Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          SCbjyOIG/+vQYeTdB4XpF9bL0VgDOtWacL6XAGyUYxI=
Subject key identifier:   72:1C:1E:A5:65:F2:B7:92:1A:D6:C4:F8:A8:5B:42:2F:5E:ED:E5:93
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       263530AB48478F387520606EADC561AB71B64F28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0409
Signing time:             Wed 28 Oct 2026 03:20:05 +0000
Manifest this update:     Wed 28 Oct 2026 03:15:05 +0000
Manifest next update:     Thu 29 Oct 2026 03:57:05 +0000
Files and hashes:         1: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 1ZbPlI5v57rYUaVQi21wyq+sIAw7vLo8snzV7zFZc9g=)
                          2: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 7KNGGn/BHmAvq1tjdyOQD/Hc7ecYI8H5af+AD+SpaSc=)
                          3: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: 4Fbve+UwbgeUI6ca5uR09Eyf6sZ8PDDD5/ZPNxmaCzg=)
                          4: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: /mhfetzQio/E/qnhQ9kuqb/6RsmTfwL8dwBK4dlPe6E=)
                          5: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: ufrWaHiMgG+YVFFkB+Z4N4w47FXwVeHL801FNnW0KYI=)
                          6: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: W2VojqXeRjNqg1ykoK5IEvP5VmTxgcMDzD2JEUyvv/s=)
                          7: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: bLJCezHUciICKBSR+r7VuTqFXf1SEYOpnxLjF3fc66M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 03:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:35:30:ab:48:47:8f:38:75:20:60:6e:ad:c5:61:ab:71:b6:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Oct 28 03:15:05 2026 GMT
            Not After : Oct 29 03:57:05 2026 GMT
        Subject: CN=721C1EA565F2B7921AD6C4F8A85B422F5EEDE593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:12:e0:be:ac:bd:51:7d:dd:be:87:f7:b9:
                    e8:e9:5b:79:a9:b0:3d:9f:c4:d0:2f:83:ad:65:b1:
                    93:c8:0d:98:e4:e9:c1:3a:ce:3d:b6:ca:eb:e7:27:
                    63:67:28:71:d7:20:95:3b:51:78:47:ea:78:6c:89:
                    1e:30:7e:56:6b:61:51:09:4a:6d:1d:f3:ba:c9:63:
                    c6:2c:f4:fb:77:00:4b:fe:2a:a7:09:5e:54:69:1d:
                    d1:b0:a6:d4:a2:f8:c1:9d:36:67:e6:aa:3a:f1:b3:
                    44:f6:bc:70:42:fd:79:a1:c4:b8:08:ed:19:e0:a3:
                    8f:c1:42:f1:59:35:3b:e6:a8:bd:56:c0:03:fc:64:
                    07:dc:97:29:03:5e:fb:8e:0c:7d:bd:db:fc:29:92:
                    9e:7f:33:98:b8:ca:92:d5:e7:b8:59:3d:9e:00:83:
                    1c:47:e7:1e:ed:d1:f2:42:eb:4d:f5:52:f4:d6:eb:
                    9b:e9:25:c4:1d:1c:f2:88:0b:b1:4b:50:da:34:84:
                    48:53:27:10:b3:12:1a:cb:07:3c:12:b7:d8:dc:c4:
