Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File:                     21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier:          mg6cXrfhGptmvrqKfAFwqvxtkNp3uJbGAY3uBVYFbVM=
Subject key identifier:   FC:53:91:C2:04:BB:12:C2:24:66:6D:D1:47:6B:10:72:28:8E:EF:80
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       61B8314FE6E4A65EB89B0F5D389EDFF528296E08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number:          01DD
Signing time:             Tue 04 Nov 2025 07:46:21 +0000
Manifest this update:     Tue 04 Nov 2025 07:41:21 +0000
Manifest next update:     Thu 06 Nov 2025 08:54:21 +0000
Files and hashes:         1: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: vyEuVko/frnMCelb6uKYiRTw431v8ZOguv+v05iqEi8=)
                          2: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: B6OA/UtG4WpNu4nO8tjqIg/m7ZPmuNJg+/AraO2FdBw=)
                          3: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: 3I72140Z3ulLl5k4dKLwv/elKHlGRjQ2O3o1AuO1vTs=)
                          4: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: PsRtW7mHTyutO0DxQQGdWmoyYKa6pQXrN/ynckkhhkg=)
                          5: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: 97Ca/q3JVe60Zw9Y/8oQJDrJblO8E1C0KYjkN87TcEQ=)
                          6: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: dDZBFJTgy6uf7u/054EgmCGUT/tK/Ve2awhm8WyhgyI=)
                          7: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: OgFeBhs4VIA7AfzM2CFyhiTcxBEiuRb6/1+dgB/9YIg=)
                          8: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: VQxRN4syAFNsgoSkUbyGLUgM0m2Nj3rU72rimBNN8sU=)
                          9: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: 0STruXq+XIfTiYPW08Xb6Jj7cL9IQowr5jSbbyzxCMs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 08:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:31:4f:e6:e4:a6:5e:b8:9b:0f:5d:38:9e:df:f5:28:29:6e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Nov  4 07:41:21 2025 GMT
            Not After : Nov  6 08:54:21 2025 GMT
        Subject: CN=FC5391C204BB12C224666DD1476B1072288EEF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:ed:91:a0:02:8c:39:b6:4d:68:dd:e9:e0:
                    e7:18:9f:6c:49:10:42:5a:4c:7c:63:06:be:dd:39:
                    35:c8:25:10:08:c2:1f:89:a9:d4:e4:11:84:13:bf:
                    6f:93:a7:96:b9:48:d0:0f:3f:d4:e5:c6:b3:bc:ce:
                    a7:ab:c8:45:2b:27:26:62:5e:3e:62:04:f1:08:2c:
                    88:8f:96:98:22:e3:ab:e7:82:d5:4e:d0:f2:4f:3b:
                    65:ed:36:5c:2e:fe:f3:84:0b:80:ef:7d:a6:70:17:
                    50:41:a1:1c:1a:80:37:fb:0f:94:e5:c9:40:f3:62:
                    88:5e:4d:e7:33:c1:b0:52:4c:99:8b:b6:30:64:74:
                    a1:e8:f1:99:94:5a:b6:dc:44:f1:82:1b:d3:5e:00:
                    9e:75:26:97:27:b7:14:e1:1e:9d:35:d6:8c:1a:9d:
                    a8:c4:5e:0f:03:4f:40:88:3c:f0:27:a7:5d:0e:39:
                    65:13:eb:5e:1e:2a:ed:a8:48:97:66:68:e0:43:ba:
                    9c:42:ff:40:c9:6a:e6:58:ba:80:db:fe:c3:ff:7b:
                    fc:17:05:c5:a8:8b:35:a1:68:99:01:23:10:19:19:
                    56:5a:e4:3e:ef:3d:19:da:59:3c:18:3d:44:4d:9c:
                    83:e6:d4:47:e7:4c:f3:b0:a3:18:8d:cc:70:ac:e0:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:53:91:C2:04:BB:12:C2:24:66:6D:D1:47:6B:10:72:28:8E:EF:80
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:7d:06:3b:ec:e1:97:97:46:0f:04:5f:61:b1:62:65:8c:
         68:81:e6:39:2c:ad:7e:dd:80:6a:fa:40:0d:94:59:3a:0f:c1:
         e4:58:72:e0:74:92:c5:7d:9a:49:35:01:89:b1:af:82:fa:bb:
         51:bf:7e:41:c7:0d:2b:80:bb:58:49:0b:65:78:02:62:63:3e:
         ad:06:ad:fd:42:c1:7e:52:6b:2a:bd:e8:57:6f:cf:29:98:d8:
         9f:06:4f:90:ba:26:07:79:35:a2:0f:db:f0:9e:ac:16:c7:c7:
         e1:6d:d0:d3:27:6e:7e:a1:b2:62:70:08:27:da:34:74:bd:cd:
         2b:7e:88:b7:62:36:73:42:df:b8:4c:65:85:d4:f3:15:83:40:
         fd:f4:f9:95:e8:8f:bd:64:40:af:da:e0:ab:58:a8:00:57:19:
         19:f5:51:5d:6a:ac:88:5f:22:77:21:bd:82:0b:5f:ff:52:e5:
         de:50:36:27:a9:e1:00:93:22:ba:86:b1:dd:a1:ef:f5:9b:53:
         f1:bb:5c:35:8c:27:8d:ee:d9:f3:b5:ef:f3:c9:72:02:9c:67:
         7a:b2:b5:9c:c6:97:71:99:bc:40:e3:bc:f5:16:ad:fb:da:00:
         6a:a0:6c:f0:c2:6e:64:53:cd:3c:a6:72:a3:6e:b0:3d:6e:2f:
         84:88:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:52:04 2025 by rpki-client