Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          cdz4eJqSBJqUZm6lzrgdRMmSHaUm1FCELWGGCj7uTAM=
Subject key identifier:   01:16:5D:C2:FF:D0:AE:2C:9C:AE:02:9F:EA:24:E2:15:73:D2:0B:A1
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       7ED64F71D941B16C89F5E238311F5A63948A163C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0306
Signing time:             Fri 17 Apr 2026 08:21:53 +0000
Manifest this update:     Fri 17 Apr 2026 08:16:53 +0000
Manifest next update:     Sat 18 Apr 2026 09:28:53 +0000
Files and hashes:         1: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=)
                          2: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=)
                          3: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: M5CnWbDZuPba0t8tekwdsnQKt9v90fVqol7ahhYQyXk=)
                          4: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=)
                          5: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=)
                          6: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=)
                          7: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:4f:71:d9:41:b1:6c:89:f5:e2:38:31:1f:5a:63:94:8a:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Apr 17 08:16:53 2026 GMT
            Not After : Apr 18 09:28:53 2026 GMT
        Subject: CN=01165DC2FFD0AE2C9CAE029FEA24E21573D20BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:7b:5c:00:1f:50:6d:cb:32:6e:f8:2b:a6:
                    bb:0c:de:83:ed:d4:a1:a1:b2:af:b3:7c:fa:a0:1d:
                    35:23:de:ea:14:cc:7d:00:d7:15:7f:38:f4:b9:6f:
                    6b:87:c1:d0:d0:80:8b:a9:6a:5a:22:90:1d:d3:f9:
                    80:f4:1c:9b:26:3f:85:32:a0:e8:00:93:6a:1a:9d:
                    83:b2:84:39:1e:5e:05:09:a8:aa:b2:c8:86:0f:36:
                    c0:a0:82:78:eb:58:1b:8d:be:68:d7:4c:29:71:60:
                    01:7b:fb:ba:b7:95:ac:b7:d2:96:e1:f8:71:57:de:
                    b7:85:d7:9c:ca:f2:4f:7c:6f:d8:17:50:c9:66:05:
                    1f:35:e6:8d:15:69:17:54:69:27:c2:c6:b9:fe:09:
                    93:5b:72:4f:e5:77:a2:94:8c:c7:d9:cc:f3:97:c5:
                    72:64:dd:9c:ad:c3:b7:16:51:f6:ab:f6:43:cb:6f:
                    30:b1:86:92:b8:b9:8c:46:c0:24:7e:c7:b6:ce:64:
                    b0:a5:58:c4:c7:2b:ee:ba:f8:88:37:67:77:af:34:
                    2f:b7:25:4c:be:75:cc:f6:43:5b:d7:9e:0c:ab:3b:
                    13:03:ad:cf:92:d6:8d:5e:d6:55:0d:db:b6:cc:fe:
                    08:e6:30:e1:c7:9f:6e:de:85:c0:b0:44:cb:f4:4a:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:16:5D:C2:FF:D0:AE:2C:9C:AE:02:9F:EA:24:E2:15:73:D2:0B:A1
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:08:f4:a3:d7:e5:56:24:d3:0b:73:4a:16:cf:34:ec:ef:
         5b:e2:76:31:2c:19:cc:9f:1c:b7:1b:6d:3a:54:14:6d:24:d3:
         10:e0:a5:b8:3c:58:ac:f9:44:fc:37:fa:c4:16:b0:0a:d3:7a:
         3f:bf:33:d0:92:29:8e:d5:64:d0:a4:48:c2:b4:bb:0b:cb:8e:
         ba:7e:03:b4:58:47:4b:52:e5:ca:36:bf:af:a0:29:3f:ef:a0:
         b8:df:6a:61:36:00:50:86:4d:35:33:1c:aa:79:38:3b:f0:ec:
         e8:50:98:81:22:42:69:66:a7:c5:21:70:ae:b1:d8:56:c4:b5:
         e0:1c:29:91:aa:ff:2d:58:fe:38:31:42:74:5d:eb:bb:7d:95:
         72:56:03:c9:bb:75:a4:02:46:f4:ff:17:0e:5d:84:8b:10:a9:
         84:49:d8:6d:67:11:b6:d9:04:e3:53:81:1a:30:5f:11:f5:f7:
         26:a4:86:7c:04:6d:07:35:83:74:5d:e6:72:c6:ec:0c:68:4a:
         95:8e:07:9e:fe:87:90:5b:b6:4d:4b:3c:a5:59:3d:eb:81:03:
         aa:03:fb:11:12:ec:96:84:39:bc:15:1a:94:73:6b:76:ab:05:
         ff:9d:ea:08:21:ed:da:d0:62:c0:5c:66:8f:9e:06:83:7e:09:
         80:3f:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:16:35 2026 by rpki-client