Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
File:                     21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft (raw, json)
Hash identifier:          62IMsPW//TMiqvjMXZspojLdOB5k1xnnJtewSEb2/fc=
Subject key identifier:   FB:B4:02:EB:DA:D0:51:2E:59:A2:21:CB:EF:27:62:16:B5:C3:93:A4
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       515A8ECA284C745F97FE4931DB830AAB911509C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
Manifest number:          0213
Signing time:             Thu 26 Mar 2026 16:00:31 +0000
Manifest this update:     Thu 26 Mar 2026 15:55:31 +0000
Manifest next update:     Fri 27 Mar 2026 18:45:31 +0000
Files and hashes:         1: 3133382e3230342e34382e302f32322d3232203d3e20323633383931.roa (hash: /LjuaGxyTcQA0QEAtIBMK4I71Z8mm+OXQ0UKtoJX6FE=)
                          2: 3137302e37382e3136312e302f32342d3234203d3e20323633383931.roa (hash: 1+/pplX7T7J05KkRZmEDqLrGq6B6Swew+LIbfkXTx24=)
                          3: 3133382e3230342e35312e302f32342d3234203d3e20323633383931.roa (hash: 5qvvtSGaFf5wISwQWZ8BZ85obWb8+jvaKgujZOnIWfA=)
                          4: 3133382e3230342e35302e302f32332d3233203d3e20323633383931.roa (hash: boAtywzXo3l+O3coO5VXODkAwWQ2OHFkhLmylrZ/V9w=)
                          5: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (hash: gbza8z3/TVSV8pS7vM16AvzO4T1HVP0I/SXwsmJE54o=)
                          6: 3137302e37382e3136302e302f32332d3233203d3e20323633383931.roa (hash: Ew0VNMo4xdPi3gN9F6m+wkvVTfV4Mcup88zNsvWaPXo=)
                          7: 323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (hash: 4WFQg0hyPoA+YjE9DlLs+fxsCz/1Hm6ZKXSkk0hKzhQ=)
                          8: 3133382e3230342e35302e302f32342d3234203d3e20323633383931.roa (hash: n14oosemqhBjKJdVtflWC+HpPxELkPaFWKg6Eso9Skc=)
                          9: 3133382e3230342e34382e302f32342d3234203d3e20323633383931.roa (hash: iRuqVBfrE0kASFZUOEN5l5bTyV621nXJg3Yvq4G98kg=)
                          10: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (hash: XMRDRzhpQhhp0OTma7xkqipCwIDvk7r3TOXiN7hkR4o=)
                          11: 3137302e37382e3136302e302f32342d3234203d3e20323633383931.roa (hash: knoPnv5k7N4ARK61J+LlvRSNs41ePFvQyFL1x4gWw/4=)
                          12: 21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl (hash: J4X9KMNYtL/IWlsE2zyVspM57/hqAy9OOSdEdYpbfiw=)
                          13: 3133382e3230342e34382e302f32332d3233203d3e20323633383931.roa (hash: V+e0sCZoefnOIdV8N6fLVdMQwDiNL9pfupfK5prc9qg=)
                          14: 3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (hash: VUzMKYRRCJD11xUjAVlO7XCrM+ImpNsYRS5G0IjqGSc=)
                          15: 323830343a323734383a383030303a3a2f33342d3334203d3e20323633383931.roa (hash: 0ksqEnvXv/6hMwy0m4SHmbFexWGbnXgVvcDzt9QDYSM=)
                          16: 3133382e3230342e34392e302f32342d3234203d3e20323633383931.roa (hash: i0sEhWYHgSiXp5V1EkcxdgpEzXORyMRTfk54jKWdVl8=)
                          17: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (hash: GOy//cGQcPGC86jIJCRkp9ayCU8DrZU/x1SkWMI6TGU=)
                          18: 323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (hash: lgc35899CD1qdITKmLQLxPFgoyjYP0D9XSh+IOdRMhc=)
