Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          2+ILgwerQ2JxtblyKU9ixauFqc0lvpSVGUS8nqZRsfY=
Subject key identifier:   45:5A:27:EC:C6:53:51:6E:E1:69:F7:E2:35:8A:6C:BB:30:9A:1A:D2
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       38F1280281722E53260072297762B5EC4F583D9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          0523
Signing time:             Tue 25 Aug 2026 20:00:00 +0000
Manifest this update:     Tue 25 Aug 2026 19:55:00 +0000
Manifest next update:     Wed 26 Aug 2026 20:00:00 +0000
Files and hashes:         1: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: 7P+1a905lmT0JcF7XUrjJKKZxFBgMfUbEtZ05StPduA=)
                          2: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: eFsGhXoo/d0rpPbw3qwdE8MvPDtvekZflU7LISh/cjM=)
                          3: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: O747j2Mw2vMMFiFgZ1R8o7arRcyWWpDweLYMEv1CJn0=)
                          4: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: wTs8xmZ1SOAHFgoUFsOyGlpaIWNAC1iO1/p4IQb8388=)
                          5: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: RUF2U/TyU/qQ+OyIpub/5wQwJZgaihDcYeU5vaI8e70=)
                          6: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: VAYrxCa2og8J9FJ0O7g7wqUj3PkB1fZ4uSX3J0h6AgQ=)
                          7: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: bdVAbJ6amrili3nhYAhSchHWq6SRfkIDNH7R3ZhdGtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f1:28:02:81:72:2e:53:26:00:72:29:77:62:b5:ec:4f:58:3d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Aug 25 19:55:00 2026 GMT
            Not After : Aug 26 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:ea:b0:d7:d0:a1:cd:ec:71:bf:d0:78:79:
                    f9:bf:1c:b5:f8:30:12:46:69:c4:a9:17:52:29:28:
                    c3:1d:02:54:7d:c9:ea:6e:93:78:fc:d9:0f:11:4d:
                    08:0c:a9:31:04:ac:db:3f:2d:42:4a:dc:1f:2d:55:
                    ba:22:dc:9b:67:c8:47:3e:06:32:53:0d:a0:01:76:
                    99:da:12:39:16:5e:da:af:29:ef:42:46:cf:ef:cb:
                    2f:32:50:2a:d2:f4:e3:16:f9:74:22:10:fa:f3:a9:
                    28:3c:03:18:46:f1:30:9f:4d:e1:3d:e0:ea:e4:8c:
                    0b:42:30:14:7b:b5:35:bf:f2:32:7b:74:d3:d9:f0:
                    1c:37:49:8e:7f:c4:09:41:9f:49:cc:30:a8:a0:e8:
                    0a:86:d3:65:d5:32:ae:31:4d:88:24:81:24:0d:a8:
                    68:be:dd:ac:94:8f:19:fb:bf:4b:da:f6:4d:e0:f4:
                    f1:19:77:e6:c3:c4:c9:97:78:62:9d:83:eb:05:be:
                    15:69:b3:52:a9:bb:a6:ce:14:95:e3:90:b8:d7:33:
                    5c:50:e8:10:e4:11:1c:0f:37:84:5c:b3:13:a0:1f:
                    57:88:a2:a1:86:b1:64:68:09:2a:22:68:02:c5:a0:
                    96:d5:47:d6:ac:de:2a:8e:93:5d:c2:66:e7:ea:e6:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5A:27:EC:C6:53:51:6E:E1:69:F7:E2:35:8A:6C:BB:30:9A:1A:D2
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:98:28:f6:f2:d5:0f:50:72:17:5e:c7:c8:b7:de:ae:4c:cc:
         e1:b1:32:8c:89:10:63:cb:9b:42:9e:52:1f:50:4c:ed:7c:f9:
         22:4e:9e:aa:13:42:f8:f9:bb:ac:7b:30:2d:7f:d0:52:1f:b8:
