Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          MHOgxEoefCezB2EsF9VylP3+EZGVCCjR8wY0HW84n1E=
Subject key identifier:   D3:66:DA:51:56:4F:B9:DA:FD:EB:AE:46:04:89:9F:5E:5A:8C:1F:8E
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       1FC74C1FA758D94970BB5283D24D4449AED9E6F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          020F
Signing time:             Fri 17 Jul 2026 15:07:27 +0000
Manifest this update:     Fri 17 Jul 2026 15:02:27 +0000
Manifest next update:     Sat 18 Jul 2026 16:10:27 +0000
Files and hashes:         1: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: leB0bzcCzoWmw2mo7PZK641/dYiOYL62wj4+BZiMMYg=)
                          2: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: Y62l0lAQ0/iKxl+actEeQzBwzPlsxYRLaLoJtcyCNC4=)
                          3: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: E1VIUao1O1FV6kKVAw8Ua38tVR51C8ZC+S+mWNqqLWM=)
                          4: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: fPNhiu5zQ+35XtLZHpTObQXQNqIK4POYrJm7wIxcHhc=)
                          5: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: hrUv4pVrM/tW1vOl4vCpSeK58OalTkLfMZoZBCjg8Bs=)
                          6: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: PmUTvDWQTnlaZ+IEiyUqgfW4s66MuJPjumuXUW4qQf0=)
                          7: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: ydCVTzIndYCXJUu6fhoItzxL9l63EWUAQYxavt4ZQEo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Jul 2026 16:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c7:4c:1f:a7:58:d9:49:70:bb:52:83:d2:4d:44:49:ae:d9:e6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Jul 17 15:02:27 2026 GMT
            Not After : Jul 18 16:10:27 2026 GMT
        Subject: CN=D366DA51564FB9DAFDEBAE4604899F5E5A8C1F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:ae:8d:bb:e4:61:1a:f9:09:d4:66:ec:18:
                    99:33:16:8c:64:34:00:a4:a6:fa:1f:d2:1f:c0:a8:
                    95:54:d8:32:eb:6b:3d:0c:9f:14:77:cb:f9:fb:63:
                    65:a9:45:b1:ed:72:aa:22:a0:4f:81:3e:bc:c4:a9:
                    de:12:a7:3e:15:fe:4d:0d:8b:24:3a:6c:25:3c:cb:
                    d1:e3:50:e8:32:0f:4c:fe:55:0c:c1:93:a5:d9:b1:
                    62:bc:98:de:da:01:50:f7:86:61:98:88:e9:24:6c:
                    44:26:4b:72:d3:a3:74:cf:5e:f6:51:5d:87:94:6b:
                    a9:35:11:d8:9f:cf:98:c3:04:4e:5d:63:be:22:92:
                    cc:63:76:96:71:e3:6c:b0:2a:d3:f9:24:f4:0c:5b:
                    17:da:c5:a4:88:a8:e0:8a:32:4c:a5:ff:84:76:d4:
                    ec:16:59:c0:5c:e4:52:9a:b4:59:bd:dc:5e:73:f8:
                    5f:00:2d:18:9d:ff:ae:83:16:1c:27:42:1a:0f:19:
                    2f:ff:b1:f4:df:4a:4d:dd:02:c1:3e:2b:9c:d8:49:
                    7d:8b:45:84:14:40:56:e7:b2:2c:1e:75:7e:07:4a:
