Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
File:                     21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json)
Hash identifier:          RCQIgCrK3Me0fK+d59CY7G6fqhzMcnkEM1YcMv8h8X8=
Subject key identifier:   95:DA:05:79:45:4A:AA:35:66:BE:5E:AB:33:9B:AD:1A:04:26:8B:C8
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Certificate issuer:       /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial:       502263C2795CD88EB8ECA0613F0DF9960330AED2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
Manifest number:          010D
Signing time:             Fri 24 Jul 2026 09:32:33 +0000
Manifest this update:     Fri 24 Jul 2026 09:27:33 +0000
Manifest next update:     Sat 25 Jul 2026 10:48:33 +0000
Files and hashes:         1: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: Vix6v/IW8pAmdeVYgVb7q/FTkeIwmm/4Jn78C6Bj5nk=)
                          2: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: VdPcIvJj9k0duCfhPJ5n4zY1KiwKA7CNugRTu0wmzOc=)
                          3: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: Vf7L0nEoqVM3zkzAfnwGKll3BsqlwtQox5GJQ4i6pB8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
                          rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:22:63:c2:79:5c:d8:8e:b8:ec:a0:61:3f:0d:f9:96:03:30:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
        Validity
            Not Before: Jul 24 09:27:33 2026 GMT
            Not After : Jul 25 10:48:33 2026 GMT
        Subject: CN=95DA0579454AAA3566BE5EAB339BAD1A04268BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:f5:7d:4d:65:c5:ee:19:03:1a:8c:17:18:
                    a1:24:9a:7a:22:0c:bf:43:67:c2:76:d3:61:82:0a:
                    32:09:89:65:7c:45:6b:4c:af:35:5c:99:cd:68:86:
                    88:93:5e:64:42:cd:54:55:5c:a7:87:da:4e:26:0b:
                    c1:f6:38:02:d8:b9:be:73:c0:08:94:b6:72:f5:85:
                    85:66:64:9c:27:4a:11:eb:60:55:94:25:a9:64:a0:
                    9f:e1:3c:b5:45:76:5a:ec:35:a5:9a:5c:3a:d3:38:
                    42:e5:91:b7:d5:c3:e8:8b:e4:f8:77:d5:aa:85:72:
                    f4:6e:c8:c4:5e:ae:a6:61:08:e4:54:71:74:39:5a:
                    77:f2:04:47:1e:79:61:f6:85:8d:9c:9c:70:f7:d8:
                    f9:8e:70:8f:9d:45:c0:e6:85:94:85:cd:14:a1:3d:
                    0c:84:7f:e5:ee:be:d2:0b:7d:93:05:26:cb:34:37:
                    e6:68:cb:04:72:ab:c2:fe:3e:26:f7:78:bc:13:c4:
                    5b:5a:f8:35:8d:12:e8:8f:b5:9b:b9:14:a7:5d:b3:
                    65:68:05:a5:14:51:a3:79:48:bb:b9:dd:76:2e:25:
                    a7:76:d5:9d:f1:d9:1f:33:a8:3c:2e:35:00:d5:b5:
                    5c:2d:2b:04:f5:8c:b5:08:74:66:1a:e5:50:20:d0:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:05:79:45:4A:AA:35:66:BE:5E:AB:33:9B:AD:1A:04:26:8B:C8
            X509v3 Authority Key Identifier:
                keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:e9:ee:66:d7:8a:db:63:e5:88:b0:ea:4a:9e:f5:d6:3d:
         62:cb:f1:22:48:49:53:d6:a4:22:1b:fc:2f:60:c6:01:a3:a3:
         f9:db:5f:a7:5a:93:0a:77:1a:16:4e:d5:ca:46:da:b0:6b:84:
         ad:ef:9d:f7:e1:4e:75:0d:bb:12:ad:32:00:6d:24:30:a7:d6:
         36:64:26:27:0e:77:fc:b2:67:52:36:85:d3:1b:e6:ab:a4:26:
         75:d0:1c:fe:2d:27:6e:7b:ce:99:60:82:a5:91:07:90:54:cd:
         87:e2:6a:e9:76:2a:f0:fb:32:4e:db:bc:a1:48:e1:bd:1d:96:
         70:4c:f8:81:15:85:d4:5e:04:ea:94:d8:b6:2f:7a:24:b1:48:
         bd:03:ff:13:c8:a8:d0:aa:0c:a4:21:68:4b:15:83:8c:ad:d6:
         f8:10:8b:62:7d:a2:81:f2:e6:8f:30:5c:c7:ef:23:68:62:51:
         8a:9e:0f:8f:58:62:9a:97:e0:a7:1f:1c:62:a3:57:5d:ac:34:
         da:49:f5:5f:eb:97:3d:fd:7a:d3:24:de:f8:c4:94:0c:d2:a8:
         e5:8a:5b:15:1c:f3:59:4f:57:85:12:3c:03:a9:94:86:d3:bb:
         dc:e5:07:d5:96:32:88:8c:08:47:00:99:df:46:20:1d:87:79:
         c9:2b:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:33:20 2026 by rpki-client