Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File:                     21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier:          7QPSyZym/6W0ltePWXJzEqzxJBYDIvceZDGWsfOUcUU=
Subject key identifier:   4E:A6:D0:8F:25:64:88:32:80:63:D9:8F:76:FC:46:5A:D2:B0:03:D9
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       666350C04A4283C22BDBF988327D5D2739B48748
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number:          01CF
Signing time:             Sun 19 Oct 2025 23:26:04 +0000
Manifest this update:     Sun 19 Oct 2025 23:21:04 +0000
Manifest next update:     Wed 22 Oct 2025 01:59:04 +0000
Files and hashes:         1: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: PsRtW7mHTyutO0DxQQGdWmoyYKa6pQXrN/ynckkhhkg=)
                          2: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: 3I72140Z3ulLl5k4dKLwv/elKHlGRjQ2O3o1AuO1vTs=)
                          3: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: vyEuVko/frnMCelb6uKYiRTw431v8ZOguv+v05iqEi8=)
                          4: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: B6OA/UtG4WpNu4nO8tjqIg/m7ZPmuNJg+/AraO2FdBw=)
                          5: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: VQxRN4syAFNsgoSkUbyGLUgM0m2Nj3rU72rimBNN8sU=)
                          6: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: wWOjPJ3iAFPWxd39juCogoZZfOyEX658QOATRVnHXVI=)
                          7: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: 97Ca/q3JVe60Zw9Y/8oQJDrJblO8E1C0KYjkN87TcEQ=)
                          8: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: dDZBFJTgy6uf7u/054EgmCGUT/tK/Ve2awhm8WyhgyI=)
                          9: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: 0STruXq+XIfTiYPW08Xb6Jj7cL9IQowr5jSbbyzxCMs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:63:50:c0:4a:42:83:c2:2b:db:f9:88:32:7d:5d:27:39:b4:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Oct 19 23:21:04 2025 GMT
            Not After : Oct 22 01:59:04 2025 GMT
        Subject: CN=4EA6D08F256488328063D98F76FC465AD2B003D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:d1:ea:ba:3b:9e:54:be:07:e9:26:3e:05:
                    69:6e:64:aa:32:ab:e3:a0:d1:2b:be:c2:bc:a1:75:
                    b3:12:7a:70:f1:8b:75:54:4f:b5:4b:55:df:e4:1a:
                    f3:2e:7a:f5:b3:43:b8:d4:08:10:62:75:eb:7b:b1:
                    a7:2c:d9:cf:00:fc:04:34:2b:0a:91:b5:ed:a6:4e:
                    29:2e:f3:6b:c0:4a:9b:0f:bc:61:2a:aa:40:11:f8:
                    58:57:75:00:dc:33:83:98:00:be:24:92:a1:a1:c4:
                    ab:ef:a7:9b:57:64:39:50:b3:87:76:a4:07:3c:86:
                    95:9b:49:1d:8f:60:38:ab:76:a4:ed:f0:7e:1d:5f:
                    05:0c:8c:7f:75:c4:ec:f3:31:ad:8d:37:9c:92:80:
                    3f:a2:36:0b:70:64:85:20:ce:09:2f:18:d8:68:56:
                    e1:f8:fe:98:eb:1a:2c:1e:0f:78:7c:4d:81:96:af:
                    c9:f1:5d:47:38:28:a6:f7:e6:ab:ae:6e:3b:72:85:
                    0e:2a:70:49:e9:f6:ea:75:1a:e7:12:5f:e3:36:50:
                    42:59:a0:7b:74:7c:96:a9:7e:34:06:68:c8:3c:32:
                    4e:37:cc:25:d6:82:47:5e:6f:96:e0:9b:b5:db:cb:
                    08:ab:86:ed:45:e0:d4:1c:8a:9d:ab:8f:7d:50:c0:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A6:D0:8F:25:64:88:32:80:63:D9:8F:76:FC:46:5A:D2:B0:03:D9
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:ac:fe:43:cd:d4:91:95:45:cb:39:7f:d6:21:e9:2b:ac:
         b9:a8:82:21:91:9c:84:d3:ab:9a:12:1e:30:79:e6:28:71:7b:
         27:ec:ff:d6:61:3f:af:3c:1c:ea:6c:12:d0:5f:56:20:87:2d:
         d6:5e:d6:4a:b7:46:18:05:3c:fc:e2:b2:2a:5c:c1:e9:16:b0:
         ad:d3:b6:a0:fb:22:2a:e6:23:6a:13:fa:84:9d:d6:39:9b:4f:
         c1:06:62:fb:85:e9:a2:22:0b:93:83:75:5f:b9:24:cd:d2:59:
         9b:b0:f4:c5:c3:4b:1e:0c:b5:a3:ba:2e:f4:cb:3a:54:88:98:
         4f:a0:e4:d6:32:db:eb:15:79:7d:5d:cd:12:a2:38:66:29:bb:
         24:46:af:3e:ae:2f:e8:dc:46:ed:ee:83:aa:f6:d2:6b:79:36:
         54:d0:62:1f:5d:7b:ac:4a:05:90:a5:fa:7c:e6:d9:73:d6:53:
         2a:98:c6:0f:df:79:25:61:5f:11:8e:cb:be:0c:f0:77:0a:fa:
         31:00:e5:f5:2d:10:2e:79:f7:ea:8a:40:08:69:8f:ec:43:86:
         7f:bd:79:29:63:e7:30:64:0c:50:3b:05:41:a0:f9:bd:e0:de:
         0e:dc:eb:94:60:6d:a5:70:dc:64:a2:2e:9d:e6:e0:0f:8a:cf:
         1f:90:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:26 2025 by rpki-client