         f3:ec:e4:00:a5:4c:bd:7e:de:79:6a:03:44:db:9b:de:60:ab:
         3d:5d:f3:e0:98:b6:66:3b:ca:37:4b:59:cf:32:d7:df:2a:21:
         1d:32:6e:9e:86:6d:22:d3:0b:6d:1d:53:6f:78:e7:3f:de:5d:
         bd:58:8f:f4:7b:18:44:86:78:01:a6:69:cd:9f:41:04:a2:f7:
         e3:6b:e2:56:b4:ca:f0:fc:d0:7e:b8:17:e1:2f:3b:1b:37:84:
         fb:c8:69:07:08:ab:8c:13:4a:2b:18:3d:2c:81:b4:0f:f6:09:
         3a:e6:89:65:f5:30:84:e9:be:15:9a:1a:87:b7:eb:a8:18:15:
         1c:3f:2e:ed:fa:81:1a:92:72:c5:81:e2:25:fe:5e:2f:b9:56:
         ca:69:48:06:9a:a6:af:4f:94:db:ca:9b:61:c1:ba:44:32:0a:
         81:af:77:3b:f6:9a:0e:6e:28:66:52:99:49:17:fb:76:fc:54:
         48:73:ad:d9:16:f2:84:e3:a8:25:e1:a4:06:c2:41:cd:a2:06:
         c8:04:fa:60
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUOPEoAoFyLlMmAHIpd2K17E9YPZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNzBEQzZFQTQ2QUE0RDJFQTI1NjYzRDI3QkNEMEM3
QjdCM0Q2MzAeFw0yNjA4MjUxOTU1MDBaFw0yNjA4MjYyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk3MkVBQjBEN0QwQTFDREVD
NzFCRkQwNzg3OUY5QkYxQ0I1RjgzMDEyNDY2OUM0QTkxNzUyMjkyOEMzMUQwMjU0
N0RDOUVBNkU5Mzc4RkNEOTBGMTE0RDA4MENBOTMxMDRBQ0RCM0YyRDQyNEFEQzFG
MkQ1NUJBMjJEQzlCNjdDODQ3M0UwNjMyNTMwREEwMDE3Njk5REExMjM5MTY1RURB
QUYyOUVGNDI0NkNGRUZDQjJGMzI1MDJBRDJGNEUzMTZGOTc0MjIxMEZBRjNBOTI4
M0MwMzE4NDZGMTMwOUY0REUxM0RFMEVBRTQ4QzBCNDIzMDE0N0JCNTM1QkZGMjMy
N0I3NEQzRDlGMDFDMzc0OThFN0ZDNDA5NDE5RjQ5Q0MzMEE4QTBFODBBODZEMzY1
RDUzMkFFMzE0RDg4MjQ4MTI0MERBODY4QkVEREFDOTQ4RjE5RkJCRjRCREFGNjRE
RTBGNEYxMTk3N0U2QzNDNEM5OTc3ODYyOUQ4M0VCMDVCRTE1NjlCMzUyQTlCQkE2
Q0UxNDk1RTM5MEI4RDczMzVDNTBFODEwRTQxMTFDMEYzNzg0NUNCMzEzQTAxRjU3
ODhBMkExODZCMTY0NjgwOTJBMjI2ODAyQzVBMDk2RDU0N0Q2QUNERTJBOEU5MzVE
QzI2NkU3RUFFNjY2QzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyXLqsNfQoc3scb/QeHn5vxy1+DASRmnEqRdSKSjDHQJUfcnqbpN4
/NkPEU0IDKkxBKzbPy1CStwfLVW6ItybZ8hHPgYyUw2gAXaZ2hI5Fl7arynvQkbP
78svMlAq0vTjFvl0IhD686koPAMYRvEwn03hPeDq5IwLQjAUe7U1v/Iye3TT2fAc
N0mOf8QJQZ9JzDCooOgKhtNl1TKuMU2IJIEkDahovt2slI8Z+79L2vZN4PTxGXfm
w8TJl3hinYPrBb4VabNSqbumzhSV45C41zNcUOgQ5BEcDzeEXLMToB9XiKKhhrFk
aAkqImgCxaCW1UfWrN4qjpNdwmbn6uZmxQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEVaJ+zGU1Fu4Wn34jWKbLswmhrSMB8GA1UdIwQYMBaAFCG3DcbqRqpNLqJWY9J7
zQx7ez1jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVM
Q29aNHlpaWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzEvMjFCNzBEQzZFQTQ2QUE0
RDJFQTI1NjYzRDI3QkNEMEM3QjdCM0Q2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMUI3MERDNkVBNDZBQTREMkVBMjU2NjNEMjdCQ0QwQzdCN0Iz
RDYzLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVMQ29aNHlp
aWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzEvMjFCNzBEQzZFQTQ2QUE0RDJFQTI1
NjYzRDI3QkNEMEM3QjdCM0Q2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADaYKPby1Q9Qchdex8i33q5M
zOGxMoyJEGPLm0KeUh9QTO18+SJOnqoTQvj5u6x7MC1/0FIfuPPs5AClTL1+3nlq
A0Tbm95gqz1d8+CYtmY7yjdLWc8y198qIR0ybp6GbSLTC20dU2945z/eXb1Yj/R7
GESGeAGmac2fQQSi9+Nr4la0yvD80H64F+EvOxs3hPvIaQcIq4wTSisYPSyBtA/2
CTrmiWX1MITpvhWaGoe366gYFRw/Lu36gRqScsWB4iX+Xi+5VsppSAaapq9PlNvK
m2HBukQyCoGvdzv2mg5uKGZSmUkX+3b8VEhzrdkW8oTjqCXhpAbCQc2iBsgE+mA=
-----END CERTIFICATE-----