Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
File:                     21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft (raw, json)
Hash identifier:          yEISxW2Wd1YINoA10DccpooXR9XFqSg2i+u6f4YW1wM=
Subject key identifier:   10:A0:05:CD:7A:8B:C5:40:E5:B5:29:03:D0:C0:37:5C:41:D3:D2:FD
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       7F36EFEBB79829069BE4D77FB3A3E737E42076D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
Manifest number:          01A0
Signing time:             Mon 12 Oct 2026 09:44:14 +0000
Manifest this update:     Mon 12 Oct 2026 09:39:14 +0000
Manifest next update:     Tue 13 Oct 2026 12:42:14 +0000
Files and hashes:         1: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (hash: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8=)
                          2: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=)
                          3: 3137372e39312e3136322e302f32332d3233203d3e20323633343434.roa (hash: qfhSga2IMpoaAnUO25wNSoxFtOa32oTy1r7EZiIHqUA=)
                          4: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (hash: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI=)
                          5: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs=)
                          6: 21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl (hash: yPrftozow7ZgG7zaRVv5KjY/xpmyBAiOxuyT1yqvDO4=)
                          7: 3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (hash: lUN+QHTKJKyHBU3vjixy9YwVPc/E7x0KU1Uy3nCCZ9k=)
                          8: 3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (hash: msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=)
                          9: 3137372e39312e3136302e302f32322d3232203d3e203238363534.roa (hash: zMPeVthko61KQfxRGSq9tfihXUQFHZtoCmsg/6o/mlE=)
                          10: 323830343a313164633a653030303a3a2f33362d3336203d3e20323633343434.roa (hash: sdWDdEzXTllJ+b9NYdd0B6N/n2HV3FuMKb/yJx7dh8k=)
                          11: 323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (hash: 47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=)
                          12: 3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (hash: RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=)
                          13: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (hash: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs=)
                          14: 3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (hash: 8AGZo5c6QxM495LEDMYWHMa04vhnyj+L2PBY1psr7lo=)
                          15: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (hash: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo=)
                          16: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg=)
                          17: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (hash: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=)
                          18: 323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa (hash: 87cH/zfVlYwo/lhL99VL56iNS+3f0irZ7ULeW4B23KA=)
                          19: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: UTzGGjVGwAzOOUF7F0ZvNmPm5rv5LvLa1K3tF9sa8g4=)
                          20: 3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (hash: rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=)
                          21: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (hash: tl7SZK5bevdutiPKQYPSOUXTV2ZHKVgW6OeLMxCKXzA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 12:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:ef:eb:b7:98:29:06:9b:e4:d7:7f:b3:a3:e7:37:e4:20:76:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Oct 12 09:39:14 2026 GMT
            Not After : Oct 13 12:42:14 2026 GMT
        Subject: CN=10A005CD7A8BC540E5B52903D0C0375C41D3D2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:2c:6f:27:73:ed:3c:1d:eb:bb:02:1e:22:
                    ac:1a:1c:b5:ce:35:e3:96:59:26:48:13:44:40:c1:
                    df:27:95:66:a3:e4:33:32:db:83:b0:90:c2:87:db:
                    0e:63:59:c9:ec:5b:54:22:bb:84:42:1e:9c:90:02:
                    22:34:1b:5d:4c:4a:01:1d:bd:83:ca:ca:de:20:d1:
                    a1:fc:5f:69:a4:d5:39:fa:ee:e4:2a:1c:ba:ef:48:
                    d4:c7:59:28:23:c6:d5:5b:7f:00:5d:74:b0:88:ce:
                    4b:9e:4d:06:fb:c8:c9:f1:af:33:96:41:36:51:15:
                    6c:d9:a4:b8:f7:49:6b:c7:ba:3e:e0:3c:c2:71:6e:
                    aa:08:ae:fd:e4:9e:fb:6f:11:b9:fb:0e:fe:ab:79:
                    9b:8b:66:7e:1e:55:2c:e0:f8:2f:e3:d1:d6:31:32:
                    27:3e:f0:51:fa:08:f4:97:2c:b0:3a:f7:60:14:78:
                    1e:a7:f2:bc:13:8d:88:b2:ae:97:e0:cb:f4:94:6c:
                    24:93:f8:2b:f8:11:df:dc:51:cb:cd:e9:a2:82:ff:
                    9d:23:43:84:51:db:4c:3f:96:4f:98:1d:71:8e:0d:
                    e7:bb:04:00:f9:29:cf:ac:f2:09:26:9d:b3:72:90:
                    3a:b6:6e:a2:f5:0e:20:a7:8f:73:03:3f:27:ae:ad:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:05:CD:7A:8B:C5:40:E5:B5:29:03:D0:C0:37:5C:41:D3:D2:FD
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:34:db:28:29:f4:43:fb:7e:a3:52:f2:68:21:9c:2d:18:4c:
         00:f7:ed:02:bb:e8:95:93:a7:f0:98:30:6b:ee:b0:70:0b:49:
         2c:f8:67:c2:69:2d:5e:2f:80:67:ea:a8:0c:00:8b:1b:05:ec:
         a2:ea:1c:cb:6b:bb:4d:5b:28:2c:70:49:d9:e4:e3:c5:b9:e0:
         c9:d2:cf:c6:15:78:8a:04:92:ac:0f:bf:a1:43:0a:f4:72:1f:
         46:47:1a:66:6b:b8:ba:a9:8a:b4:56:e9:a7:b8:39:e7:09:aa:
         17:b1:69:05:d3:ed:c3:35:c3:93:b1:06:ac:5d:cb:a7:8c:00:
         2e:2a:4a:64:50:30:58:aa:9a:d2:dc:92:87:b8:5d:70:65:0b:
         fa:05:37:29:dc:18:ba:78:67:dc:88:e9:40:87:06:9f:03:2b:
         30:fd:c4:82:f5:4b:f2:a2:32:e7:b9:f3:a8:cf:75:46:7b:44:
         35:6f:a4:8d:82:5b:60:d9:73:76:07:a0:92:a9:5f:c2:2c:38:
         64:2b:bc:00:ef:13:52:83:8b:4f:52:02:4e:17:5c:1f:86:fd:
         88:61:e3:7d:8e:6a:59:8e:2d:21:77:50:dd:12:8c:4d:0e:d6:
         7d:c7:ce:c0:03:0a:ed:3e:e1:c3:0b:90:7c:0b:90:99:55:4b:
         84:5f:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:09:11 2026 by rpki-client