgl0KR3N/H4r6NsewNaZl61yvSxwji4124owWz74=)
                          2: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: b1bWqdl1nl0hK/R0pp2vlvzY1ea1GeSNUD1Voulpm7c=)
                          3: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: T1Ym0QDmqhoa/DiNnrEKEkmEgtEn6X5T4uH0U4nQkGM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl
                          rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 12:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:65:69:1c:46:4c:15:0c:8e:a7:6e:8c:b3:12:43:b1:d8:f8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3
        Validity
            Not Before: Oct 29 09:18:54 2026 GMT
            Not After : Oct 30 12:30:54 2026 GMT
        Subject: CN=734A61E2C4B11E8F2BBA56AF58604BC5182AF42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:fe:a4:75:0f:13:ca:55:7b:88:61:35:12:
                    cf:73:37:86:74:b6:f4:83:53:fb:de:30:bd:d1:5d:
                    19:89:50:ab:4b:db:ba:b5:f0:3c:56:62:7c:ad:20:
                    ea:3a:c0:3e:2d:3d:09:47:56:2e:5b:06:f8:59:1a:
                    10:59:45:d8:79:82:81:b6:3e:3c:ee:3f:7f:16:14:
                    c5:18:8e:80:b2:a8:c8:9d:de:e1:31:de:45:df:ea:
                    30:f9:e6:7e:a4:4a:1a:fe:f5:fd:61:92:bd:d1:be:
                    93:a4:fe:e3:37:98:53:17:8d:db:e6:8a:57:7e:18:
                    3c:11:a0:fd:ec:ce:58:db:8c:a8:4d:68:83:88:04:
                    1c:62:19:90:35:64:14:47:b8:e8:d9:77:c2:1b:59:
                    4b:8a:22:e8:ee:51:09:7c:17:06:69:3a:51:ff:1b:
                    c3:46:2e:dd:42:e6:dd:5d:84:d4:5c:12:f4:5d:8d:
                    d4:d2:a8:3e:dc:ab:36:a9:5f:8b:a1:69:4b:cb:00:
                    29:5d:86:9c:cb:e2:ee:d4:4a:5b:40:23:67:01:e5:
                    62:1b:e2:e9:d5:cd:a1:d8:53:f0:d7:34:0b:34:1e:
                    d9:45:44:e0:e2:bf:0d:b6:65:34:7b:4a:28:8e:7a:
                    e9:83:b3:1b:a6:34:45:fe:e8:79:9f:62:4a:42:58:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:61:E2:C4:B1:1E:8F:2B:BA:56:AF:58:60:4B:C5:18:2A:F4:2F
            X509v3 Authority Key Identifier:
                keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e1:81:cf:09:e7:0d:38:d6:e4:43:29:67:73:d0:c9:36:db:
         54:53:14:d3:0b:46:b8:56:a3:00:e5:3d:60:9a:7e:1d:88:82:
         15:35:51:15:d7:c1:9b:dc:cc:87:16:68:57:27:9c:f8:da:3b:
         03:0c:e5:22:f9:ec:cf:53:b8:ed:d0:db:d5:4e:e1:ce:d5:72:
         78:b6:d0:ab:59:07:ef:c4:c5:18:5f:6e:1f:4c:66:71:7c:c2:
         ce:05:38:b0:92:47:d1:04:0b:b1:b2:98:3f:fa:73:15:bc:72:
         e2:a2:a4:9a:d4:b1:e5:53:36:78:69:1a:c3:c2:63:f7:7f:29:
         7a:be:03:f6:c3:56:e7:ab:99:26:c4:97:94:c6:da:7a:b9:14:
         20:7b:87:5b:bb:b9:73:7f:da:98:b1:40:4d:76:28:16:be:d0:
         13:f3:42:1c:fb:d8:d2:52:74:11:a5:f4:6d:ba:39:5c:31:46:
         72:0f:27:c1:23:4a:d7:f4:ae:82:d3:ec:0b:b0:c4:19:90:44:
         6b:6c:d5:2b:ec:77:c8:c1:b8:c7:6f:f2:f0:b9:96:f7:3f:27:
         fe:aa:51:47:ff:8a:f4:3b:12:06:5a:eb:ae:98:05:7f:67:0c:
         f0:2a:e2:a2:a4:e4:2d:42:ec:f9:eb:74:4a:82:9d:d2:46:2e:
         de:e1:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----