Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          jbjfVWxPOIqAnmPU9Ee6lyUSb8E8hzjK2Puf6HRKofQ=
Subject key identifier:   67:11:CD:78:A2:46:F5:F9:8B:9E:02:D9:0F:77:83:48:21:24:33:66
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       2BEAAAD3AB309D402822E5F4B749E7344903BB48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          0230
Signing time:             Fri 17 Apr 2026 11:29:04 +0000
Manifest this update:     Fri 17 Apr 2026 11:24:04 +0000
Manifest next update:     Sat 18 Apr 2026 12:42:04 +0000
Files and hashes:         1: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: n14oosemqhBjKJdVtflWC+HpPxELkPaFWKg6Eso9Skc=)
                          2: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: /LjuaGxyTcQA0QEAtIBMK4I71Z8mm+OXQ0UKtoJX6FE=)
                          3: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: iRuqVBfrE0kASFZUOEN5l5bTyV621nXJg3Yvq4G98kg=)
                          4: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: Ew0VNMo4xdPi3gN9F6m+wkvVTfV4Mcup88zNsvWaPXo=)
                          5: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: YxWQ+5m9LYpiBqrAW51jJwmjcKC5eTyYfK/Ip29zres=)
                          6: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: VUzMKYRRCJD11xUjAVlO7XCrM+ImpNsYRS5G0IjqGSc=)
                          7: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: 1+/pplX7T7J05KkRZmEDqLrGq6B6Swew+LIbfkXTx24=)
                          8: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: T4RGgh2bTxHiP4a0RFVpiCwLvMkzMCDUwhsMn4KWnIo=)
                          9: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: gbza8z3/TVSV8pS7vM16AvzO4T1HVP0I/SXwsmJE54o=)
                          10: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: V+e0sCZoefnOIdV8N6fLVdMQwDiNL9pfupfK5prc9qg=)
                          11: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: boAtywzXo3l+O3coO5VXODkAwWQ2OHFkhLmylrZ/V9w=)
                          12: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: xA4SawgrstA/uHIpfe5e5ErrfmUhnSBpoMa55Lufnlk=)
                          13: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 5qvvtSGaFf5wISwQWZ8BZ85obWb8+jvaKgujZOnIWfA=)
                          14: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: 231/APGQaNrCn6ahQeA9j31eMwDv6G9nrLcAWtu15O0=)
                          15: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: GOy//cGQcPGC86jIJCRkp9ayCU8DrZU/x1SkWMI6TGU=)
                          16: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: i0sEhWYHgSiXp5V1EkcxdgpEzXORyMRTfk54jKWdVl8=)
                          17: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: lgc35899CD1qdITKmLQLxPFgoyjYP0D9XSh+IOdRMhc=)
                          18: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: 4WFQg0hyPoA+YjE9DlLs+fxsCz/1Hm6ZKXSkk0hKzhQ=)
                          19: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: knoPnv5k7N4ARK61J+LlvRSNs41ePFvQyFL1x4gWw/4=)
                          20: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: 0ksqEnvXv/6hMwy0m4SHmbFexWGbnXgVvcDzt9QDYSM=)
                          21: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: WaBN8vhpaukaQaVmisq6f2jBRD6Zvq4V2qKtYIXL5Q4=)
                          22: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: XMRDRzhpQhhp0OTma7xkqipCwIDvk7r3TOXiN7hkR4o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ea:aa:d3:ab:30:9d:40:28:22:e5:f4:b7:49:e7:34:49:03:bb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Apr 17 11:24:04 2026 GMT
            Not After : Apr 18 12:42:04 2026 GMT
        Subject: CN=6711CD78A246F5F98B9E02D90F77834821243366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:fb:7f:ff:4f:6e:4c:76:62:20:14:0a:e7:
                    04:d4:47:bc:42:6f:05:a0:c0:56:40:de:3d:d4:78:
                    2d:93:38:28:5e:67:88:bc:dc:0b:8e:6b:db:4c:62:
                    5c:58:22:00:bd:0b:29:e3:5e:ea:2a:c9:3f:c4:b1:
                    d5:ec:dc:79:a5:c7:09:96:fd:e8:fe:73:2a:9c:b0:
                    9d:e5:67:91:08:b3:70:a3:a4:5b:bb:8a:51:5f:af:
                    90:89:f4:1f:6e:f1:dd:b8:74:d8:05:f7:f5:e6:f2:
                    96:14:e9:b6:57:b5:f7:93:eb:da:a2:2d:b4:da:eb:
                    49:d4:0d:cd:aa:f4:cf:8c:99:2b:c3:af:76:1c:d8:
                    c1:cb:cb:48:3d:6e:61:c1:3e:36:38:6a:85:15:cf:
                    eb:71:b8:e3:5b:bd:a2:1f:5d:8f:14:9e:46:b6:44:
                    30:c0:58:73:1e:55:db:b6:1b:a0:01:9b:3a:7c:41:
                    56:23:af:e6:0a:14:ed:cc:7d:e1:f9:f4:b1:31:2d:
                    64:91:c1:98:50:41:e3:7a:7f:60:8f:9f:4d:0f:6b:
                    73:48:65:64:5f:a1:04:c7:b0:ac:34:ca:ad:e3:1b:
                    7c:1b:9f:23:33:af:75:7a:ca:8d:47:36:5e:bc:d6:
                    fe:e2:f6:5c:18:66:2b:b2:f6:3f:59:54:c2:52:1d:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:11:CD:78:A2:46:F5:F9:8B:9E:02:D9:0F:77:83:48:21:24:33:66
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:06:23:2c:36:c0:f6:51:0f:9e:bd:73:6e:f9:fa:62:57:
         42:67:6d:d7:03:71:fa:ef:5f:b6:7f:8d:00:93:e1:ee:f4:6c:
         d4:2d:d9:31:df:d8:f0:63:09:47:2a:0e:87:91:b9:b6:d0:38:
         4d:62:51:ae:48:41:04:c3:03:f5:5b:2e:3f:48:84:c9:ea:d6:
         9f:d3:d5:95:3e:a3:78:cd:cf:83:0b:98:18:85:5e:e9:48:3f:
         37:5b:d7:c4:8f:20:45:54:e6:06:b2:84:82:13:26:57:a1:20:
         7d:b6:7f:5d:52:05:63:bf:46:bf:60:e8:dd:11:37:df:2b:cc:
         e4:38:04:90:ea:23:1f:43:e5:5b:f6:e9:b9:ab:c2:af:24:87:
         4d:63:bd:0f:28:98:b7:62:7e:6f:33:d2:0e:58:dd:a2:ba:c8:
         13:16:94:21:9b:53:7f:75:b6:22:fa:12:93:e9:99:08:fa:bf:
         24:0e:9e:9d:46:dd:17:b9:c7:0e:6f:0b:a4:d4:3b:e8:25:a5:
         9b:f6:76:95:0b:f0:d8:2f:11:58:08:40:c1:bc:34:a8:05:f4:
         ab:59:18:b6:3e:ad:e3:b3:b4:98:04:83:69:d9:0c:ec:62:09:
         24:2b:fe:9b:6d:5d:82:21:92:26:19:eb:b5:36:75:47:02:e2:
         df:f3:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:43:25 2026 by rpki-client