Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          YBqiHkhp4aRekSfw1OR8jurFxSbSiICT1JnaRZLRCKo=
Subject key identifier:   7D:63:A5:59:05:CD:89:FA:1C:2C:21:B1:F9:D1:B8:89:F1:D6:7D:5A
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       4174D67C07FFD08B17E1FCD452824F572AAC322B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          0224
Signing time:             Wed 08 Apr 2026 07:43:53 +0000
Manifest this update:     Wed 08 Apr 2026 07:38:53 +0000
Manifest next update:     Thu 09 Apr 2026 09:50:53 +0000
Files and hashes:         1: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: gbza8z3/TVSV8pS7vM16AvzO4T1HVP0I/SXwsmJE54o=)
                          2: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: fIPf9Cta7tpTe2tKWfxYvHiDqcwSD+A+s/ZMbTY6rPg=)
                          3: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: /LjuaGxyTcQA0QEAtIBMK4I71Z8mm+OXQ0UKtoJX6FE=)
                          4: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: XMRDRzhpQhhp0OTma7xkqipCwIDvk7r3TOXiN7hkR4o=)
                          5: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: 4WFQg0hyPoA+YjE9DlLs+fxsCz/1Hm6ZKXSkk0hKzhQ=)
                          6: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: xA4SawgrstA/uHIpfe5e5ErrfmUhnSBpoMa55Lufnlk=)
                          7: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: WaBN8vhpaukaQaVmisq6f2jBRD6Zvq4V2qKtYIXL5Q4=)
                          8: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: V+e0sCZoefnOIdV8N6fLVdMQwDiNL9pfupfK5prc9qg=)
                          9: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: 0ksqEnvXv/6hMwy0m4SHmbFexWGbnXgVvcDzt9QDYSM=)
                          10: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: boAtywzXo3l+O3coO5VXODkAwWQ2OHFkhLmylrZ/V9w=)
                          11: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: 1+/pplX7T7J05KkRZmEDqLrGq6B6Swew+LIbfkXTx24=)
                          12: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: VUzMKYRRCJD11xUjAVlO7XCrM+ImpNsYRS5G0IjqGSc=)
                          13: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: GOy//cGQcPGC86jIJCRkp9ayCU8DrZU/x1SkWMI6TGU=)
                          14: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: iRuqVBfrE0kASFZUOEN5l5bTyV621nXJg3Yvq4G98kg=)
                          15: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 5qvvtSGaFf5wISwQWZ8BZ85obWb8+jvaKgujZOnIWfA=)
                          16: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: T4RGgh2bTxHiP4a0RFVpiCwLvMkzMCDUwhsMn4KWnIo=)
                          17: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: YxWQ+5m9LYpiBqrAW51jJwmjcKC5eTyYfK/Ip29zres=)
                          18: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: Ew0VNMo4xdPi3gN9F6m+wkvVTfV4Mcup88zNsvWaPXo=)
                          19: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: lgc35899CD1qdITKmLQLxPFgoyjYP0D9XSh+IOdRMhc=)
                          20: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: i0sEhWYHgSiXp5V1EkcxdgpEzXORyMRTfk54jKWdVl8=)
                          21: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: knoPnv5k7N4ARK61J+LlvRSNs41ePFvQyFL1x4gWw/4=)
                          22: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: n14oosemqhBjKJdVtflWC+HpPxELkPaFWKg6Eso9Skc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:d6:7c:07:ff:d0:8b:17:e1:fc:d4:52:82:4f:57:2a:ac:32:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Apr  8 07:38:53 2026 GMT
            Not After : Apr  9 09:50:53 2026 GMT
        Subject: CN=7D63A55905CD89FA1C2C21B1F9D1B889F1D67D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:a8:86:75:ce:9c:ed:94:06:83:0b:f3:93:
                    9c:ef:c4:18:e0:7b:48:07:27:b3:d3:36:c2:35:f1:
                    00:fe:57:59:b7:45:85:6a:bb:73:63:d1:52:43:45:
                    bf:97:06:9f:93:9a:3f:c1:df:dc:aa:ee:7c:e2:8f:
                    c3:a1:f3:1b:43:51:fc:e7:92:4f:c6:6a:03:08:b7:
                    88:f5:eb:b1:6d:74:6d:4f:91:21:d7:67:5b:b7:c0:
                    74:cb:85:08:f3:d0:74:01:93:07:78:e3:8d:ef:02:
                    76:82:c6:04:aa:a9:54:5a:7f:8b:d6:d4:ef:cc:24:
                    67:f5:6f:12:5a:00:e5:4c:5b:42:a4:c1:4f:6b:87:
                    91:71:84:5b:83:99:4c:34:d2:b0:7b:67:08:bf:ae:
                    3e:c0:37:8a:d7:6d:52:93:f4:38:22:94:54:02:7d:
                    a6:1a:d8:e2:c8:bf:08:23:24:96:a5:11:a6:10:6c:
                    13:32:5d:0b:a3:e3:3c:2f:8e:74:4b:1c:b7:0c:ec:
                    8b:86:3d:6b:24:59:25:04:68:3a:a9:60:72:22:86:
                    4d:70:36:5a:b6:09:5d:72:c3:cf:dd:cb:71:5d:89:
                    99:df:de:49:25:1e:0c:6d:7f:1b:0c:40:66:a4:05:
                    e2:17:1b:76:ed:e9:00:e7:a5:fa:f4:8d:dd:75:99:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:A5:59:05:CD:89:FA:1C:2C:21:B1:F9:D1:B8:89:F1:D6:7D:5A
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:71:67:98:f2:49:88:71:77:1f:4e:ca:41:a6:47:70:39:77:
         83:f6:0b:db:a4:2c:fe:e6:55:8d:a3:6d:e0:dc:1a:22:fa:b2:
         6b:ca:ce:dd:07:05:a4:50:3b:6a:1f:79:af:f7:28:79:8c:54:
         69:45:bd:97:90:f7:b8:e6:52:fc:86:c7:4f:b5:1b:6c:cc:0f:
         56:aa:b1:2c:3d:4b:07:87:92:1e:a3:5e:2b:03:0b:71:f9:98:
         52:ba:6d:46:b0:26:e0:0a:bc:a4:12:97:5c:d9:da:bd:ba:fe:
         c0:b7:53:26:91:79:12:3d:30:00:28:ff:0d:17:8b:f4:d3:1c:
         1f:db:e1:9b:9a:1a:0f:c5:59:c2:ae:58:cb:0c:8d:70:55:99:
         8d:fb:5d:8a:18:34:9f:fe:b8:4e:96:b4:01:2b:f8:c0:74:36:
         8b:57:2e:ea:91:00:1c:e2:84:ad:19:e5:29:0b:67:8a:96:ce:
         f1:86:74:9a:49:d4:1b:1e:8a:54:62:32:1c:8c:e7:a5:39:2e:
         7e:8a:43:bb:4f:40:fd:86:3b:e3:2b:69:97:69:40:39:3a:05:
         58:72:36:f4:aa:e6:81:ec:c5:24:9c:ce:f6:b0:47:56:a8:0b:
         0c:d0:f3:e9:c5:28:c3:28:e9:2d:04:2a:e4:66:c9:11:60:17:
         64:25:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:26:39 2026 by rpki-client