Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          iB3T16gz4HzwT2K/O9S55oyxdTH7QodxmVHjwLPZs14=
Subject key identifier:   76:BC:BA:70:D4:77:80:3B:82:56:74:DC:0E:BD:34:D2:30:CD:4E:F3
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       1CA2C10548FCEF8216AE5C94865FBE7DD5880209
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          0133
Signing time:             Wed 20 Aug 2025 13:56:15 +0000
Manifest this update:     Wed 20 Aug 2025 13:51:15 +0000
Manifest next update:     Thu 21 Aug 2025 16:23:15 +0000
Files and hashes:         1: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: 7GhebfZkMpwDf74rrS7174rTkkTIlJFNXfbzkct2rJU=)
                          2: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: nV3EAzkjyjcLJlLYhUzZ1foiT4YiRW1MyOKwg9DBFxU=)
                          3: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: 3Ts042d/UEYTxmGCmrRlmH8gUcNhJn7pIwo1eyDzZ/Q=)
                          4: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: 8/IQkoKpmq9e1klaDPsIKiunsbtwFKYfeFsA5pUUXNk=)
                          5: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: 1qrEyc9df4Z2AG3zLlph44TwEtTy3IHCrOF8zS3oQn0=)
                          6: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: HaHwoyFWVmrHs3VdmJGyyZ+fSHR5dae8NikP/GrmCkE=)
                          7: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: 2qTmrxUdkbRIvwib6+w7UvGkOQiloJ0+6GGIxAc9vEg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:c1:05:48:fc:ef:82:16:ae:5c:94:86:5f:be:7d:d5:88:02:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Aug 20 13:51:15 2025 GMT
            Not After : Aug 21 16:23:15 2025 GMT
        Subject: CN=76BCBA70D477803B825674DC0EBD34D230CD4EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:a9:a0:21:b9:1c:11:33:a9:82:96:ef:06:
                    7e:26:df:c4:5c:3b:e8:8e:8c:9c:10:a9:b5:86:80:
                    8d:99:c9:1a:e5:3d:15:f4:f4:0a:bb:1e:84:ec:4f:
                    cc:c6:0d:96:b8:92:be:5f:cb:07:c4:8d:45:a7:77:
                    bc:90:cf:e9:7f:0f:cd:c2:e9:1c:50:58:c2:0a:a0:
                    6e:d8:b5:25:18:9a:68:53:fc:72:79:7c:dc:e5:a1:
                    be:ea:26:6c:4d:37:e0:d0:56:53:31:fa:62:9c:88:
                    98:f6:95:32:2f:46:28:9d:4c:ec:24:87:42:1d:b1:
                    80:f0:af:cd:54:ce:01:e5:5d:63:c0:12:72:3c:47:
                    00:16:a1:66:cc:4d:51:78:33:80:90:f4:3a:ed:f7:
                    c8:c5:b0:23:c0:87:9e:e9:aa:05:6b:d3:0e:59:43:
                    11:d9:89:0f:63:09:61:5a:89:93:2b:87:ab:da:6c:
                    dc:28:2c:14:05:aa:44:34:83:ad:a5:9a:f1:71:bf:
                    ae:a5:e4:d7:55:52:c6:a4:a2:d3:e2:f1:05:52:b2:
                    cc:7e:b8:be:9f:fa:5b:d4:53:8e:ee:7c:85:ac:49:
