Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
File:                     947E29F37C387A9590C135AE83DBF68B102E9E57.mft (raw, json)
Hash identifier:          KaNOP4H7wlOXZJ2hTTQydJ5HWRLd081gSuHC5yfta0o=
Subject key identifier:   B4:9D:2F:29:4C:DA:CB:ED:8E:97:77:1C:70:ED:EE:53:89:43:D3:4E
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       1959248E56376E3FAC0F73252DF8A197B62518A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
Manifest number:          0108
Signing time:             Wed 08 Apr 2026 04:11:18 +0000
Manifest this update:     Wed 08 Apr 2026 04:06:18 +0000
Manifest next update:     Thu 09 Apr 2026 06:45:18 +0000
Files and hashes:         1: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=)
                          2: 947E29F37C387A9590C135AE83DBF68B102E9E57.crl (hash: PBqSG4zE3vOFZu3rMxNADmUNaxzFVDtg9yWG6O0iCgY=)
                          3: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g=)
                          4: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:59:24:8e:56:37:6e:3f:ac:0f:73:25:2d:f8:a1:97:b6:25:18:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Apr  8 04:06:18 2026 GMT
            Not After : Apr  9 06:45:18 2026 GMT
        Subject: CN=B49D2F294CDACBED8E97771C70EDEE538943D34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:c5:b4:fc:97:ae:7d:ca:08:1a:e3:6c:8a:
                    a7:68:5f:c2:26:bd:07:b6:c9:f3:8b:22:c0:6c:ac:
                    a4:6c:c5:0e:c7:2c:89:a1:b1:1f:d1:1a:0d:19:92:
                    89:b9:44:af:76:17:91:df:46:9f:a9:be:0f:18:f7:
                    87:55:3a:57:b4:7d:ec:0c:f8:cc:66:16:40:81:0d:
                    fb:15:62:7c:ec:64:da:22:16:a1:72:4c:f9:f9:bd:
                    89:86:38:c1:24:3f:5c:43:8d:d0:da:25:70:a5:c8:
                    1e:da:44:7d:65:56:6e:2d:33:e9:5d:2b:e5:f7:2b:
                    66:92:77:ff:58:cf:d2:c9:9c:58:07:92:ab:f1:7a:
                    d1:50:b3:28:23:cd:48:bf:a8:16:fa:e4:49:55:f8:
                    a6:8b:23:97:15:8e:8f:b7:fb:b4:40:94:dc:e6:e5:
                    71:ee:7c:f2:16:24:27:f3:ea:55:4b:6b:f0:ba:62:
                    77:2e:e3:b9:b7:da:1a:e9:53:19:bd:5b:96:5e:67:
                    d2:9c:cc:cb:84:4a:e2:ed:88:dc:73:32:ac:93:3f:
                    ca:78:76:4e:30:34:26:63:e8:44:6a:7f:d0:fb:61:
                    b8:fe:5d:88:b8:5d:83:5a:31:33:8c:27:9d:0e:5b:
                    44:4e:3a:ec:3c:55:3a:58:bb:ba:f7:bc:e7:8e:5f:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:2F:29:4C:DA:CB:ED:8E:97:77:1C:70:ED:EE:53:89:43:D3:4E
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:5d:55:5b:b1:a2:e5:16:ff:ba:44:02:63:84:18:b0:5d:
         11:61:64:65:30:f5:cd:f8:e4:d2:9e:7c:02:d1:08:0b:20:7a:
         ea:74:8d:e3:be:5f:e0:0a:d5:83:24:97:7a:3a:b3:34:80:03:
         c2:cc:6f:66:57:f5:de:7d:dd:f1:15:37:04:96:8c:d9:2e:bd:
         d5:e9:03:45:fe:8e:60:b1:ba:66:70:34:ee:36:5d:6f:57:33:
         f9:28:3a:a7:71:9f:27:58:3b:d3:6e:6b:71:bb:9c:af:34:48:
         3d:d4:7b:48:a8:5a:81:51:df:74:8e:13:ff:0f:68:de:0b:42:
         fe:58:6e:e2:8d:ef:c7:d2:15:1c:e4:8b:ef:0a:5f:a5:75:24:
         f6:ff:13:e2:55:9d:15:37:90:1e:9e:cd:ef:b3:47:9b:73:2b:
         4e:12:12:e2:e4:b3:8a:e8:c2:26:d2:38:f2:3a:cb:29:89:b9:
         97:1d:da:a9:ba:3b:77:ed:08:21:9b:a2:02:dc:0e:61:22:28:
         a3:80:31:d7:f6:13:ed:92:2f:c4:5a:95:66:31:6b:7a:fb:c8:
         c7:e1:50:3a:bd:96:3e:a8:c9:12:dc:0b:44:44:de:b4:10:50:
         d6:ad:b5:72:65:e3:7f:da:b0:3c:f3:89:f4:b1:d6:66:c0:75:
         e3:bb:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 08:09:28 2026 by rpki-client