Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          sG0U7RtPIZnQLh3JV5XMGxeLqGjqlAYCxojxNcau794=
Subject key identifier:   5B:DD:59:87:44:E4:14:69:E0:86:93:E4:93:00:38:E4:31:84:3E:EF
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       5D6300730693C36F147D426450B23AB9BB7EE725
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          0322
Signing time:             Thu 18 Sep 2025 11:20:00 +0000
Manifest this update:     Thu 18 Sep 2025 11:15:00 +0000
Manifest next update:     Fri 19 Sep 2025 11:20:00 +0000
Files and hashes:         1: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=)
                          2: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=)
                          3: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: QO7JqzdpUuPfSRhEkdPxO4ha3rZi1LF1rHKR0AFSG9c=)
                          4: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=)
                          5: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=)
                          6: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: 0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=)
                          7: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:63:00:73:06:93:c3:6f:14:7d:42:64:50:b2:3a:b9:bb:7e:e7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Sep 18 11:15:00 2025 GMT
            Not After : Sep 19 11:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:b5:16:67:61:12:27:4c:21:ae:8a:4b:99:
                    6e:4c:fe:54:0f:96:68:10:c0:38:bc:d0:26:a3:e4:
                    f0:4a:53:9d:87:96:b3:07:4b:f7:e8:2f:e7:5c:d0:
                    85:b4:6f:e6:c2:53:b4:98:e3:6c:bd:0d:5f:8d:07:
                    44:51:6d:99:93:58:48:e5:19:6c:83:11:cd:36:a2:
                    fd:79:92:c4:4b:16:56:7b:46:a3:f0:40:23:ff:9d:
                    de:65:ee:eb:ac:9e:74:b3:30:14:4a:26:dc:3d:d2:
                    ea:c6:ed:09:c4:19:63:25:14:a4:d1:9b:22:c1:f9:
                    c6:01:81:f3:b6:b5:73:ce:35:a0:a3:e6:13:5f:44:
                    e1:4a:53:c1:68:c7:10:85:b1:29:a0:82:3d:90:a7:
                    30:c4:45:f9:58:58:64:0f:7b:6a:97:1e:1e:61:9e:
                    32:b0:9f:3e:60:08:fd:b9:c2:b0:5e:25:2a:8b:20:
                    58:bd:75:5d:15:bf:c4:c9:f0:39:d9:3b:30:48:58:
                    c2:b3:f7:99:18:97:42:70:02:29:0c:c0:b9:a2:4c:
                    55:d9:0b:3a:f3:ce:60:7c:2b:56:c2:23:1c:b1:8b:
                    6a:16:00:46:d7:8b:2b:ae:70:e3:a5:c5:01:7c:83:
                    8c:eb:e0:e0:96:62:87:6c:8d:df:d9:55:22:03:3b:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:59:87:44:E4:14:69:E0:86:93:E4:93:00:38:E4:31:84:3E:EF
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d0:76:35:e6:5e:a5:06:8d:bc:b5:41:bb:e1:86:85:b0:38:
         7e:c7:86:0e:f8:1e:d2:ed:a3:07:1a:e9:ca:7c:f8:7c:52:0b:
         47:7a:3e:dd:f8:bf:c0:cf:15:6a:e8:90:81:7f:8d:65:5a:9c:
         e5:5d:cd:d5:7d:a6:56:07:8a:c9:e7:b5:9b:5c:8c:6f:53:c5:
         17:18:e3:32:a2:88:bc:c6:69:f7:04:95:15:75:d1:e0:47:89:
         45:5b:a4:f9:04:42:0b:66:39:36:e3:36:1f:39:e1:a3:f3:84:
         ab:06:dc:38:c3:cd:94:f1:8f:fb:41:b3:6c:d4:76:98:da:f0:
         b5:3b:b1:7a:a2:4f:a2:7a:3c:8a:fc:f3:97:54:8a:80:0d:a5:
         3b:22:0a:0a:db:ce:e2:2a:b8:63:c8:b2:96:2c:64:10:32:11:
         f9:b6:fa:41:6c:2c:11:fa:53:8a:d4:ed:9c:59:a7:51:95:a0:
         9d:81:2f:47:cd:ce:e8:b3:6b:64:1c:69:b8:9a:e8:4c:3a:97:
         16:dd:44:e5:92:83:c9:13:0f:34:d8:19:21:50:47:02:4f:f7:
         75:d3:eb:58:78:bc:bb:5c:c9:f9:ee:4f:e5:87:f2:57:70:86:
         84:1e:7a:55:be:7b:ef:ef:86:b0:74:15:80:5d:c8:59:f9:a6:
         cd:e1:58:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:54:36 2025 by rpki-client