Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
File:                     21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft (raw, json)
Hash identifier:          H2uhemdG+N4IT6sAkyFcdumbpfImQywxf6GklLirTvs=
Subject key identifier:   8F:F1:37:D7:10:6D:7C:DD:9B:6E:77:64:B6:0A:07:81:F3:54:D9:61
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       19C9B0FB86D9BD3B2DFF7EB8F3DEC55CFB11274D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
Manifest number:          AE
Signing time:             Fri 17 Apr 2026 11:35:45 +0000
Manifest this update:     Fri 17 Apr 2026 11:30:45 +0000
Manifest next update:     Sat 18 Apr 2026 13:45:45 +0000
Files and hashes:         1: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: UTzGGjVGwAzOOUF7F0ZvNmPm5rv5LvLa1K3tF9sa8g4=)
                          2: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (hash: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8=)
                          3: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs=)
                          4: 323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa (hash: 87cH/zfVlYwo/lhL99VL56iNS+3f0irZ7ULeW4B23KA=)
                          5: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (hash: jIt7K6cMDluL2ivR2MlC/lVEKDeY8cBnN5Cq1s8X470=)
                          6: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (hash: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs=)
                          7: 323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (hash: 47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=)
                          8: 3137372e39312e3136322e302f32332d3233203d3e20323633343434.roa (hash: qfhSga2IMpoaAnUO25wNSoxFtOa32oTy1r7EZiIHqUA=)
                          9: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (hash: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI=)
                          10: 3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (hash: lUN+QHTKJKyHBU3vjixy9YwVPc/E7x0KU1Uy3nCCZ9k=)
                          11: 3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (hash: rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=)
                          12: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg=)
                          13: 21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl (hash: uhSVBOwOLBG0Z3xwW4AKiXcy2J21Me9QS7l9YC8TeGk=)
                          14: 3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (hash: 8AGZo5c6QxM495LEDMYWHMa04vhnyj+L2PBY1psr7lo=)
                          15: 323830343a313164633a653030303a3a2f33362d3336203d3e20323633343434.roa (hash: sdWDdEzXTllJ+b9NYdd0B6N/n2HV3FuMKb/yJx7dh8k=)
                          16: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=)
                          17: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (hash: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo=)
                          18: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (hash: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=)
                          19: 3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (hash: RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=)
                          20: 3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (hash: msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c9:b0:fb:86:d9:bd:3b:2d:ff:7e:b8:f3:de:c5:5c:fb:11:27:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Apr 17 11:30:45 2026 GMT
            Not After : Apr 18 13:45:45 2026 GMT
        Subject: CN=8FF137D7106D7CDD9B6E7764B60A0781F354D961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:a8:19:f3:60:37:4e:41:31:90:92:8a:74:
                    f3:12:2c:21:5b:a5:85:da:76:d0:f6:17:35:a0:19:
                    ef:d3:b7:4b:28:a8:df:81:d7:bb:df:d6:47:85:7a:
                    37:c4:bd:eb:b4:e3:04:44:1a:23:56:fb:ae:36:7e:
                    28:dd:d3:4f:92:8c:09:9a:e6:95:6c:7a:b4:98:ce:
                    98:42:58:36:0d:5a:57:6d:a2:f3:4a:51:72:4c:b2:
                    2d:91:54:1d:94:56:9e:ca:27:f6:64:4e:29:04:32:
                    8f:13:f5:56:67:0c:a5:34:d1:06:c1:02:35:b1:5b:
                    33:4f:28:ba:d7:6e:5a:a9:7b:17:ae:47:ff:aa:1e:
                    d5:ce:8d:f7:6a:0b:6c:61:8b:1e:ed:27:7b:5a:a3:
                    97:41:9c:4b:f7:34:3e:dd:da:74:75:ce:86:72:81:
                    81:e8:5a:02:42:75:1c:24:30:45:45:b1:6d:be:35:
                    3e:bd:0e:ae:94:ae:1f:8e:ba:b2:b0:9b:63:66:5f:
                    f0:ee:ad:bf:2d:d5:d7:94:4c:17:4f:fb:06:b2:fd:
                    5f:f6:47:f6:01:b9:5a:c2:fc:e0:64:2d:7e:e3:68:
                    e1:64:29:40:12:2f:4f:7b:5c:f9:98:b6:e5:27:91:
                    8e:d5:75:9e:e0:4c:be:43:50:bc:21:aa:fa:34:14:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F1:37:D7:10:6D:7C:DD:9B:6E:77:64:B6:0A:07:81:F3:54:D9:61
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:78:8c:05:b8:b6:20:c7:5d:ff:88:de:c5:57:7c:b8:18:c2:
         c0:5c:a0:47:3e:30:36:ff:73:54:53:7b:31:02:53:85:39:29:
         b9:eb:57:d5:90:fb:af:cf:8d:c8:2c:ab:96:5c:53:c0:0e:1f:
         99:e0:78:a7:dc:25:a2:0e:0f:17:3e:93:7e:4d:3a:38:68:3b:
         51:89:78:90:d7:df:15:2b:5c:48:cf:7e:4d:49:a9:39:f8:71:
         37:39:79:c3:3e:15:95:13:64:bb:db:e6:dd:7d:7d:b7:df:84:
         2c:fa:99:41:ba:4e:1d:53:a5:03:10:f0:d6:cb:a1:bd:10:0e:
         dc:09:75:94:ce:44:86:c5:08:9e:ec:6b:e4:83:1a:44:34:08:
         5b:89:7f:a1:15:d7:74:3f:3b:98:c5:cf:74:c4:b5:b0:ba:73:
         8c:f0:be:75:c3:2e:99:53:41:b7:5f:fa:84:40:bb:b8:3d:17:
         a9:e2:ca:65:d0:3a:3e:23:9b:2d:d7:7b:97:49:15:f0:4a:7a:
         75:7f:e9:b8:56:81:f9:00:80:6f:b0:c2:a9:5c:f6:9c:65:c9:
         a6:07:56:f8:57:3d:06:65:d7:55:c9:0b:e9:71:51:b5:b8:cd:
         ec:2c:88:c7:5e:31:6c:f6:92:d7:6b:b7:ed:d7:68:e7:da:21:
         50:ef:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:23:04 2026 by rpki-client