Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          FS6ho6/6DtdBq9VX4NnLNrDHHkSXhS2zhGSRmEMAWD4=
Subject key identifier:   1B:AE:50:01:40:D8:5D:FD:9B:3D:46:09:2B:1E:9A:60:77:9E:29:16
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       2043D1B3639FC10E1CBA8A2F7E783A52229E053C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          024B
Signing time:             Mon 31 Aug 2026 17:39:42 +0000
Manifest this update:     Mon 31 Aug 2026 17:34:42 +0000
Manifest next update:     Tue 01 Sep 2026 21:30:42 +0000
Files and hashes:         1: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: leB0bzcCzoWmw2mo7PZK641/dYiOYL62wj4+BZiMMYg=)
                          2: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: PmUTvDWQTnlaZ+IEiyUqgfW4s66MuJPjumuXUW4qQf0=)
                          3: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: fPNhiu5zQ+35XtLZHpTObQXQNqIK4POYrJm7wIxcHhc=)
                          4: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: hrUv4pVrM/tW1vOl4vCpSeK58OalTkLfMZoZBCjg8Bs=)
                          5: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: bFWc8b2Do1q6Lm7l/Ep1W1LBWsbjht1PNl9rg/45FJ0=)
                          6: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: ydCVTzIndYCXJUu6fhoItzxL9l63EWUAQYxavt4ZQEo=)
                          7: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: Y62l0lAQ0/iKxl+actEeQzBwzPlsxYRLaLoJtcyCNC4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Sep 2026 21:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:d1:b3:63:9f:c1:0e:1c:ba:8a:2f:7e:78:3a:52:22:9e:05:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Aug 31 17:34:42 2026 GMT
            Not After : Sep  1 21:30:42 2026 GMT
        Subject: CN=1BAE500140D85DFD9B3D46092B1E9A60779E2916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:86:50:bb:2a:60:15:1b:15:a6:56:8c:90:
                    16:09:1f:2c:9a:f5:f2:c0:fc:9d:f0:89:06:9b:24:
                    2b:53:17:7d:21:6a:88:aa:83:52:d3:2c:f2:ef:75:
                    ad:c7:e0:0e:8c:de:18:e1:42:50:8c:62:1b:60:10:
                    ea:7c:e6:0b:d9:6a:de:76:12:0e:9d:fa:f4:7e:0f:
                    e0:c8:d9:2a:bc:9f:af:de:fd:d7:71:52:11:fd:c3:
                    7c:7a:ba:92:80:6e:2c:c9:1b:d8:72:33:2d:9a:3b:
                    b7:e9:90:72:b2:4d:30:41:ae:45:5a:51:14:0f:ad:
                    fd:96:92:7a:8e:52:76:60:25:b1:ee:73:15:08:97:
                    de:e3:f5:79:89:46:9f:4e:cb:2b:1e:54:e3:12:29:
                    e2:52:ec:02:e7:f8:3c:3c:21:d7:98:5b:83:33:b0:
                    38:e6:aa:4b:b0:fd:43:56:ab:3b:7c:70:a7:12:1a:
                    c5:13:70:66:c7:4a:7c:b8:94:fc:84:0a:83:7e:f9:
                    77:1e:b9:0b:34:b9:1e:45:c2:3d:75:1c:fc:52:71:
                    ec:27:ec:0b:a7:db:71:dd:e8:89:7d:95:a9:57:0f:
                    91:3a:5a:1c:37:96:a2:81:c3:2c:1d:74:b3:85:9c:
                    94:35:f8:9a:63:c3:fc:6e:c1:66:7a:2c:88:bd:35:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:50:01:40:D8:5D:FD:9B:3D:46:09:2B:1E:9A:60:77:9E:29:16
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:56:64:dd:46:58:e0:66:f6:72:9b:47:81:22:56:a0:a8:fe:
         08:eb:bd:bb:4a:82:b5:a6:85:24:21:b0:fc:11:d4:58:97:be:
         83:ce:d2:5f:43:e4:b8:6c:96:4b:71:ec:7d:21:64:70:61:dc:
         54:97:78:2c:27:15:46:43:00:f8:59:0b:d9:b1:62:bf:48:f1:
         9f:20:19:f5:41:53:5a:16:c6:5a:8d:b5:29:3c:30:bb:bb:e4:
         83:88:c3:b2:46:fc:3e:b6:a3:a8:3a:70:b6:47:11:1b:f8:d0:
         cc:85:fd:29:a0:81:8e:ec:5b:d5:2a:94:ba:b5:86:86:e1:4a:
         62:3f:75:84:67:50:69:86:1b:db:d2:c2:ba:98:d7:84:81:14:
         28:c1:e5:06:ea:74:35:fe:4f:ec:33:3a:f9:9a:a7:2b:30:4d:
         77:71:41:46:24:de:9f:c4:35:41:b6:5d:67:f6:e6:94:73:83:
         5a:2f:91:e3:14:f4:db:f6:f4:90:b4:bd:df:dc:b5:b3:b7:be:
         88:c9:9c:af:a6:c4:5f:13:80:aa:b3:c3:2a:70:59:54:c0:7a:
         36:25:b2:fd:4e:be:01:c0:6c:62:f7:2b:ce:71:a2:28:24:32:
         3c:ad:47:56:ff:14:c1:27:f4:72:cb:33:74:96:09:99:69:0b:
         50:ee:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:23:12 2026 by rpki-client