                          19: 3137302e37382e3136302e302f32322d3232203d3e20323633383931.roa (hash: xA4SawgrstA/uHIpfe5e5ErrfmUhnSBpoMa55Lufnlk=)
                          20: 3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (hash: T4RGgh2bTxHiP4a0RFVpiCwLvMkzMCDUwhsMn4KWnIo=)
                          21: 3137302e37382e3136322e302f32332d3233203d3e20323633383931.roa (hash: WaBN8vhpaukaQaVmisq6f2jBRD6Zvq4V2qKtYIXL5Q4=)
                          22: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (hash: YxWQ+5m9LYpiBqrAW51jJwmjcKC5eTyYfK/Ip29zres=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5a:8e:ca:28:4c:74:5f:97:fe:49:31:db:83:0a:ab:91:15:09:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Mar 26 15:55:31 2026 GMT
            Not After : Mar 27 18:45:31 2026 GMT
        Subject: CN=FBB402EBDAD0512E59A221CBEF276216B5C393A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:ac:bf:31:26:24:81:67:d0:f0:44:5a:d7:
                    a9:a7:9c:e8:45:e0:3f:ca:76:ea:34:3f:5a:40:6e:
                    27:39:2b:87:f0:ec:94:15:54:cc:af:6f:f4:15:05:
                    35:31:b6:e1:55:d2:11:e6:39:94:9d:1d:eb:7a:79:
                    03:d3:b3:6d:11:02:4b:ac:48:1d:37:35:79:8f:de:
                    75:3f:4b:78:05:60:70:18:83:f1:c1:44:33:33:07:
                    12:05:75:ab:60:e7:5b:eb:cd:59:2d:01:7f:43:e4:
                    c0:54:98:18:66:81:1e:62:14:4d:69:8a:1c:be:f9:
                    23:6f:52:31:a6:33:96:13:50:93:bc:7a:af:0d:9a:
                    d3:f5:7a:dc:a9:f1:bd:ca:53:36:07:1d:52:53:ee:
                    56:38:59:9e:ba:63:f7:fe:59:f2:d3:ed:cc:d9:c2:
                    a0:fc:17:42:21:84:87:05:ef:a0:ae:98:00:0f:0b:
                    5d:73:57:01:bd:29:6a:f1:85:1e:52:4e:de:e7:a0:
                    f1:7e:9c:77:3a:47:f6:35:12:b5:95:80:c3:c3:89:
                    73:bc:c9:32:50:39:89:22:96:d6:e1:9e:14:ec:3c:
                    8e:8f:3e:82:07:1b:86:24:3e:cd:70:f5:d5:37:9a:
                    dd:7d:38:66:8e:fb:39:3f:74:a7:99:4f:39:62:0c:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:02:EB:DA:D0:51:2E:59:A2:21:CB:EF:27:62:16:B5:C3:93:A4
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:1c:18:ef:1f:44:f3:b8:b5:58:5f:d1:50:10:62:f4:45:
         ac:ef:bb:00:f7:1b:6c:45:22:a2:8a:5c:d1:a7:bd:d6:ca:11:
         92:2c:17:5d:a1:11:02:30:88:ed:06:5e:5a:76:9a:1a:71:f3:
         2c:74:ac:17:3e:1f:e1:44:7e:c4:6e:47:2d:b0:cb:b5:34:06:
         73:ca:58:f4:aa:47:cc:93:dc:4a:1e:dd:9e:bc:23:3e:88:93:
         0d:62:14:80:21:2d:59:7e:5f:e9:b9:1a:38:0f:57:9d:15:69:
         1b:69:75:de:7a:14:78:aa:8a:ef:61:e4:72:3c:0a:09:84:22:
         76:94:21:9d:4f:3b:48:1f:a5:4e:30:cb:39:ce:52:2e:64:1e:
         98:05:df:51:c9:16:17:f9:a2:61:6f:32:43:e5:a3:de:9f:03:
         c2:51:92:28:29:dc:b8:ef:85:1c:ee:81:8c:8c:d2:16:28:d3:
         72:68:5c:03:2e:b2:41:7d:37:0a:d5:fd:3b:18:3e:9d:3d:71:
         cf:6e:f1:3a:6c:3c:18:20:ab:7b:ca:1c:cf:59:cc:f6:fd:f6:
         47:af:ca:dc:a7:bd:8e:9f:1a:68:45:54:0b:b4:8d:c3:e9:07:
         32:6e:52:08:c5:e8:65:9a:6d:a4:e2:84:e0:73:7f:83:d5:5d:
         3b:c7:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:24:25 2026 by rpki-client