Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
File:                     213D61EA584763705A7243F87D26327EC5CA63B0.mft (raw, json)
Hash identifier:          90t7sbU6CvBekfCE44BtVJfFlO0PaT9WkYEDR/Z16kc=
Subject key identifier:   00:A6:A6:4E:6A:D3:B6:A4:42:01:B0:A9:1D:73:53:26:00:10:A0:4E
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       2FA8C12EC97C49B79A37E20B2AD270FF0E406F31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
Manifest number:          0197
Signing time:             Fri 17 Apr 2026 18:17:25 +0000
Manifest this update:     Fri 17 Apr 2026 18:12:25 +0000
Manifest next update:     Sat 18 Apr 2026 19:38:25 +0000
Files and hashes:         1: 3133312e3232312e38302e302f32342d3234203d3e203233373634.roa (hash: ydCVTzIndYCXJUu6fhoItzxL9l63EWUAQYxavt4ZQEo=)
                          2: 3133312e3232312e38322e302f32342d3234203d3e203233373634.roa (hash: fPNhiu5zQ+35XtLZHpTObQXQNqIK4POYrJm7wIxcHhc=)
                          3: 3133312e3232312e38312e302f32342d3234203d3e203233373634.roa (hash: leB0bzcCzoWmw2mo7PZK641/dYiOYL62wj4+BZiMMYg=)
                          4: 213D61EA584763705A7243F87D26327EC5CA63B0.crl (hash: wrLivli5LYhqQSyyDrCAX1xc/qplfAOPqaOrXH9GC4s=)
                          5: 323830343a316534383a3a2f33322d3438203d3e203233373634.roa (hash: PmUTvDWQTnlaZ+IEiyUqgfW4s66MuJPjumuXUW4qQf0=)
                          6: 3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (hash: Y62l0lAQ0/iKxl+actEeQzBwzPlsxYRLaLoJtcyCNC4=)
                          7: 3133312e3232312e38302e302f32322d3232203d3e203233373634.roa (hash: hrUv4pVrM/tW1vOl4vCpSeK58OalTkLfMZoZBCjg8Bs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:c1:2e:c9:7c:49:b7:9a:37:e2:0b:2a:d2:70:ff:0e:40:6f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Apr 17 18:12:25 2026 GMT
            Not After : Apr 18 19:38:25 2026 GMT
        Subject: CN=00A6A64E6AD3B6A44201B0A91D7353260010A04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:8f:83:39:af:52:0a:a6:63:ba:4e:98:30:
                    eb:ef:34:a8:66:0a:5c:3c:77:fa:a4:b0:f2:8d:eb:
                    48:bb:c6:86:ef:5a:de:70:6e:76:80:72:e9:c5:1e:
                    cc:62:ae:bf:64:ff:f7:38:ef:3d:9f:ef:82:81:5a:
                    b8:db:f1:eb:80:d8:83:20:6f:7f:2e:35:c0:27:20:
                    21:ff:4b:18:85:8c:4f:25:e2:0f:c1:6c:48:e8:39:
                    a0:70:e8:58:30:4e:3f:5d:4a:ad:c3:5a:ac:62:7b:
                    ac:18:79:e5:62:ca:7f:cb:09:ab:1b:22:7a:35:7d:
                    7b:da:e5:61:ef:fb:d4:80:c4:1e:e3:55:f4:32:ee:
                    11:03:d0:1a:33:4e:d8:5f:e4:ec:fd:e9:b2:2f:b4:
                    e6:32:b8:e5:c1:fe:66:df:5e:48:65:18:fc:03:ee:
                    e3:3b:15:09:79:07:0c:d1:61:ec:a0:a5:31:73:9b:
                    00:ef:0c:40:6a:de:81:53:74:58:7f:bd:24:88:4f:
                    63:53:db:08:e7:a6:b4:3d:a3:d7:a9:d4:65:38:29:
                    2f:6a:8a:2b:e9:32:43:e4:fb:85:be:89:01:93:62:
                    0f:24:f3:15:dd:cc:f6:dd:c5:09:31:e6:26:24:d9:
                    a9:90:02:73:5f:6a:00:a6:ff:c9:c2:28:98:d3:66:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:A6:4E:6A:D3:B6:A4:42:01:B0:A9:1D:73:53:26:00:10:A0:4E
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:59:c8:87:37:a9:44:f5:4a:f5:30:66:3d:25:76:2c:9b:5c:
         f8:3d:0a:20:e0:b7:77:af:dc:dc:9c:7a:a9:fb:19:17:54:2e:
         4b:63:8f:37:9f:98:2f:ad:e4:47:38:66:5a:da:48:ff:92:37:
         80:ba:02:e5:ee:f6:f0:e4:76:ad:77:c3:4e:72:2f:e0:91:eb:
         2c:19:c0:8d:8e:e4:bf:60:69:07:7d:f9:60:70:b3:79:df:a0:
         e6:b8:97:e8:71:cf:c2:dd:56:26:65:92:fb:bf:ba:61:a4:24:
         eb:47:3d:d0:2b:66:4f:07:8b:7a:d3:8d:0d:ca:12:a5:73:2e:
         79:4c:d0:93:5c:22:06:82:86:be:c0:7f:13:82:ba:06:54:c0:
         cd:f3:4b:71:cc:db:77:67:21:1f:4c:29:9b:2f:d9:de:75:cf:
         42:8a:27:21:6b:ba:f1:cf:d5:af:7f:0c:7f:25:81:29:b6:10:
         3c:71:d1:84:f0:3d:d4:9b:52:51:9c:b5:07:7f:8b:a4:e3:43:
         72:cc:80:38:8d:3c:be:68:2e:2e:af:14:25:13:c1:2f:bb:e4:
         2b:f5:63:d3:70:25:18:42:13:dc:be:fa:8a:05:4a:d2:0f:cc:
         9a:3d:4d:d8:34:8e:90:f3:f5:74:db:f2:31:2a:15:74:2b:29:
         90:52:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:26:20 2026 by rpki-client