Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File:                     21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier:          iofSJxVj47ORF5625qeBihjcZmAAe4gVrLnXaXuRX+s=
Subject key identifier:   C3:0D:7D:98:E7:64:1E:AD:E9:2E:E7:7E:F1:FF:FC:A4:C9:13:24:A4
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       2640DA913E61541F051347FEA42B41704BE8D61F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number:          0167
Signing time:             Sun 29 Jun 2025 19:13:53 +0000
Manifest this update:     Sun 29 Jun 2025 19:08:53 +0000
Manifest next update:     Tue 01 Jul 2025 21:21:53 +0000
Files and hashes:         1: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: 0s218+Ss6caCnMfWw06qo2rHBQk62WGNvSHIJgfJW9I=)
                          2: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: /GwKeqS6zDuYxlrn1jYTH8ZargsWnUmZVhue7tGWaig=)
                          3: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: mNBJRwEZQchpEJQ22aH+J3kADJor0zwoXg2QFIsfBTs=)
                          4: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: JH1n7o/DSCccyDaaMhB0MEAOb1cECD//NMzbLDaEFfI=)
                          5: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: QQyiG+i1liLgM69zHzpT4jn4iYVUNA3LELnXKnMg9MM=)
                          6: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: fMniLVi5jMndVedCiTz7SzfVSP78AYWLLI/5D7/ezCI=)
                          7: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: jULvzAmUH0fWR8rrV7xAwTtrfgF+p/71upiRkceoBLU=)
                          8: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: 8/P/ecIJiLuhtWEJJG3oGsc79ncbdsSzXrJ53xmHFfo=)
                          9: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: 0XY6c/w1c99vCmWMEydegKa60I7EYEdhBtHKXQisB/Q=)
                          10: 3138362e3235312e37322e302f32322d3234203d3e20323632393933.roa (hash: TBCOFBWWAapaLoeXJva4Y9ATVzcRRDT4fxgZ/I7i98E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 10:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:40:da:91:3e:61:54:1f:05:13:47:fe:a4:2b:41:70:4b:e8:d6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jun 29 19:08:53 2025 GMT
            Not After : Jul  1 21:21:53 2025 GMT
        Subject: CN=C30D7D98E7641EADE92EE77EF1FFFCA4C91324A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:a9:dd:42:66:45:4f:b2:2b:72:95:12:a9:
                    5e:b7:52:17:5d:b0:7f:57:16:a1:e3:d4:17:ff:c8:
                    06:91:e0:59:93:e5:16:cd:45:46:35:f4:28:32:71:
                    11:4b:2b:83:a2:83:ef:ab:37:bf:f2:90:17:92:6d:
                    a6:37:d6:f2:7a:c9:96:ef:98:5b:d1:1b:a9:61:14:
                    bf:86:75:aa:ea:69:d0:11:9a:d1:ef:73:6e:bd:73:
                    78:eb:ae:4c:28:17:51:50:0b:62:f9:ae:41:9f:24:
                    db:db:ca:20:3d:99:82:cc:f6:90:99:86:68:c6:12:
                    bf:b9:d9:6d:0f:f8:c2:e7:54:60:60:05:e5:ed:59:
                    0e:4f:73:89:14:d9:b1:0f:f5:89:38:44:7d:aa:5d:
                    37:cd:10:d4:a3:82:33:4b:bd:78:0a:36:03:bb:70:
                    2c:e3:eb:23:8e:52:76:26:bd:b3:bd:1b:fb:ef:a5:
