Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File:                     21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier:          NmJGnqtZ0+mNcd6ovE3PA+t0iGdQMTFk0tZWI43mrpI=
Subject key identifier:   F8:B2:D9:34:1B:20:8D:1E:43:CD:2D:42:41:82:E8:00:33:CF:78:AE
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       77A0240840244D351EAA740F361FD38147E4BFB9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number:          04E8
Signing time:             Sun 01 Nov 2026 08:05:38 +0000
Manifest this update:     Sun 01 Nov 2026 08:00:38 +0000
Manifest next update:     Mon 02 Nov 2026 09:04:38 +0000
Files and hashes:         1: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: 7aTtgUqEyqPuej3q2lwsSTr2rk/MI0wGxGT/5iEVdrk=)
                          2: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: l17UN9IzRIABa59CeIRbssQa7kwxF2pq05HuyXEYi0U=)
                          3: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: ZbLY81Qr/kgliAkBV3YAtVvd9gQwCN9bnYLAY1+FTEo=)
                          4: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: Oyv+7D9xugIZCh9Lg0JSqjdqnw1enpGbnitSgxBQNbg=)
                          5: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: 856oxyqm6ptr7whM8O40m6eFs/N6/chbwdBgzf+BE/g=)
                          6: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: gUzk6XeWFdKb3L97R9Jbxb8JQipRUEL8ki7wNf67nXs=)
                          7: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: YTZM+Sc9QyGi6dy9KC1jkSzVSLUr0+1BKijGiYiV7gY=)
                          8: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: DQ/dBKnGAO+nMEtu22vuOHu4SoQakMP9Pkd1UiA0ct4=)
                          9: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: mkvsDsAhdYz1n1tZbIo6R1LGkWRQcfz3F9N/aJagqtU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 09:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a0:24:08:40:24:4d:35:1e:aa:74:0f:36:1f:d3:81:47:e4:bf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Nov  1 08:00:38 2026 GMT
            Not After : Nov  2 09:04:38 2026 GMT
        Subject: CN=F8B2D9341B208D1E43CD2D424182E80033CF78AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:0b:b2:f5:41:b2:b3:28:69:fe:2b:70:15:
                    37:5c:09:e1:c2:e2:9e:25:ce:b8:e7:42:d7:1a:68:
                    d2:82:34:ff:10:a2:52:29:2c:35:56:e8:34:ea:22:
                    de:02:11:95:28:7c:f7:2d:0b:71:4a:8b:5f:e1:b7:
                    32:f0:ca:bc:60:01:71:d1:1a:8c:cd:7e:e7:c1:77:
                    31:c2:05:ff:66:19:23:5d:74:cd:2e:a6:1c:1f:18:
                    2f:66:38:67:0c:00:a2:a7:c7:c0:8d:71:c8:27:35:
                    a9:15:75:00:c5:29:af:96:68:e6:f5:30:3d:0a:79:
                    df:c8:fc:d1:ca:df:4f:14:c1:fb:a6:13:19:74:1b:
                    d4:35:a7:6b:b3:19:20:48:9d:3c:a1:3a:e8:66:1e:
                    eb:35:e0:81:48:a9:fb:8d:c9:18:f4:db:f2:e8:85:
                    0e:38:51:95:c2:e4:5e:2e:e4:48:1a:20:dd:70:c7:
                    8e:d3:49:c4:ca:ca:71:0b:29:96:16:ab:db:b2:53:
                    b7:f8:fa:e2:b0:ac:97:7c:00:f9:45:57:2c:0c:61:
                    f7:55:b4:ba:1b:77:df:e2:a7:16:c1:5c:12:54:d4:
                    13:ac:d1:ac:ae:ab:f3:97:f6:2a:08:24:d1:98:e7:
                    ce:a8:88:25:d3:21:85:1d:f8:89:4d:c0:e2:fb:d6:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:D9:34:1B:20:8D:1E:43:CD:2D:42:41:82:E8:00:33:CF:78:AE
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:93:de:9f:93:99:31:68:1a:a0:65:d0:98:52:f3:6c:36:
         12:47:f8:c1:2a:bc:96:b6:44:8b:ce:1a:1f:6a:77:bb:90:6b:
         9f:ae:9d:1e:53:83:3a:fa:9e:0e:0e:70:cf:5e:7d:fd:56:db:
         4f:fd:53:26:86:9a:97:f9:48:57:4c:59:2c:c4:1d:bf:15:1a:
         bb:6f:88:81:c8:f1:45:a4:a1:e6:64:97:eb:cd:e0:f9:22:f4:
         28:3a:fc:b5:ed:10:21:b2:ab:82:5b:3a:ce:eb:77:44:e0:c4:
         f9:d6:cb:0a:f1:7f:23:fe:25:4f:07:2d:87:b6:dc:a5:e0:c4:
         d4:a3:49:77:b2:db:49:07:48:75:01:2f:c0:03:12:5b:16:b4:
         7c:a4:8c:0c:9c:a9:15:5b:a5:7d:5a:52:fe:4f:27:b7:29:47:
         ed:b9:19:f0:17:82:b5:6b:6a:2c:7a:6d:40:e2:6b:32:5a:4b:
         5a:f0:f3:7c:4d:73:55:15:89:f5:69:22:8e:f0:c9:a1:0f:79:
         29:a2:56:42:bf:48:fd:47:a8:bd:e5:d5:a6:98:8a:ee:e0:6c:
         af:3d:98:c4:eb:fb:10:7a:8a:11:bc:f8:59:52:13:76:e4:44:
         cc:14:c1:c1:9d:1c:fb:ca:a7:0c:8b:9d:fe:c9:a6:ab:c0:c9:
         88:a5:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:14:43 2026 by rpki-client