Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          nOf0ixsbGP7SXuisGc+s4yzh9ZSW/+GiuC7RYCce1LM=
Subject key identifier:   5A:49:C4:A8:CE:EA:1E:E1:47:08:25:4D:38:20:3C:C3:17:6C:3B:33
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       06FF8F3BD573BF812CBB32870688B7A730588543
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          03E7
Signing time:             Fri 17 Apr 2026 21:11:44 +0000
Manifest this update:     Fri 17 Apr 2026 21:06:44 +0000
Manifest next update:     Sat 18 Apr 2026 21:50:44 +0000
Files and hashes:         1: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: gwfbQtvZPw+lHpqSQB/2PtztyzWhC+GVEenvJssP4iY=)
                          2: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: ULi4FYYWXFlCDZDpBCYZVSTISsenxy/YJAuvKwr9m8g=)
                          3: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: r+uj9YWkpMSVawq4AVViOlibLU/fTgUpDmo2K+6F4Gw=)
                          4: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: h55W5fz2xG80KATtb5VLUwUl3Zhx+paUFG8IgMf3Fdk=)
                          5: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: MTXzRzx9eWPQGuMrvp9aHbj6hANaYRgh1dxgQCA7+2U=)
                          6: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: VH68N7fjVvpj4gQDPqnink88r+X9xalDoNm+b02XgTU=)
                          7: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: ZuTHE31VjsGhzrygc2fx+ihwfa81Nr30uqaxbUWtX9w=)
                          8: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: 3L6gNV1+7rdEvjCJoBmUr5ypOPk98NdVUfDg1hMB0uo=)
                          9: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: p5rOF2YH6a4Q8CKvCIkF9tDTYltPhADMfTMYJrowGak=)
                          10: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: aLoLHNevijtCvwcQ4oVctLfeIATa9ZSRy2jdKTX4iIA=)
                          11: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: EpOMEUmUld0qqBrmaSr+kQCzDIYoGvYL0Ul22h7pbL8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 21:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ff:8f:3b:d5:73:bf:81:2c:bb:32:87:06:88:b7:a7:30:58:85:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Apr 17 21:06:44 2026 GMT
            Not After : Apr 18 21:50:44 2026 GMT
        Subject: CN=5A49C4A8CEEA1EE14708254D38203CC3176C3B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:e5:27:fc:48:03:15:24:ce:fc:08:ac:64:
                    06:e9:df:e4:c5:fe:2a:20:d1:62:b4:d9:b2:8b:ac:
                    ff:c3:51:c0:42:a2:40:3b:92:8f:ea:07:1f:42:bc:
                    dc:bd:5b:e6:75:5c:00:43:d7:ed:94:bf:8b:9f:47:
                    aa:d5:9d:8f:fa:21:6e:60:ca:fc:3b:34:92:6e:a8:
                    cd:2e:6a:1d:9e:8e:70:7c:b3:26:ca:8f:e0:2d:13:
                    a5:20:cc:ef:1a:22:0e:bc:ae:f1:a5:cf:45:ef:b8:
                    b1:8d:df:aa:59:92:98:bd:17:8f:ef:5f:b4:dd:b8:
                    ad:ea:7e:98:ea:43:d6:2e:e9:91:e9:4f:a7:dc:7b:
                    3a:10:80:70:09:95:b5:cc:86:29:cd:cf:1a:ad:99:
                    2e:1a:ad:fe:65:8c:79:6e:4b:e0:3d:f6:0e:41:69:
                    76:67:53:fe:a1:a6:24:c8:92:00:bc:15:56:8f:2b:
                    5d:7f:a9:4f:ce:77:b8:7a:57:4c:7c:ba:80:01:f6:
                    35:b3:8e:ba:db:2d:0a:a4:2e:39:26:ba:6a:24:2e:
                    ac:2d:fd:b1:14:5c:39:a8:9d:39:87:80:88:86:ba:
                    d6:e1:cf:45:73:1a:29:7c:39:90:4b:00:5f:4f:ac:
                    e3:2f:8a:cf:85:71:35:02:b7:3e:0b:fd:aa:53:41:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:C4:A8:CE:EA:1E:E1:47:08:25:4D:38:20:3C:C3:17:6C:3B:33
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:60:4b:85:5f:02:d3:ff:16:93:7f:e0:88:91:40:f3:ee:8c:
         83:a0:bc:b7:4a:e2:b3:f2:e3:c5:b6:74:72:f4:ae:83:34:03:
         7d:24:e7:53:df:77:5c:60:2c:4d:77:75:db:68:0f:e8:cb:18:
         23:ed:85:83:29:1a:0d:9f:9e:25:03:5b:54:96:65:57:85:85:
         1c:e8:95:4b:d5:01:c7:53:3d:cc:3c:e2:8a:0d:e7:16:ae:3a:
         d6:ec:00:d7:34:78:14:89:f4:75:7d:45:ab:32:5e:5e:78:eb:
         92:ca:32:09:ca:aa:ba:df:d4:0d:f7:39:fc:6d:7f:49:66:0a:
         b0:58:2c:c6:77:7a:96:e8:86:52:d4:e4:a3:eb:36:28:61:87:
         d3:6c:57:ba:e7:28:eb:b0:92:a2:3c:1a:43:b6:e4:14:35:34:
         ca:60:86:63:f2:7a:77:e9:22:59:0d:0c:45:ed:cf:5b:50:0f:
         86:32:d3:c8:43:53:dc:72:a4:6c:f1:7b:10:06:c4:9c:8b:99:
         d0:71:40:11:cc:13:b8:8f:50:87:9c:38:d3:fc:3f:01:4c:49:
         6b:f8:0a:2d:5b:1d:bd:ef:5c:bd:ee:c0:10:31:4e:3c:b8:92:
         24:bc:bb:6b:76:24:4a:15:8c:8c:96:71:db:9f:46:90:86:f1:
         00:d5:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:26:30 2026 by rpki-client