                    59:d9:4f:c9:89:90:5f:43:26:c8:09:88:c6:10:3f:
                    7f:ed:94:bf:93:04:49:4c:eb:93:2b:ef:3f:14:d5:
                    4f:0a:73:69:40:c1:0d:ae:e6:04:db:39:f9:16:56:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1C:1E:A5:65:F2:B7:92:1A:D6:C4:F8:A8:5B:42:2F:5E:ED:E5:93
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:83:2c:ef:e5:96:11:a3:60:12:3d:22:c8:1e:10:14:bf:
         df:ff:85:49:63:93:39:53:a5:23:f9:2e:a5:10:d3:e4:e2:47:
         0c:87:77:56:e7:c5:c6:6c:57:7e:32:e6:51:86:6f:98:58:65:
         47:4c:a7:35:82:b0:cb:52:27:f0:ce:68:31:6e:45:ba:60:2e:
         b9:55:6b:2e:99:25:24:4c:36:73:d6:e3:cb:2c:95:38:d5:79:
         d0:ae:e9:5d:52:55:5d:e9:c9:67:b0:09:10:f8:ba:50:6e:02:
         78:9a:a9:4e:11:76:f6:d9:3a:8a:80:7f:65:8b:cb:bd:ca:97:
         fb:7b:2a:13:51:5c:15:54:2d:e4:04:a2:42:20:d9:b8:fc:5d:
         56:cf:db:db:e2:b6:05:8f:f4:bd:90:8a:eb:2d:90:f7:49:be:
         da:0b:dd:3d:93:c2:2d:ed:ac:75:2b:ae:e9:bf:9a:29:44:8a:
         d4:34:f3:1e:ac:cc:d4:4e:f6:d6:9b:c2:38:21:c9:9d:a8:89:
         ee:22:cc:05:2b:dd:52:3c:1c:44:ba:ca:17:61:df:24:7a:ba:
         65:2a:c4:4d:c0:de:a3:2e:7a:f6:6a:59:ca:b8:5f:bc:3e:00:
         a9:34:02:7d:3a:89:52:df:b3:d9:54:d8:77:a6:69:0f:41:a4:
         d7:d1:dd:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJjUwq0hHjzh1IGBurcVhq3G2TygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz
ODZGQ0FEMTAeFw0yNjEwMjgwMzE1MDVaFw0yNjEwMjkwMzU3MDVaMDMxMTAvBgNV
BAMTKDcyMUMxRUE1NjVGMkI3OTIxQUQ2QzRGOEE4NUI0MjJGNUVFREU1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHhLgvqy9UX3dvof3uejpW3mp
sD2fxNAvg61lsZPIDZjk6cE6zj22yuvnJ2NnKHHXIJU7UXhH6nhsiR4wflZrYVEJ
Sm0d87rJY8Ys9Pt3AEv+KqcJXlRpHdGwptSi+MGdNmfmqjrxs0T2vHBC/XmhxLgI
7Rngo4/BQvFZNTvmqL1WwAP8ZAfclykDXvuODH292/wpkp5/M5i4ypLV57hZPZ4A
gxxH5x7t0fJC6031UvTW65vpJcQdHPKIC7FLUNo0hEhTJxCzEhrLBzwSt9jcxFnZ
T8mJkF9DJsgJiMYQP3/tlL+TBElM65Mr7z8U1U8Kc2lAwQ2u5gTbOfkWVnofAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUchwepWXyt5Ia1sT4qFtCL17t5ZMwHwYDVR0j
BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV
Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1
NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hVZ3gvMC8y
OTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQsWDLO/llhGjYBI9IsgeEBS/3/+FSWOTOVOlI/kupRDT5OJHDId3VufFxmxX
fjLmUYZvmFhlR0ynNYKwy1In8M5oMW5FumAuuVVrLpklJEw2c9bjyyyVONV50K7p
XVJVXenJZ7AJEPi6UG4CeJqpThF29tk6ioB/ZYvLvcqX+3sqE1FcFVQt5ASiQiDZ
uPxdVs/b2+K2BY/0vZCK6y2Q90m+2gvdPZPCLe2sdSuu6b+aKUSK1DTzHqzM1E72
1pvCOCHJnaiJ7iLMBSvdUjwcRLrKF2HfJHq6ZSrETcDeoy569mpZyrhfvD4AqTQC
fTqJUt+z2VTYd6ZpD0Gk19Hdlw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 12:11:40 2026 by rpki-client