Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
File:                     29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft (raw, json)
Hash identifier:          JDm1HwTllUww4gtBcW+3On0WeXziY6Cs4a9A9shIjGM=
Subject key identifier:   95:31:C0:B0:5D:85:11:93:3C:66:94:07:3E:91:F1:F2:11:B8:1B:82
Authority key identifier: 29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0
Certificate issuer:       /CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
Certificate serial:       0AEAEFBD64E9DE3D9D90D80570DBF2D2C3594B19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
Manifest number:          CC
Signing time:             Fri 17 Apr 2026 08:55:08 +0000
Manifest this update:     Fri 17 Apr 2026 08:50:08 +0000
Manifest next update:     Sat 18 Apr 2026 11:15:08 +0000
Files and hashes:         1: 3137372e3133372e3131362e302f32332d3233203d3e203532363030.roa (hash: +q7JtbZzXAZuJoRdfjkFaqGM6dHKep2Xx1z/RerUlj8=)
                          2: 323830343a6431633a643030303a3a2f34342d3434203d3e203532363030.roa (hash: 3ly2o/HYKzH0/GvUZHPFJ5/8vC18/48vZHuJU2+bBJM=)
                          3: 3137372e3133372e3131322e302f32322d3232203d3e203532363030.roa (hash: 9SxVaMXoF4cEBA5/7pnADN7P2kixXY96JXAojQLApJ8=)
                          4: 323830343a6431633a39303a3a2f34342d3434203d3e203532363030.roa (hash: vefawCACzIFt7LCO+4cUj0mxVdrGIhl8TeITvW3uqKw=)
                          5: 3137372e3133372e3131322e302f32312d3231203d3e203532363030.roa (hash: OOZDVBbNmjm3ya38QWjTi4DBeuvc6SN9GP+qjy9kVM0=)
                          6: 323830343a6431633a3a2f33322d3332203d3e203532363030.roa (hash: kx+gtk3y46lxx99zDNT/tAjY3ez1RuWFtsjlv+A7rVA=)
                          7: 3137372e3133372e3131352e302f32342d3234203d3e203532363030.roa (hash: 0QtcQ0AOjZML+uiYEwkXhg3P4/NUIwx/t/6LuL67BLY=)
                          8: 29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl (hash: U2Qd1d157vU3Ga3wB6MBbbqKChL9Fcc3FOjtZGm3NBA=)
                          9: 3137372e3133372e3131372e302f32342d3234203d3e203532363030.roa (hash: o570u0wfOdtlIAfNtTPSTPjxNwKjQLtEyS/Qyx0EqEI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl
                          rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ea:ef:bd:64:e9:de:3d:9d:90:d8:05:70:db:f2:d2:c3:59:4b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ED4D2D72C465D5DA11E22576AED037109FCBD0
        Validity
            Not Before: Apr 17 08:50:08 2026 GMT
            Not After : Apr 18 11:15:08 2026 GMT
        Subject: CN=9531C0B05D8511933C6694073E91F1F211B81B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:7e:06:af:44:5b:ca:8c:ab:aa:20:6c:46:
                    34:8d:61:ab:14:b5:bc:28:61:d0:93:e3:ad:9e:4e:
                    29:2f:85:29:6a:f5:6c:c5:c3:b6:18:9e:06:4f:7c:
                    d6:9e:53:0a:8f:e2:44:b5:bf:86:00:d0:b4:85:9a:
                    26:0f:43:fc:dc:c6:78:b2:4d:05:a4:45:5b:4d:6f:
                    b7:5b:05:f2:0b:83:a2:76:11:51:ee:a5:60:fc:97:
                    12:d4:74:fc:9a:70:11:54:88:10:54:f1:e1:b9:bf:
                    67:eb:c0:6b:2c:96:6d:3b:8a:ca:c7:a6:24:a7:33:
                    fe:4a:1b:73:5c:a0:f6:73:f2:7e:58:63:ca:fa:fe:
                    29:bc:8d:52:fa:b5:d9:2e:e2:33:14:dd:2b:b1:da:
                    9b:2d:98:8e:d1:94:b0:f6:d1:61:ca:21:fa:ce:5f:
                    3f:4e:ad:68:8b:34:5c:7d:ba:d3:48:35:4b:b2:44:
                    cd:45:b8:94:4e:8a:37:00:33:af:21:1f:2c:b7:6a:
                    bf:1d:41:40:ff:a4:5a:84:85:10:b4:f7:e6:8a:1c:
                    f5:88:79:29:eb:3d:2d:2e:48:c6:02:e8:bb:e9:d6:
                    d1:81:90:a1:85:51:d2:67:a6:12:bc:e4:dd:3e:23:
                    f7:9f:b8:93:16:4c:02:93:51:cc:ac:eb:6a:c0:86:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:31:C0:B0:5D:85:11:93:3C:66:94:07:3E:91:F1:F2:11:B8:1B:82
            X509v3 Authority Key Identifier:
                keyid:29:ED:4D:2D:72:C4:65:D5:DA:11:E2:25:76:AE:D0:37:10:9F:CB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29ED4D2D72C465D5DA11E22576AED037109FCBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/29ED4D2D72C465D5DA11E22576AED037109FCBD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:02:a6:31:cd:38:4a:f2:00:a5:44:c9:f5:90:af:42:a3:b9:
         37:20:05:ad:fb:0d:a2:4f:fb:32:75:d3:c1:b1:a5:07:bb:0d:
         40:b2:48:0b:05:a9:cc:aa:c6:02:df:73:42:0e:c3:26:f1:48:
         d3:72:73:9e:25:00:ca:bc:1d:02:6f:cc:6a:6b:6f:d9:d7:fe:
         59:f3:fa:67:e5:aa:64:17:4d:9a:62:a0:9d:44:0c:43:d6:41:
         6f:23:b5:99:89:80:21:81:5a:e6:8a:ce:3d:e7:99:9b:28:f0:
         97:01:f1:99:a3:d4:12:5a:85:4e:0d:91:14:8a:7d:3a:23:84:
         bb:d7:c3:24:c5:e8:f0:4e:83:5a:33:3e:22:da:0e:f3:2b:79:
         5a:26:b1:1c:dd:09:51:3c:b5:c3:5d:60:57:5e:5d:3a:53:24:
         f1:0b:4e:b8:ac:32:5c:06:ab:9c:82:30:9f:4d:4e:41:b5:ea:
         d1:26:ed:2b:36:4d:db:70:4b:7b:89:17:3c:1b:c1:f3:01:88:
         27:ea:86:44:a3:f1:55:36:4c:36:a9:a0:2b:8d:3b:bf:a9:c1:
         6d:b9:01:ca:23:86:97:05:72:c9:d9:4f:69:aa:e3:2b:48:7f:
         55:b5:9c:e2:d3:24:db:fd:65:1f:6a:ba:1a:cc:2a:d2:37:fc:
         d6:15:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:25 2026 by rpki-client