Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          2dwQ73Awm6j8mNEn67Nez4Q82ksYvwzIBmp/EbX3EN0=
Subject key identifier:   AE:92:E8:C6:4D:2E:60:EC:84:A4:24:F1:DB:47:6B:98:C0:45:B2:D7
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       797269BD594742580097511E824AAC5FA1E1C067
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0176
Signing time:             Thu 19 Jun 2025 15:16:54 +0000
Manifest this update:     Thu 19 Jun 2025 15:11:54 +0000
Manifest next update:     Fri 20 Jun 2025 17:57:54 +0000
Files and hashes:         1: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: VBr4jF3N4Wx9r0R0vor7T8MyPeBPPygT03dt8vmP4/E=)
                          2: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 0wZwBdWsHnVkpxMrkgatFHVIycknH7b2NpcQFFf45JM=)
                          3: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=)
                          4: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: Bdpe46gd+qaQpqhh2lVMuCzXS1ZVgE77hENQ7TVw4Y4=)
                          5: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: cMhOk1gqvGKJ43ZIN08FcrdbKk+2jpoPyVnj2SYGVQk=)
                          6: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=)
                          7: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 16:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:72:69:bd:59:47:42:58:00:97:51:1e:82:4a:ac:5f:a1:e1:c0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jun 19 15:11:54 2025 GMT
            Not After : Jun 20 17:57:54 2025 GMT
        Subject: CN=AE92E8C64D2E60EC84A424F1DB476B98C045B2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:7e:6a:96:8b:ad:30:f4:4c:57:36:3d:db:
                    db:02:9e:79:42:36:d8:28:ce:95:63:84:45:09:b4:
                    eb:98:01:1c:11:c6:fd:d8:08:55:f5:5e:ae:5b:7d:
                    78:f8:ed:b4:f2:cb:cb:e4:82:2e:8d:5e:67:4b:cb:
                    e6:9b:75:db:00:34:68:3a:78:3d:ce:33:42:49:d5:
                    73:c5:97:22:3b:36:1a:58:72:89:62:7a:5d:a1:10:
                    89:4f:ad:a8:70:cc:b9:79:0f:c1:18:33:2a:63:01:
                    1e:47:86:61:86:ee:1f:23:52:b2:82:d1:d0:29:c5:
                    98:a5:c0:47:b9:fc:7e:86:ba:5d:fc:0c:10:21:78:
                    49:b6:62:8f:9d:99:97:c3:fb:92:82:df:64:86:b8:
                    1d:17:3f:63:c4:3e:f5:5b:e9:43:0d:79:c2:64:05:
                    ca:79:e7:7c:c2:8f:d3:f6:72:8b:e5:51:fb:b4:00:
                    c2:bc:bd:b5:2b:02:55:51:e9:81:21:1e:05:36:ef:
                    a1:5b:12:ee:b9:c1:56:03:42:fc:3d:1a:68:1a:c2:
                    fc:44:2d:9b:ae:dd:f2:a7:6c:93:f7:88:e5:2c:42:
                    14:b5:ab:dd:a6:30:02:8c:9a:34:8a:23:6a:59:00:
                    3d:f3:c9:f5:20:2c:8c:01:e2:f8:ba:7a:46:b7:48:
                    27:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:E8:C6:4D:2E:60:EC:84:A4:24:F1:DB:47:6B:98:C0:45:B2:D7
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:92:42:a9:65:df:da:48:92:8d:93:8b:07:db:0e:66:ce:
         1b:81:5c:84:c2:66:f3:6b:cc:c4:b3:93:7f:6d:25:28:ce:ef:
         8e:48:92:1b:a9:b2:06:4d:a4:ea:68:d1:24:1f:71:a8:94:5f:
         9d:1c:96:c2:c5:36:de:20:d6:18:d3:8c:a6:21:a7:ad:68:a3:
         db:23:e6:fb:b6:1c:69:82:11:25:66:79:07:d7:b8:48:62:6f:
         86:56:21:ee:be:b9:d2:fc:de:1e:cc:83:2f:1c:7e:c6:d9:94:
         cf:c6:29:3c:25:1b:a4:3b:32:ae:11:66:1f:ea:63:ef:f0:55:
         87:bd:64:40:4e:82:d7:b0:4d:45:03:e1:54:22:18:9a:c0:db:
         2c:df:4d:ea:00:86:07:5c:d8:53:92:ef:04:b2:a5:39:05:e5:
         35:ca:e2:70:25:50:c2:9e:a2:a5:b0:f1:ca:e8:2e:ec:2c:1a:
         ba:55:85:86:9f:fe:26:06:a3:4e:36:b7:46:f0:85:b6:af:80:
         b2:db:c5:db:58:76:d0:4e:ee:5b:90:cf:04:70:6f:1d:01:44:
         50:35:1b:d9:ce:0a:a0:7c:93:ed:62:1a:9e:dd:5d:2f:76:fa:
         fd:f7:f6:e6:e6:c8:63:64:8c:ab:49:c6:0c:ac:dc:f0:1a:11:
         a5:98:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:27:32 2025 by rpki-client