Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File:                     21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier:          xHLcbuPHv8PmLQvtW8KSoP8tfccoCcVdGDQ17ay6CDM=
Subject key identifier:   90:B9:AB:78:59:E2:65:94:91:D8:46:C6:53:65:1A:14:6F:0F:87:93
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       165233E37CFA082979F080BDBA109B62C44E6D34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number:          01DC
Signing time:             Mon 03 Nov 2025 04:06:19 +0000
Manifest this update:     Mon 03 Nov 2025 04:01:19 +0000
Manifest next update:     Wed 05 Nov 2025 07:42:19 +0000
Files and hashes:         1: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: KOOUWFaOXwXbzjs7WT6NvLyUy5a/lpuHhKsyFUu7u5o=)
                          2: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: dDZBFJTgy6uf7u/054EgmCGUT/tK/Ve2awhm8WyhgyI=)
                          3: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: B6OA/UtG4WpNu4nO8tjqIg/m7ZPmuNJg+/AraO2FdBw=)
                          4: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: PsRtW7mHTyutO0DxQQGdWmoyYKa6pQXrN/ynckkhhkg=)
                          5: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: VQxRN4syAFNsgoSkUbyGLUgM0m2Nj3rU72rimBNN8sU=)
                          6: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: 0STruXq+XIfTiYPW08Xb6Jj7cL9IQowr5jSbbyzxCMs=)
                          7: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: vyEuVko/frnMCelb6uKYiRTw431v8ZOguv+v05iqEi8=)
                          8: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: 3I72140Z3ulLl5k4dKLwv/elKHlGRjQ2O3o1AuO1vTs=)
                          9: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: 97Ca/q3JVe60Zw9Y/8oQJDrJblO8E1C0KYjkN87TcEQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:52:33:e3:7c:fa:08:29:79:f0:80:bd:ba:10:9b:62:c4:4e:6d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Nov  3 04:01:19 2025 GMT
            Not After : Nov  5 07:42:19 2025 GMT
        Subject: CN=90B9AB7859E2659491D846C653651A146F0F8793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:c4:8c:f6:c1:85:3c:83:46:cd:c6:5f:5c:
                    04:cf:de:06:7d:5c:de:5d:71:98:4e:d9:88:c3:2b:
                    84:68:a2:ec:ef:0a:a8:52:16:73:f6:7b:95:91:78:
                    81:b2:3c:a4:a5:f2:e9:d1:e5:0c:14:7b:8c:8d:75:
                    77:99:a5:43:4c:55:af:f2:58:6a:30:1b:a8:47:e0:
                    d6:d0:84:40:e2:ca:63:f9:a3:01:0b:ab:fa:8e:53:
                    ee:2e:9c:1d:1d:29:f0:14:4d:24:d1:db:6d:1b:c6:
                    da:01:89:6b:55:b0:eb:5f:fe:63:d1:5c:37:78:f8:
                    8e:ce:ca:a4:e6:bb:d0:e0:f1:26:18:28:6c:b3:f9:
                    ad:f2:ec:9f:35:c1:9b:68:a9:6b:59:8f:09:63:58:
                    21:9c:a3:8e:12:ca:07:d3:6f:6a:a1:cf:b9:25:24:
                    87:49:57:e7:ab:b5:fa:2b:6b:94:35:c9:50:64:9e:
                    13:6a:bf:d1:ed:c1:7f:91:2e:2e:b6:38:13:59:b1:
                    aa:2b:3f:57:cf:08:b9:b4:4d:6c:24:4d:4c:03:e1:
                    1f:5d:d0:ec:5e:c5:84:e0:7e:56:3e:a3:74:5f:f3:
                    5b:a9:23:e8:b8:56:13:d5:0f:e0:79:dd:49:c3:15:
                    70:fc:da:ef:1c:7f:bc:ee:a5:da:5b:76:5c:04:d3:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B9:AB:78:59:E2:65:94:91:D8:46:C6:53:65:1A:14:6F:0F:87:93
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f0:e6:ed:2c:a8:ef:3b:15:7e:84:e2:3d:94:56:29:21:14:
         29:c2:f4:77:ac:5b:5e:b8:5a:0b:43:39:ab:04:42:de:36:c6:
         83:16:b1:b7:a8:1d:e7:b0:cc:d4:36:bc:1f:e8:f7:b7:12:c5:
         15:95:f0:81:64:9f:6e:1d:f2:13:59:60:4b:c6:b1:aa:c7:52:
         44:3b:c2:46:4c:7c:b5:3a:21:bf:e2:bf:2a:bf:35:25:08:00:
         56:91:f1:be:5d:f8:46:99:7a:01:90:c4:88:40:2e:f5:23:82:
         63:3e:39:01:cf:66:8f:71:f1:d3:73:13:9a:d9:f3:52:16:e5:
         35:e6:b0:61:02:58:2f:f7:0e:4e:9b:ba:19:7a:d0:b2:e5:9f:
         e2:46:6c:c6:34:71:cb:12:a9:72:fc:69:57:c8:25:31:4f:45:
         50:34:4c:70:fc:68:5d:bc:b2:1b:9b:48:33:a5:50:6b:fa:3d:
         9a:29:54:82:e4:10:c8:0c:07:3a:87:b2:b2:96:8f:37:c7:86:
         ae:07:bc:db:04:9a:00:66:f8:b0:9c:af:b5:b3:17:94:aa:c3:
         bd:e3:50:17:1e:c1:d1:7b:05:5a:bc:08:cf:f6:34:26:cf:d2:
         d9:7c:62:45:ce:41:59:2c:84:bc:e3:32:24:6f:ef:d8:35:da:
         9b:7f:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:40 2025 by rpki-client