                    bb:16:f4:c2:7f:d7:86:70:af:da:35:2d:1d:f7:fd:
                    1d:4c:ba:eb:91:b0:2d:9f:cf:8d:a4:9b:8d:24:95:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:BA:70:D4:77:80:3B:82:56:74:DC:0E:BD:34:D2:30:CD:4E:F3
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9a:1a:3c:b9:cb:f5:94:0d:01:05:0c:17:d6:eb:8a:df:08:
         e7:7d:98:89:df:80:a4:eb:54:2d:cc:a9:08:8b:90:ec:2a:0f:
         2c:22:70:27:83:fe:97:b6:20:67:b4:35:d8:90:07:1d:d9:9c:
         52:0e:c2:3d:19:1c:7f:cb:2c:fe:07:c8:90:08:0f:75:77:49:
         57:94:5e:8f:26:89:e6:32:df:51:55:90:be:d1:8b:8e:b2:3f:
         c8:e5:3e:a9:d5:41:d3:43:7b:b2:cc:f7:e0:0a:2d:25:14:02:
         ea:ea:8b:26:91:e4:5d:8c:88:f2:31:32:f8:eb:c7:50:16:33:
         35:28:97:47:8f:54:81:d8:fc:68:c8:4c:35:65:3a:c9:56:6c:
         ba:8f:3c:76:fb:a6:9e:ea:54:52:b2:fc:2c:f6:6c:f9:4b:0d:
         82:77:30:eb:4f:30:2f:38:e8:81:12:51:8f:35:e4:72:5e:c6:
         06:1d:cb:32:31:ae:e7:4e:b4:6f:f1:5b:81:f1:9f:78:5e:22:
         7b:8b:e3:3f:c7:fb:9f:77:b1:3c:d1:5c:03:8c:0b:a8:23:7d:
         63:ef:5c:ef:87:c4:bb:b6:34:8f:ec:65:f0:3c:38:85:3f:36:
         df:a8:a3:ce:1c:d9:d6:e9:0c:60:bc:8b:57:a9:ca:9e:04:5a:
         df:99:f2:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUHKLBBUj874IWrlyUhl++fdWIAgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEzRDYxRUE1ODQ3NjM3MDVBNzI0M0Y4N0QyNjMyN0VD
NUNBNjNCMDAeFw0yNTA4MjAxMzUxMTVaFw0yNTA4MjExNjIzMTVaMDMxMTAvBgNV
BAMTKDc2QkNCQTcwRDQ3NzgwM0I4MjU2NzREQzBFQkQzNEQyMzBDRDRFRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHL6mgIbkcETOpgpbvBn4m38Rc
O+iOjJwQqbWGgI2ZyRrlPRX09Aq7HoTsT8zGDZa4kr5fywfEjUWnd7yQz+l/D83C
6RxQWMIKoG7YtSUYmmhT/HJ5fNzlob7qJmxNN+DQVlMx+mKciJj2lTIvRiidTOwk
h0IdsYDwr81UzgHlXWPAEnI8RwAWoWbMTVF4M4CQ9Drt98jFsCPAh57pqgVr0w5Z
QxHZiQ9jCWFaiZMrh6vabNwoLBQFqkQ0g62lmvFxv66l5NdVUsakotPi8QVSssx+
uL6f+lvUU47ufIWsSbsW9MJ/14Zwr9o1LR33/R1MuuuRsC2fz42km40klWxJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdry6cNR3gDuCVnTcDr000jDNTvMwHwYDVR0j
BBgwFoAUIT1h6lhHY3BackP4fSYyfsXKY7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1
VlgvMC8yMTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxM0Q2MUVBNTg0NzYzNzA1
QTcyNDNGODdEMjYzMjdFQzVDQTYzQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1VlgvMC8y
MTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP5oaPLnL9ZQNAQUMF9brit8I532Yid+ApOtULcypCIuQ7CoPLCJwJ4P+l7Yg
Z7Q12JAHHdmcUg7CPRkcf8ss/gfIkAgPdXdJV5RejyaJ5jLfUVWQvtGLjrI/yOU+
qdVB00N7ssz34AotJRQC6uqLJpHkXYyI8jEy+OvHUBYzNSiXR49Ugdj8aMhMNWU6
yVZsuo88dvumnupUUrL8LPZs+UsNgncw608wLzjogRJRjzXkcl7GBh3LMjGu5060
b/FbgfGfeF4ie4vjP8f7n3exPNFcA4wLqCN9Y+9c74fEu7Y0j+xl8Dw4hT8236ij
zhzZ1ukMYLyLV6nKngRa35nykg==
-----END CERTIFICATE-----
Generated at Wed Aug 20 16:25:56 2025 by rpki-client