Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          NjXl/EiHTskiZrew/Jx0OrMh7Dzrpve7swRYSAEphhA=
Subject key identifier:   CE:31:70:3C:C2:E0:0C:2E:A1:FB:87:2A:9A:45:7A:9A:B4:FB:E0:BF
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       2489934243EF86D9A62C8CF631264020B8F4309B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          02DA
Signing time:             Sun 23 Aug 2026 17:25:21 +0000
Manifest this update:     Sun 23 Aug 2026 17:20:21 +0000
Manifest next update:     Mon 24 Aug 2026 18:12:21 +0000
Files and hashes:         1: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: iRuqVBfrE0kASFZUOEN5l5bTyV621nXJg3Yvq4G98kg=)
                          2: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: GOy//cGQcPGC86jIJCRkp9ayCU8DrZU/x1SkWMI6TGU=)
                          3: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: WaBN8vhpaukaQaVmisq6f2jBRD6Zvq4V2qKtYIXL5Q4=)
                          4: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: lgc35899CD1qdITKmLQLxPFgoyjYP0D9XSh+IOdRMhc=)
                          5: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: 4WFQg0hyPoA+YjE9DlLs+fxsCz/1Hm6ZKXSkk0hKzhQ=)
                          6: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: YxWQ+5m9LYpiBqrAW51jJwmjcKC5eTyYfK/Ip29zres=)
                          7: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: Ew0VNMo4xdPi3gN9F6m+wkvVTfV4Mcup88zNsvWaPXo=)
                          8: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: n14oosemqhBjKJdVtflWC+HpPxELkPaFWKg6Eso9Skc=)
                          9: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: /LjuaGxyTcQA0QEAtIBMK4I71Z8mm+OXQ0UKtoJX6FE=)
                          10: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: V+e0sCZoefnOIdV8N6fLVdMQwDiNL9pfupfK5prc9qg=)
                          11: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: gbza8z3/TVSV8pS7vM16AvzO4T1HVP0I/SXwsmJE54o=)
                          12: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: i0sEhWYHgSiXp5V1EkcxdgpEzXORyMRTfk54jKWdVl8=)
                          13: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: boAtywzXo3l+O3coO5VXODkAwWQ2OHFkhLmylrZ/V9w=)
                          14: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: 0ksqEnvXv/6hMwy0m4SHmbFexWGbnXgVvcDzt9QDYSM=)
                          15: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: T4RGgh2bTxHiP4a0RFVpiCwLvMkzMCDUwhsMn4KWnIo=)
                          16: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: B0TDfSrSNut8VQ285WyB4o9E3ZabtlkG/qnsOsUi6Lw=)
                          17: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: VUzMKYRRCJD11xUjAVlO7XCrM+ImpNsYRS5G0IjqGSc=)
                          18: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: xA4SawgrstA/uHIpfe5e5ErrfmUhnSBpoMa55Lufnlk=)
                          19: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: knoPnv5k7N4ARK61J+LlvRSNs41ePFvQyFL1x4gWw/4=)
                          20: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: XMRDRzhpQhhp0OTma7xkqipCwIDvk7r3TOXiN7hkR4o=)
                          21: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 5qvvtSGaFf5wISwQWZ8BZ85obWb8+jvaKgujZOnIWfA=)
                          22: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: 1+/pplX7T7J05KkRZmEDqLrGq6B6Swew+LIbfkXTx24=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:89:93:42:43:ef:86:d9:a6:2c:8c:f6:31:26:40:20:b8:f4:30:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Aug 23 17:20:21 2026 GMT
            Not After : Aug 24 18:12:21 2026 GMT
        Subject: CN=CE31703CC2E00C2EA1FB872A9A457A9AB4FBE0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:ad:34:d1:f2:7d:93:96:e9:7c:30:01:d2:
                    ac:dd:9d:ac:1b:7a:d8:4d:ce:07:f5:ef:f7:ba:6e:
                    34:c2:ea:cb:3c:dc:50:cf:8d:09:cb:ec:2d:d7:98:
                    cc:d7:bd:1a:99:49:45:9a:97:3d:7c:eb:16:10:e8:
                    70:2e:16:b6:f6:f9:a1:c9:a9:d2:ae:69:8f:b0:e1:
                    e6:94:02:b2:8a:97:59:77:4f:cd:3d:a7:03:ba:83:
                    e9:18:be:dc:7d:3c:1c:50:f9:00:f9:f3:37:d5:93:
                    37:a3:78:b5:70:50:bf:e9:39:4f:92:df:b7:26:ba:
                    d0:39:f0:92:69:28:e3:17:c1:c0:06:0b:22:45:a6:
                    11:91:d5:e3:0f:35:da:bc:e1:ec:45:51:66:69:e4:
                    b2:85:c2:72:39:8f:3d:18:94:f1:c3:02:e6:c7:e8:
                    31:91:af:4e:a1:a0:2c:ca:7c:b1:f1:4e:ec:3d:f3:
                    05:68:23:61:56:db:d9:ec:39:a6:39:11:a4:58:d0:
                    dc:93:f3:a6:48:35:09:ac:84:ce:41:54:f1:63:bf:
                    d6:81:8a:e5:3a:e1:b7:75:5e:f9:a1:66:4f:0e:2a:
                    b8:cb:60:64:75:86:a3:d5:93:12:15:35:4d:4c:7a:
                    2a:03:06:2e:a4:b1:55:5a:76:0e:88:82:77:05:5e:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:31:70:3C:C2:E0:0C:2E:A1:FB:87:2A:9A:45:7A:9A:B4:FB:E0:BF
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:51:c9:85:f3:04:32:81:43:37:77:51:6d:1b:74:84:8c:47:
         7d:5e:c7:38:bc:5e:74:ab:be:16:44:30:0f:cf:be:8a:0b:f2:
         0e:d9:a9:fa:2a:7a:d8:46:9a:d5:4e:1f:a8:03:6d:04:1c:21:
         fc:62:f1:43:fe:c9:af:11:4b:de:37:3c:81:9c:1a:5a:ed:1f:
         a9:4e:3a:7f:db:82:06:eb:2f:c1:7a:d7:5b:91:6b:73:62:35:
         03:7e:54:35:45:87:c8:85:f9:b0:f1:40:e2:7d:a8:66:22:53:
         47:86:81:3e:86:18:8b:81:bf:18:23:1e:13:b0:33:fd:a6:7f:
         3d:4d:18:eb:c5:2a:f5:82:a8:58:ab:b2:51:06:1e:98:1b:5f:
         e7:0a:41:58:35:62:27:1d:c1:3d:ef:d3:e4:35:73:01:db:07:
         1f:ee:b7:a2:f6:ef:05:e4:13:f4:0b:13:9a:d3:70:c1:96:89:
         22:db:0d:07:94:5b:fa:ed:98:78:f0:b8:3c:33:03:6a:a7:3b:
         8e:79:e9:0a:07:43:a4:a9:c6:bf:18:e3:31:64:20:6d:39:4c:
         8c:2d:7f:4d:a7:32:01:07:b0:f9:84:1c:29:c3:60:d9:d0:30:
         88:9b:69:b5:60:ec:18:07:ff:39:bd:32:87:c3:87:ce:74:cb:
         ad:0a:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:35:44 2026 by rpki-client