Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          l69sKbRwS43Nle+wfPWHk8zD/DHyUe8SRVkauV+yQWI=
Subject key identifier:   11:B7:1F:66:69:0B:92:AD:91:37:A7:AE:AB:BE:60:74:56:00:A1:49
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       4EAE0697E785367950305FFA25313B95B09E5030
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          02FA
Signing time:             Wed 08 Apr 2026 07:06:53 +0000
Manifest this update:     Wed 08 Apr 2026 07:01:53 +0000
Manifest next update:     Thu 09 Apr 2026 08:43:53 +0000
Files and hashes:         1: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=)
                          2: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=)
                          3: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=)
                          4: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=)
                          5: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: TERFq/Fv7RHn5VstEWQBGHKVbbFpmzcdaCzGvsiKnR8=)
                          6: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=)
                          7: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 08:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ae:06:97:e7:85:36:79:50:30:5f:fa:25:31:3b:95:b0:9e:50:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Apr  8 07:01:53 2026 GMT
            Not After : Apr  9 08:43:53 2026 GMT
        Subject: CN=11B71F66690B92AD9137A7AEABBE60745600A149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:eb:8b:b0:a3:19:60:e2:00:c5:21:97:a2:
                    92:af:37:ae:5f:f7:82:f6:8e:3b:e4:7d:9b:af:fd:
                    29:1b:f8:5f:c1:40:be:a0:01:1e:1f:4e:3f:53:3c:
                    07:64:f4:f6:50:54:e3:64:6a:b4:a7:4e:2f:19:3d:
                    c9:b8:2a:f0:f6:f8:ee:b3:64:8b:52:9c:45:dc:e7:
                    7d:36:5a:ff:3c:ce:dc:7f:b8:f5:1b:93:79:b2:77:
                    42:ba:8f:72:e7:29:6f:d3:fd:41:f9:36:87:5c:5b:
                    f0:6e:51:1f:e2:94:07:6c:3b:8c:dc:2a:67:9c:e3:
                    62:de:08:70:f7:34:e9:f3:89:17:f9:91:33:fd:b2:
                    d6:39:86:5e:d8:a2:14:b5:8f:0d:34:4c:c2:8d:f8:
                    ff:f8:1d:cc:8d:76:af:f0:ee:b1:67:25:b0:f1:29:
                    ce:c8:53:70:f7:65:c8:17:fe:1e:05:76:f1:0f:de:
                    8b:d0:87:a1:7a:2a:ce:7c:17:51:b3:28:cd:6a:56:
                    67:79:22:97:e5:71:bf:f7:32:50:25:24:0c:60:d3:
                    c8:63:90:5a:a5:6a:e6:4a:2d:56:c9:b3:d7:15:26:
                    90:4e:52:05:47:76:e9:15:f5:60:87:af:26:c9:1d:
                    d7:e7:8b:6e:8e:ec:6b:1d:25:b9:81:b6:e2:8f:e0:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:1F:66:69:0B:92:AD:91:37:A7:AE:AB:BE:60:74:56:00:A1:49
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:78:24:c7:39:c4:df:31:b4:2c:21:30:46:65:86:05:aa:a2:
         6c:d8:ad:ae:87:d8:3d:61:62:46:a2:2f:75:ea:da:b0:f2:6e:
         73:b8:9a:cc:5a:7f:01:cb:a6:28:e5:af:95:f3:4f:de:d5:73:
         32:b0:36:87:8d:c5:1d:ae:69:5b:5b:65:0e:1f:56:c0:61:50:
         3f:f8:99:4b:36:7a:1c:af:90:44:2f:10:bf:16:e2:c4:d0:10:
         95:c8:38:7d:5f:2d:6f:18:25:86:4c:d1:d5:fa:a4:fa:7a:62:
         8b:05:b6:ff:9c:78:07:6b:38:9e:cd:ec:8e:af:67:2a:a3:34:
         19:f1:cd:a2:0d:88:8b:5c:70:98:a9:a0:b4:6d:af:40:e5:69:
         3b:1e:51:68:b9:c3:e3:b4:10:71:47:e2:b0:da:1a:72:8d:18:
         6e:28:c4:0c:79:a6:97:80:75:65:2a:9c:3e:5d:dd:df:fc:cf:
         fa:f0:71:9e:2d:36:0c:2c:7e:94:78:0f:bc:bc:ab:71:5f:07:
         fb:41:f2:18:23:16:c8:95:5d:9d:d1:c8:7e:e6:fe:9e:eb:6b:
         54:1b:17:12:9d:24:f1:4d:7b:63:d4:22:e5:f2:5f:5a:c5:71:
         0b:64:65:a0:c6:41:e4:47:35:fd:9d:b2:b5:fc:92:a0:53:23:
         dd:d1:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:37:19 2026 by rpki-client