Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          z9h4dnRRgpn6AqxpFxHG3Ipw5ud+Sn9VZiE7TYat6WU=
Subject key identifier:   2C:93:39:8A:6E:35:48:24:D6:BF:20:57:C6:39:91:99:19:86:71:09
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       0EDAB22336672A371C6729EDCAF761BF54F50559
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          0586
Signing time:             Fri 30 Oct 2026 20:00:00 +0000
Manifest this update:     Fri 30 Oct 2026 19:55:00 +0000
Manifest next update:     Sat 31 Oct 2026 20:00:00 +0000
Files and hashes:         1: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: O747j2Mw2vMMFiFgZ1R8o7arRcyWWpDweLYMEv1CJn0=)
                          2: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: 7P+1a905lmT0JcF7XUrjJKKZxFBgMfUbEtZ05StPduA=)
                          3: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: RUF2U/TyU/qQ+OyIpub/5wQwJZgaihDcYeU5vaI8e70=)
                          4: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: eFsGhXoo/d0rpPbw3qwdE8MvPDtvekZflU7LISh/cjM=)
                          5: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: wTs8xmZ1SOAHFgoUFsOyGlpaIWNAC1iO1/p4IQb8388=)
                          6: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: oq0bhFQqj/ld0YoFc4FRZaRMt3D4pnxeViv0NaWysuI=)
                          7: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: VAYrxCa2og8J9FJ0O7g7wqUj3PkB1fZ4uSX3J0h6AgQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:da:b2:23:36:67:2a:37:1c:67:29:ed:ca:f7:61:bf:54:f5:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Oct 30 19:55:00 2026 GMT
            Not After : Oct 31 20:00:00 2026 GMT
        Subject: CN=3082010A0282010100C32B669CA565E60CB5B3C2B586F95D425449FC2306B8A8A768B2EE78AAC831EF63CC7868D539678D0B7BA88CBD0859C1CB81D1B94346775E956B51D1B37F1C9365EB6961F025B03EFC52F52EC3C88A9D7897DF1E4D8F8FA7AE2E0DE0A4AE3BD231269EACE054F7285275A80EDEF6AC51CCA1040BAE1E4F944BF3DB66D8AC45020173AD2678E773FE5D153C055D61723D08F445CF87572156F53E19AECEA29ABB6AA681918B36F51F9A92BCFB56F9E1DF53A7575D90998B224E09427B5762A3F9898DF3076D09870F6C61C1F8890AE42E5926324D68666427A12F9E4890C4BB4637A6F7B087C9A8132B223E779CBF3A617882ABB34D4A02F9FCB60D83911646830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:66:9c:a5:65:e6:0c:b5:b3:c2:b5:86:f9:
                    5d:42:54:49:fc:23:06:b8:a8:a7:68:b2:ee:78:aa:
                    c8:31:ef:63:cc:78:68:d5:39:67:8d:0b:7b:a8:8c:
                    bd:08:59:c1:cb:81:d1:b9:43:46:77:5e:95:6b:51:
                    d1:b3:7f:1c:93:65:eb:69:61:f0:25:b0:3e:fc:52:
                    f5:2e:c3:c8:8a:9d:78:97:df:1e:4d:8f:8f:a7:ae:
                    2e:0d:e0:a4:ae:3b:d2:31:26:9e:ac:e0:54:f7:28:
                    52:75:a8:0e:de:f6:ac:51:cc:a1:04:0b:ae:1e:4f:
                    94:4b:f3:db:66:d8:ac:45:02:01:73:ad:26:78:e7:
                    73:fe:5d:15:3c:05:5d:61:72:3d:08:f4:45:cf:87:
                    57:21:56:f5:3e:19:ae:ce:a2:9a:bb:6a:a6:81:91:
                    8b:36:f5:1f:9a:92:bc:fb:56:f9:e1:df:53:a7:57:
                    5d:90:99:8b:22:4e:09:42:7b:57:62:a3:f9:89:8d:
                    f3:07:6d:09:87:0f:6c:61:c1:f8:89:0a:e4:2e:59:
                    26:32:4d:68:66:64:27:a1:2f:9e:48:90:c4:bb:46:
                    37:a6:f7:b0:87:c9:a8:13:2b:22:3e:77:9c:bf:3a:
                    61:78:82:ab:b3:4d:4a:02:f9:fc:b6:0d:83:91:16:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:39:8A:6E:35:48:24:D6:BF:20:57:C6:39:91:99:19:86:71:09
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:49:da:9a:23:c1:ef:d7:8c:d1:ae:08:08:d9:cb:5c:7e:95:
         82:2d:af:83:b1:c9:51:7a:ec:a7:e2:3b:97:1e:b2:da:ef:e7:
         60:d9:60:af:59:37:cd:6f:18:8a:a1:ba:a8:44:fb:3d:b7:13:
         1e:3e:af:7f:2d:d4:f1:2f:87:c5:be:dd:c5:68:e1:58:11:dc:
         d3:65:e9:41:3e:39:05:a1:51:9f:d8:b8:0e:f8:63:9b:6e:6f:
         68:db:c2:4d:6f:cb:5a:0a:35:3f:ab:57:60:e3:09:0c:2e:a5:
         11:98:f7:90:20:66:1a:d6:0a:84:c3:09:1b:4d:99:47:99:d4:
         ac:95:50:a7:24:d2:89:d5:94:e6:40:b1:99:0a:f0:55:72:4e:
         de:0e:85:b3:7d:98:51:6e:a7:c4:20:7c:6f:8a:a1:2b:da:9f:
         ac:6a:04:89:ae:08:99:e2:f7:9e:9b:5e:03:f0:26:46:fb:21:
         e1:da:e5:d7:cc:0e:ad:4c:4c:41:ea:cc:b2:76:12:6c:dd:37:
         a4:00:1d:ba:5c:e7:71:a0:8f:0b:35:15:f6:d4:b6:4b:ef:50:
         1e:6a:c2:9a:df:6e:06:6c:fa:42:dc:ff:92:88:7f:e8:15:94:
         18:4c:53:31:01:68:65:78:d5:98:6f:e8:f2:86:c8:2f:ef:af:
         a4:77:a2:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----