                    a6:c9:45:06:f3:aa:a7:53:dc:c5:ed:64:f0:eb:03:
                    14:a0:cd:c8:0c:41:0a:5c:dc:55:db:44:ea:4a:94:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:66:DA:51:56:4F:B9:DA:FD:EB:AE:46:04:89:9F:5E:5A:8C:1F:8E
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:ea:18:39:c0:50:c7:17:c3:ba:66:da:89:a1:ae:c7:af:
         32:5b:49:a7:ab:12:7a:d6:8a:19:30:15:da:4e:a2:90:22:eb:
         56:f4:1f:88:f9:f3:ee:6c:5d:49:1d:29:47:60:9d:e1:97:fc:
         f2:f6:b3:70:96:d5:fa:ca:b8:3f:57:bb:ed:80:85:1c:3a:e6:
         aa:2b:c6:d5:78:97:59:50:96:27:85:60:a6:db:a7:11:79:ab:
         58:9b:e3:c9:e2:c5:68:58:8a:ac:62:c3:4b:a7:29:a8:74:1b:
         72:11:00:32:15:4e:6d:d5:02:97:d4:d6:58:f0:be:e9:a0:2d:
         cc:50:dd:84:e6:d9:be:88:f1:fd:2a:c1:62:f0:80:d6:77:78:
         0f:e0:33:17:92:2d:a2:27:72:d3:26:79:98:90:a8:20:8c:20:
         3c:60:1e:33:ef:bc:a2:87:fa:46:61:1f:34:40:ec:43:ac:69:
         10:b9:a0:ef:b2:76:7c:df:82:cf:ff:10:1c:64:95:b4:e6:28:
         5a:ae:ad:80:a1:47:9b:40:b9:be:80:51:ab:21:5e:2b:67:f6:
         73:31:e4:58:d3:81:e1:f4:4f:27:6e:76:21:88:8a:49:45:18:
         7f:46:59:d4:67:33:94:f4:b4:bb:83:84:03:c8:50:95:de:bf:
         f6:1d:bb:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH8dMH6dY2Ulwu1KD0k1ESa7Z5vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEzRDYxRUE1ODQ3NjM3MDVBNzI0M0Y4N0QyNjMyN0VD
NUNBNjNCMDAeFw0yNjA3MTcxNTAyMjdaFw0yNjA3MTgxNjEwMjdaMDMxMTAvBgNV
BAMTKEQzNjZEQTUxNTY0RkI5REFGREVCQUU0NjA0ODk5RjVFNUE4QzFGOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Fa6Nu+RhGvkJ1GbsGJkzFoxk
NACkpvof0h/AqJVU2DLraz0MnxR3y/n7Y2WpRbHtcqoioE+BPrzEqd4Spz4V/k0N
iyQ6bCU8y9HjUOgyD0z+VQzBk6XZsWK8mN7aAVD3hmGYiOkkbEQmS3LTo3TPXvZR
XYeUa6k1Edifz5jDBE5dY74iksxjdpZx42ywKtP5JPQMWxfaxaSIqOCKMkyl/4R2
1OwWWcBc5FKatFm93F5z+F8ALRid/66DFhwnQhoPGS//sfTfSk3dAsE+K5zYSX2L
RYQUQFbnsiwedX4HSqbJRQbzqqdT3MXtZPDrAxSgzcgMQQpc3FXbROpKlIihAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU02baUVZPudr9665GBImfXlqMH44wHwYDVR0j
BBgwFoAUIT1h6lhHY3BackP4fSYyfsXKY7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1
VlgvMC8yMTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxM0Q2MUVBNTg0NzYzNzA1
QTcyNDNGODdEMjYzMjdFQzVDQTYzQjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2FIY3BkTWFOTDdZcWU2Y1ZiTFc2a0JtNThFMmtKZmdQUG95eDlSRHU1VlgvMC8y
MTNENjFFQTU4NDc2MzcwNUE3MjQzRjg3RDI2MzI3RUM1Q0E2M0IwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbkXqGDnAUMcXw7pm2omhrsevMltJp6sSetaKGTAV2k6ikCLrVvQfiPnz7mxd
SR0pR2Cd4Zf88vazcJbV+sq4P1e77YCFHDrmqivG1XiXWVCWJ4VgptunEXmrWJvj
yeLFaFiKrGLDS6cpqHQbchEAMhVObdUCl9TWWPC+6aAtzFDdhObZvojx/SrBYvCA
1nd4D+AzF5Itoidy0yZ5mJCoIIwgPGAeM++8oof6RmEfNEDsQ6xpELmg77J2fN+C
z/8QHGSVtOYoWq6tgKFHm0C5voBRqyFeK2f2czHkWNOB4fRPJ252IYiKSUUYf0ZZ
1GczlPS0u4OEA8hQld6/9h27zA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:04:12 2026 by rpki-client