Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          dghu6loMH/hPVkeMxSs1O8W6Zqgjrpezafax1ZE3avE=
Subject key identifier:   3B:5E:D5:F6:C9:3C:45:19:30:7C:62:9D:8E:83:03:B8:9D:80:10:BC
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       7432F0AF0FC875594CE124E0943CC32D6CF9ABC9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          0367
Signing time:             Mon 03 Nov 2025 12:50:00 +0000
Manifest this update:     Mon 03 Nov 2025 12:45:00 +0000
Manifest next update:     Tue 04 Nov 2025 12:50:00 +0000
Files and hashes:         1: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: KUtjnXabsjb+dDIjc20jpdJyjoHMOFnDuF0ZbjlbQcI=)
                          2: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: 1aLO+tehODZC7sC5AsPOJHLNbV577t8WbR1dLhg4dlc=)
                          3: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: VXvyrrDD27zcLZmjQKfOsUN3PXhPsZFNh9LdYJ+iRB0=)
                          4: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: iVVEAhV4rlgsfchJqSDQdETbnqllnK86AiHF/GlkkCo=)
                          5: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: mdcjEKvPG/B73ccAsX3C8Dr9E3qMPPXDvAsTZRqDvVA=)
                          6: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: 0ZrcAy1yqfXbc6h7QM7Zk+vOIUxqyoSskLsVpTz96uY=)
                          7: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: DHwUsbqimEDvWCPxswBV80NNXLzXD8vJVrGf7btegks=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:32:f0:af:0f:c8:75:59:4c:e1:24:e0:94:3c:c3:2d:6c:f9:ab:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Nov  3 12:45:00 2025 GMT
            Not After : Nov  4 12:50:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:a1:b7:9d:b0:4a:2e:13:72:be:56:e4:0c:
                    6f:fa:57:5c:fd:57:6a:27:c4:6b:f5:e6:f4:e4:59:
                    ca:54:39:db:3d:ee:62:1b:4f:8b:7b:42:24:5a:d9:
                    a0:82:44:cf:bf:03:cf:ac:e2:3b:c3:6c:cb:0f:aa:
                    9f:e7:9e:87:c9:fe:4c:9c:27:e4:1d:65:1b:ef:d4:
                    b0:6f:9b:f9:e8:81:69:a9:9e:1c:f9:b5:78:55:7f:
                    7a:b9:86:6f:0c:35:25:81:65:25:82:e0:75:9b:a8:
                    cc:1b:68:eb:0a:86:e2:12:7e:a2:c4:66:8f:4e:54:
                    e5:06:fe:a2:01:97:8c:68:fd:d0:11:06:9c:8a:ec:
                    9d:96:ca:a9:45:64:c7:b8:2e:ac:0e:28:cb:02:e3:
                    7d:87:a5:09:1b:9c:89:33:4e:79:c5:d7:e8:87:ae:
                    39:2a:bc:8f:55:85:98:d2:7e:aa:c3:97:37:aa:ab:
                    91:0d:b6:1c:b1:e1:4f:6d:80:8b:d1:3c:4b:83:23:
                    cb:30:b3:ea:d8:99:c9:1e:f1:33:fd:20:97:89:15:
                    42:b7:6d:79:74:71:0c:9f:f4:45:14:cc:83:1d:8e:
                    50:48:1b:34:0e:3b:ff:9d:e5:3a:f2:f6:08:dd:1f:
                    38:79:7a:e4:5c:cc:5c:10:73:88:16:58:84:65:c5:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5E:D5:F6:C9:3C:45:19:30:7C:62:9D:8E:83:03:B8:9D:80:10:BC
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:0c:a9:c2:3b:a8:94:a8:1f:bc:8d:12:85:ca:eb:5e:ca:
         1c:6f:78:9a:cc:dc:79:99:c5:29:54:ca:80:bf:48:47:86:e3:
         71:23:dc:42:40:6e:82:f2:76:8a:ab:58:42:a7:81:f3:8a:c1:
         5a:64:c2:ee:77:37:2c:06:62:0b:03:a5:2b:3d:19:78:ac:8c:
         09:e5:3b:53:08:6c:41:9e:5b:c0:fa:27:1b:57:a4:6c:06:98:
         b4:14:a1:48:2b:69:7e:56:f1:e0:9e:54:f9:9c:6c:f1:fb:49:
         31:15:6a:ca:28:47:f2:6b:86:97:ee:98:7f:12:41:96:c2:b0:
         a0:3b:9a:18:c9:dd:a1:88:4a:cf:22:f9:69:29:3a:95:63:26:
         69:55:39:82:2e:21:9b:db:3a:30:27:4e:37:9c:67:de:ed:93:
         d0:39:af:52:f0:94:70:c2:29:dc:7d:8f:9e:5d:ea:ff:35:8a:
         06:2d:bd:df:01:fe:72:a1:3e:d9:8d:4a:cf:aa:ca:60:0c:78:
         78:b4:32:f4:74:3c:83:ce:4d:b1:d8:c8:5e:59:8f:80:6d:e9:
         8f:87:e3:6c:5a:4a:6f:67:84:61:a6:ae:20:34:a6:f3:97:e9:
         dd:b3:24:8e:da:74:3b:b0:ee:35:c8:3d:23:44:f9:32:49:1e:
         8e:ea:a5:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 00:26:00 2025 by rpki-client