                    74:e8:bf:31:09:df:5d:40:ed:34:73:0c:49:39:7f:
                    1f:11:73:88:bb:3a:c8:01:fe:ac:e1:9e:cb:18:a2:
                    0b:7f:8b:c7:f6:3a:1b:9a:da:98:6f:9e:dc:52:d7:
                    53:9e:87:0e:10:03:45:ea:37:39:cc:8c:5f:f8:9c:
                    9d:9f:35:e1:5e:25:cc:a7:1e:ad:b8:15:41:74:a0:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:7D:98:E7:64:1E:AD:E9:2E:E7:7E:F1:FF:FC:A4:C9:13:24:A4
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6d:e5:e0:ea:42:f2:84:a0:f4:22:76:07:7f:96:9e:22:4e:
         38:a6:44:e1:b3:db:d9:3c:c4:88:c3:0a:09:f2:ac:ff:be:11:
         d5:2b:bf:33:21:bd:b3:56:1a:6a:34:70:1b:1a:49:d2:17:c3:
         e5:bc:a3:8b:e2:13:d2:45:16:e6:68:38:52:38:44:46:97:dc:
         9c:4c:81:a4:12:ff:14:19:28:a5:a4:87:b6:87:c1:45:6c:a4:
         ca:8a:93:e3:b3:b0:34:9e:9a:4c:4c:8f:2e:62:4f:58:27:58:
         a9:d8:92:b9:ac:53:92:79:74:f4:dd:b1:15:67:da:40:bd:f2:
         34:6e:88:44:a6:f6:16:e8:cc:36:20:8d:bf:ec:86:80:63:05:
         c4:6a:85:f1:7a:e1:51:f8:af:fc:73:68:3f:50:5c:d4:81:e3:
         b0:60:c7:6e:1b:45:07:12:58:6b:4b:71:e6:3a:f9:c9:e9:4e:
         1e:23:68:3b:4e:b5:d6:e4:9f:07:8e:4d:9e:fe:15:16:af:19:
         ab:df:cf:31:ed:22:1d:40:84:53:e2:53:64:cd:23:fd:e0:0e:
         9e:41:65:d7:18:a6:b1:ba:c5:1b:86:25:00:c8:3e:fb:5a:14:
         eb:09:a0:3d:6f:37:a0:5f:84:e0:74:0e:54:26:04:e8:2a:3f:
         5b:53:24:42
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUJkDakT5hVB8FE0f+pCtBcEvo1h8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGNDFBMURFNkIwNjFGRjE5MTkwNzJBRjU0REFGNTQz
ODBCMEYyNzAeFw0yNTA2MjkxOTA4NTNaFw0yNTA3MDEyMTIxNTNaMDMxMTAvBgNV
BAMTKEMzMEQ3RDk4RTc2NDFFQURFOTJFRTc3RUYxRkZGQ0E0QzkxMzI0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QqndQmZFT7IrcpUSqV63Uhdd
sH9XFqHj1Bf/yAaR4FmT5RbNRUY19CgycRFLK4Oig++rN7/ykBeSbaY31vJ6yZbv
mFvRG6lhFL+GdarqadARmtHvc269c3jrrkwoF1FQC2L5rkGfJNvbyiA9mYLM9pCZ
hmjGEr+52W0P+MLnVGBgBeXtWQ5Pc4kU2bEP9Yk4RH2qXTfNENSjgjNLvXgKNgO7
cCzj6yOOUnYmvbO9G/vvpXTovzEJ311A7TRzDEk5fx8Rc4i7OsgB/qzhnssYogt/
i8f2Ohua2phvntxS11Oehw4QA0XqNznMjF/4nJ2fNeFeJcynHq24FUF0oCPxAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUww19mOdkHq3pLud+8f/8pMkTJKQwHwYDVR0j
BBgwFoAUIfQaHeawYf8ZGQcq9U2vVDgLDycwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby93ZU5OTkFIMlFlMzEzOHVCZFZlR00xdnpZTERmZVhqM1ExaTNFQXQ1dVdt
LzAvMjFGNDFBMURFNkIwNjFGRjE5MTkwNzJBRjU0REFGNTQzODBCMEYyNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMUY0MUExREU2QjA2MUZGMTkx
OTA3MkFGNTREQUY1NDM4MEIwRjI3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3dl
Tk5OQUgyUWUzMTM4dUJkVmVHTTF2ellMRGZlWGozUTFpM0VBdDV1V20vMC8yMUY0
MUExREU2QjA2MUZGMTkxOTA3MkFGNTREQUY1NDM4MEIwRjI3Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
jG3l4OpC8oSg9CJ2B3+WniJOOKZE4bPb2TzEiMMKCfKs/74R1Su/MyG9s1YaajRw
GxpJ0hfD5byji+IT0kUW5mg4UjhERpfcnEyBpBL/FBkopaSHtofBRWykyoqT47Ow
NJ6aTEyPLmJPWCdYqdiSuaxTknl09N2xFWfaQL3yNG6IRKb2FujMNiCNv+yGgGMF
xGqF8XrhUfiv/HNoP1Bc1IHjsGDHbhtFBxJYa0tx5jr5yelOHiNoO0611uSfB45N
nv4VFq8Zq9/PMe0iHUCEU+JTZM0j/eAOnkFl1ximsbrFG4YlAMg++1oU6wmgPW83
oF+E4HQOVCYE6Co/W1MkQg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:33:10 2025 by rpki-client