Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
File:                     21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft (raw, json)
Hash identifier:          ngsjtN/a96T+XuroqS8BVeBYjKUQXbulpCVfqLgGuwE=
Subject key identifier:   86:21:7D:E1:E1:D2:3D:68:F5:59:BC:C3:7D:5B:25:0B:31:BE:88:34
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       7CD8BC0E4B2FE065FC3D71F3F8B40E65B47A6FA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
Manifest number:          0573
Signing time:             Sun 18 Oct 2026 04:00:00 +0000
Manifest this update:     Sun 18 Oct 2026 03:55:00 +0000
Manifest next update:     Mon 19 Oct 2026 04:00:00 +0000
Files and hashes:         1: 3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (hash: wTs8xmZ1SOAHFgoUFsOyGlpaIWNAC1iO1/p4IQb8388=)
                          2: 3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (hash: 7P+1a905lmT0JcF7XUrjJKKZxFBgMfUbEtZ05StPduA=)
                          3: 3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (hash: VAYrxCa2og8J9FJ0O7g7wqUj3PkB1fZ4uSX3J0h6AgQ=)
                          4: 323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (hash: eFsGhXoo/d0rpPbw3qwdE8MvPDtvekZflU7LISh/cjM=)
                          5: 3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (hash: RUF2U/TyU/qQ+OyIpub/5wQwJZgaihDcYeU5vaI8e70=)
                          6: 3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (hash: O747j2Mw2vMMFiFgZ1R8o7arRcyWWpDweLYMEv1CJn0=)
                          7: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl (hash: SLy2DRLXBdmXWNVIdCn7ryZXIZ9H08nftlYVvhdsHhI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d8:bc:0e:4b:2f:e0:65:fc:3d:71:f3:f8:b4:0e:65:b4:7a:6f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Oct 18 03:55:00 2026 GMT
            Not After : Oct 19 04:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:93:e1:56:1f:f5:0d:d8:42:71:85:3f:27:
                    28:6d:e3:64:af:45:f0:8c:53:0e:6e:51:45:7d:b9:
                    16:6a:5f:c6:c0:1f:43:44:b4:11:30:63:38:48:c3:
                    5d:a9:29:7f:53:5b:bf:52:31:c3:5f:5e:52:e5:89:
                    1c:10:24:95:e4:68:0f:f5:4a:3b:06:55:00:7f:8e:
                    7f:0c:8c:6d:85:17:9e:61:84:91:de:e2:23:6b:1f:
                    9c:13:d9:49:c9:c4:a3:ef:09:f3:bc:97:d1:3b:55:
                    ec:58:48:0f:a6:5d:6d:43:80:37:89:29:cb:68:b5:
                    43:05:5e:fa:5e:70:19:f7:b3:42:14:13:41:63:d4:
                    d4:2c:c7:73:3d:1a:3d:ff:1f:6d:2c:1c:62:ca:31:
                    13:e8:94:25:fb:ec:32:5f:da:12:19:94:cc:85:5d:
                    91:e1:88:9b:2c:83:52:d1:5d:56:74:45:82:07:fd:
                    b7:29:58:de:7c:13:ea:3b:d7:b4:e8:48:96:4f:ae:
                    89:28:56:f9:6c:a3:4d:da:9a:ef:2f:f5:cf:3e:cf:
                    20:cc:53:35:82:eb:f5:0d:15:7f:a6:ec:ed:fc:3f:
                    74:1c:82:b6:98:63:79:49:48:4b:36:e4:cd:a3:3e:
                    43:80:51:93:69:04:e6:49:dd:7e:e5:e6:37:37:66:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:21:7D:E1:E1:D2:3D:68:F5:59:BC:C3:7D:5B:25:0B:31:BE:88:34
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:ed:bf:1b:6b:f8:f0:5f:79:5c:3f:a0:9d:c8:fb:08:8b:
         94:0e:ca:fb:6d:24:26:32:69:71:23:ac:db:68:63:ac:69:3c:
         e1:d0:da:ad:04:d4:09:dd:b5:ff:57:a9:3e:5c:f5:60:88:32:
         8b:a0:dd:ba:8b:70:d8:89:6a:33:2c:5f:31:a5:cb:52:ae:da:
         4c:10:22:35:71:de:bb:83:56:22:c1:f5:e6:3e:48:b5:71:a0:
         03:90:02:7f:e9:0d:e4:6f:03:49:17:94:96:ba:38:15:2b:e4:
         89:78:7f:da:40:77:e2:dd:29:0e:0a:0c:23:6b:f2:19:c7:9a:
         85:53:0b:17:32:68:35:26:e9:ec:36:dc:df:d0:42:0f:6c:bc:
         90:25:17:9a:4c:fd:11:5c:1a:64:c6:56:05:ef:d5:d6:25:be:
         63:b2:e3:99:cc:e2:33:c6:33:80:61:82:22:e3:a8:96:74:da:
         a6:9f:9e:9f:a5:7d:a4:42:32:7c:3a:c3:82:41:95:58:3f:14:
         60:3c:86:22:6c:c1:65:ee:60:04:13:1c:c3:37:6e:91:56:e8:
         fb:db:52:ba:82:9d:49:2e:4f:22:8c:11:14:59:b2:7e:f9:0d:
         60:cd:15:84:a0:18:68:58:58:72:49:eb:b6:4d:83:cf:d8:a1:
         d5:21:93:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----