Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
File:                     21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json)
Hash identifier:          EkD0tAH8gAK6F63hsszuCngqT6rJiobpnBPwKAUYoQw=
Subject key identifier:   79:F4:17:A0:C2:B7:15:66:10:AF:B2:99:FB:4F:81:FE:30:F7:BD:C4
Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7
Certificate issuer:       /CN=21CD91C985E580029306365FB6A119DAEFE368C7
Certificate serial:       0FB7E13C819A18AAAB0F95FB2F4201E06EA1B83E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
Manifest number:          58
Signing time:             Sun 24 May 2026 08:19:41 +0000
Manifest this update:     Sun 24 May 2026 08:14:41 +0000
Manifest next update:     Mon 25 May 2026 12:13:41 +0000
Files and hashes:         1: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=)
                          2: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=)
                          3: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: rd1QM4E9VFG19/eCydEf5OpNdx4R8O/AmYj5vLHrTeY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b7:e1:3c:81:9a:18:aa:ab:0f:95:fb:2f:42:01:e0:6e:a1:b8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7
        Validity
            Not Before: May 24 08:14:41 2026 GMT
            Not After : May 25 12:13:41 2026 GMT
        Subject: CN=79F417A0C2B7156610AFB299FB4F81FE30F7BDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:39:84:99:88:fb:14:81:e3:79:ca:56:bf:
                    a3:9f:c7:af:2a:b9:b4:65:70:c2:fe:d8:47:a7:52:
                    66:d9:80:f5:69:bc:23:ed:de:5c:64:9a:29:27:ce:
                    9b:a3:86:6e:02:23:5b:c2:0e:ca:7d:93:b5:58:b1:
                    d6:e7:58:45:47:4b:3f:b3:d0:9e:36:a4:a9:cc:93:
                    8e:c7:6f:d1:78:15:69:00:b9:34:15:7a:c4:88:b6:
                    fd:91:6a:c9:2c:f2:b4:f6:6e:6a:f2:3c:d6:12:42:
                    0b:3d:55:fd:b5:92:c6:27:46:6a:9d:ad:e6:e5:f7:
                    5f:a8:65:9e:e5:71:80:40:74:a6:97:14:bf:b6:e8:
                    c1:aa:ea:c7:53:a6:ac:a2:2d:c4:87:f6:d6:3f:7f:
                    92:70:80:3c:ba:8c:ad:5f:8d:27:42:89:9d:75:62:
                    dc:30:26:5c:6f:7f:2f:a9:6a:f5:db:e7:18:d0:5f:
                    9b:0c:b5:c1:ef:eb:c7:1e:89:74:df:d9:45:55:71:
                    07:e1:0d:1b:a3:6b:69:3b:73:41:24:37:c0:71:ce:
                    66:36:62:1b:bc:da:3f:e2:b2:38:6a:5c:84:a1:77:
                    c2:64:6a:d6:95:c8:a5:e5:bf:c8:1a:71:22:c6:8e:
                    06:fa:8f:7b:67:7a:55:02:f7:dd:ce:13:a0:67:78:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F4:17:A0:C2:B7:15:66:10:AF:B2:99:FB:4F:81:FE:30:F7:BD:C4
            X509v3 Authority Key Identifier:
                keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c7:46:0e:62:38:de:e1:47:24:21:af:5e:c1:ab:0b:3b:e3:
         ac:00:c7:29:20:28:8f:7d:58:55:37:79:bb:da:89:75:f3:e4:
         91:3f:8a:ed:4e:50:02:a4:52:30:c9:a0:db:c1:de:2b:34:e9:
         b8:d0:88:38:a0:93:74:9e:a0:17:c8:47:c2:7c:64:83:72:92:
         91:40:bd:b6:3c:fb:f3:e6:1d:c0:31:bd:38:c1:0e:46:63:47:
         94:01:be:2a:cb:f3:00:63:0e:49:e9:04:9e:9b:12:2b:02:9b:
         0f:19:06:6d:5a:ec:2d:9f:56:53:31:7b:e1:e3:24:8e:66:c2:
         7e:0e:a7:9a:3b:42:1f:a6:6e:64:58:ff:cb:a7:81:49:09:d6:
         4e:38:8c:91:66:c3:56:ba:be:47:ab:ea:f1:ad:20:e9:4f:24:
         62:2f:9c:ef:5e:c2:e2:44:76:ba:21:38:b3:68:e4:9d:a9:3b:
         4a:aa:1d:a0:5d:fc:93:9a:c0:28:69:a0:23:12:3c:04:13:c3:
         cb:39:29:41:04:c9:89:97:8d:8e:d1:7e:09:9f:c0:41:e7:2a:
         74:5f:5e:a4:5f:d2:a8:5d:4c:d5:8c:bb:6c:b1:fb:93:b5:e0:
         3c:6b:51:db:95:2d:08:93:f9:cc:4d:70:05:90:b8:5d:33:58:
         80:c9:88:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD7fhPIGaGKqrD5X7L0IB4G6huD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF
RkUzNjhDNzAeFw0yNjA1MjQwODE0NDFaFw0yNjA1MjUxMjEzNDFaMDMxMTAvBgNV
BAMTKDc5RjQxN0EwQzJCNzE1NjYxMEFGQjI5OUZCNEY4MUZFMzBGN0JEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnjmEmYj7FIHjecpWv6Ofx68q
ubRlcML+2EenUmbZgPVpvCPt3lxkmiknzpujhm4CI1vCDsp9k7VYsdbnWEVHSz+z
0J42pKnMk47Hb9F4FWkAuTQVesSItv2Rasks8rT2bmryPNYSQgs9Vf21ksYnRmqd
rebl91+oZZ7lcYBAdKaXFL+26MGq6sdTpqyiLcSH9tY/f5JwgDy6jK1fjSdCiZ11
YtwwJlxvfy+pavXb5xjQX5sMtcHv68ceiXTf2UVVcQfhDRuja2k7c0EkN8BxzmY2
Yhu82j/isjhqXIShd8JkataVyKXlv8gacSLGjgb6j3tnelUC993OE6BnePEdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUefQXoMK3FWYQr7KZ+0+B/jD3vcQwHwYDVR0j
BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o
a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5
MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y
MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAysdGDmI43uFHJCGvXsGrCzvjrADHKSAoj31YVTd5u9qJdfPkkT+K7U5QAqRS
MMmg28HeKzTpuNCIOKCTdJ6gF8hHwnxkg3KSkUC9tjz78+YdwDG9OMEORmNHlAG+
KsvzAGMOSekEnpsSKwKbDxkGbVrsLZ9WUzF74eMkjmbCfg6nmjtCH6ZuZFj/y6eB
SQnWTjiMkWbDVrq+R6vq8a0g6U8kYi+c717C4kR2uiE4s2jknak7SqodoF38k5rA
KGmgIxI8BBPDyzkpQQTJiZeNjtF+CZ/AQecqdF9epF/SqF1M1Yy7bLH7k7XgPGtR
25UtCJP5zE1wBZC4XTNYgMmILw==
-----END CERTIFICATE-----
Generated at Sun May 24 13:37:16 2026 by rpki-client