Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File:                     21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier:          38I/8KlZm6SaO2ggrjHITiHFdpMTMflW7+RblSTRcHs=
Subject key identifier:   64:94:74:4F:FB:2E:C9:62:2D:44:E0:02:5C:C3:A7:62:B3:F2:46:C9
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       207AFB24CCB84C50E0ACFCC62B82A4FE3779CBE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number:          03D3
Signing time:             Wed 08 Apr 2026 18:10:24 +0000
Manifest this update:     Wed 08 Apr 2026 18:05:24 +0000
Manifest next update:     Thu 09 Apr 2026 18:29:24 +0000
Files and hashes:         1: 323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa (hash: Kt592g4yo0qxTzZVcRhpp3di5FhGQa9mhbPwEM+mW4M=)
                          2: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: 7aTtgUqEyqPuej3q2lwsSTr2rk/MI0wGxGT/5iEVdrk=)
                          3: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: DQ/dBKnGAO+nMEtu22vuOHu4SoQakMP9Pkd1UiA0ct4=)
                          4: 323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (hash: QCbsAhRRI8vLDtEh/8MMT6D/qTS6xjwYIKBKApex6Z8=)
                          5: 323830343a373335633a383030303a3a2f33342d3334203d3e20323730393130.roa (hash: kXyKdTZQfw9bn7YdVr89T2XTy/pQmwh0D9r1IAXEyhs=)
                          6: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: gUzk6XeWFdKb3L97R9Jbxb8JQipRUEL8ki7wNf67nXs=)
                          7: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: dHJvp3F95Db8aqnk10K7dj0k1epvDIAm0mNZbOSdSvY=)
                          8: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: mkvsDsAhdYz1n1tZbIo6R1LGkWRQcfz3F9N/aJagqtU=)
                          9: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: 856oxyqm6ptr7whM8O40m6eFs/N6/chbwdBgzf+BE/g=)
                          10: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: Oyv+7D9xugIZCh9Lg0JSqjdqnw1enpGbnitSgxBQNbg=)
                          11: 323830343a373335633a3a2f33342d3334203d3e20323730393130.roa (hash: Lq41OhJCea07S06m3l75SpJi8RMjcHotV/NKWsmzZwA=)
                          12: 3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa (hash: C719vCRugkDoFAE5i6O5gBlfs9X9VO6PjILuwDm2mHs=)
                          13: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: ZbLY81Qr/kgliAkBV3YAtVvd9gQwCN9bnYLAY1+FTEo=)
                          14: 3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa (hash: htL54b0Uzp2/BDq2oSg9No++R2JppLFh8eZ1SdCPySE=)
                          15: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: l17UN9IzRIABa59CeIRbssQa7kwxF2pq05HuyXEYi0U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 18:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7a:fb:24:cc:b8:4c:50:e0:ac:fc:c6:2b:82:a4:fe:37:79:cb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  8 18:05:24 2026 GMT
            Not After : Apr  9 18:29:24 2026 GMT
        Subject: CN=6494744FFB2EC9622D44E0025CC3A762B3F246C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:6b:cc:a1:cd:18:63:a2:a1:55:dc:35:88:
                    d2:80:d4:f3:a4:d6:a9:bf:30:55:ac:60:84:1b:be:
                    52:0a:39:f0:ff:e2:36:e0:9d:3d:66:fa:21:e5:84:
                    8e:49:3e:62:c7:f5:a7:6e:58:fb:0b:92:86:8d:d7:
                    9f:53:49:6e:5b:48:38:87:b0:86:12:38:70:9e:c6:
                    c0:71:25:f7:d6:14:0b:b6:7a:1f:1d:ba:9f:57:e2:
                    49:5f:86:59:42:dc:13:70:5f:ec:44:05:a8:bc:42:
                    00:25:3d:d4:24:45:9c:f1:7a:1a:31:9f:a7:08:55:
                    a6:33:5c:ea:92:3f:f6:34:2e:ab:1d:3a:b4:56:b0:
                    da:1f:c6:a8:31:d8:cc:29:3f:99:70:3f:02:38:24:
                    99:5d:e5:47:63:52:e7:22:0b:fc:8b:85:6e:df:c3:
                    35:2d:d5:21:1f:5c:1a:3d:e9:35:a2:81:d0:ed:01:
                    18:f3:58:b8:1e:d3:e0:72:c3:90:9c:20:9c:41:51:
                    96:3f:9b:5e:a2:67:7f:14:1a:47:f1:f5:5c:19:4d:
                    8e:61:b5:50:21:c6:84:78:b5:85:f1:45:29:c7:24:
                    29:d2:62:ef:83:dd:3f:5d:4a:03:9a:19:4d:5b:07:
                    f2:08:d4:06:29:b2:fc:af:4b:41:bf:51:64:12:ed:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:94:74:4F:FB:2E:C9:62:2D:44:E0:02:5C:C3:A7:62:B3:F2:46:C9
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:50:2a:d6:e5:1e:d6:8c:7a:ce:34:81:11:37:a9:b9:d3:69:
         29:9c:6a:e7:74:56:5a:71:56:84:d4:b3:b9:b9:a5:15:e0:28:
         5c:cb:42:da:e3:09:4d:b0:cd:64:54:2c:7a:85:e8:77:91:38:
         b6:7c:be:6a:9e:e6:d0:6f:f5:3a:9a:71:df:52:dd:7a:9c:6a:
         84:03:5c:1d:05:4f:f8:76:d6:67:2f:c5:75:15:ba:0d:50:5d:
         b5:ff:11:c0:9c:c0:8c:8a:95:37:8b:3a:90:b3:6b:8b:9f:ff:
         6b:a3:72:f2:a3:02:3d:09:77:85:26:12:a2:f4:2a:ea:a7:ad:
         e2:65:cc:49:3e:9a:4b:e4:76:0b:23:fa:5c:b2:fb:18:14:28:
         55:41:a1:af:b7:77:dc:fd:ad:38:3f:c5:09:a7:f8:b6:ee:80:
         ac:cc:7d:5e:3d:3f:6e:00:5d:50:8d:5b:72:42:1a:b4:06:40:
         0a:44:31:fe:ae:fd:c0:a6:6d:43:91:2d:02:8f:de:23:c2:cc:
         99:fd:90:e8:d5:1c:0f:d5:2c:25:1e:a8:9c:3e:c4:5e:28:d2:
         ea:c7:c2:93:d0:ac:00:f5:37:96:ad:6d:e6:c7:54:17:fa:24:
         e7:2a:63:0e:6a:33:f7:61:e1:95:b1:6a:24:f0:8b:52:1c:e8:
         69:ca:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:22:42 2026 by rpki-client