Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
File:                     296B5A42104756A14E2651E7EAC81D02EA0F7531.mft (raw, json)
Hash identifier:          WLyfGn3EJhLLLGnGWmJFb+AgIdw0o9QauanOaAdcntc=
Subject key identifier:   D8:AE:56:BC:D9:8E:7F:B6:E7:80:F7:AB:75:4C:52:50:E0:AF:48:9F
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       49137F7F8976B2368A1C255A472054BFE6C81457
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
Manifest number:          03DA
Signing time:             Wed 08 Apr 2026 01:37:22 +0000
Manifest this update:     Wed 08 Apr 2026 01:32:22 +0000
Manifest next update:     Thu 09 Apr 2026 01:54:22 +0000
Files and hashes:         1: 3138312e3232352e3135392e302f32342d3234203d3e20323730363930.roa (hash: p5rOF2YH6a4Q8CKvCIkF9tDTYltPhADMfTMYJrowGak=)
                          2: 3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (hash: EpOMEUmUld0qqBrmaSr+kQCzDIYoGvYL0Ul22h7pbL8=)
                          3: 3139302e3132302e33352e302f32342d3234203d3e20323730363930.roa (hash: 3L6gNV1+7rdEvjCJoBmUr5ypOPk98NdVUfDg1hMB0uo=)
                          4: 3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (hash: ZuTHE31VjsGhzrygc2fx+ihwfa81Nr30uqaxbUWtX9w=)
                          5: 3138312e3232352e3135372e302f32342d3234203d3e20323730363930.roa (hash: aLoLHNevijtCvwcQ4oVctLfeIATa9ZSRy2jdKTX4iIA=)
                          6: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (hash: h55W5fz2xG80KATtb5VLUwUl3Zhx+paUFG8IgMf3Fdk=)
                          7: 296B5A42104756A14E2651E7EAC81D02EA0F7531.crl (hash: p4SANb0kNyOXkZkU2Pg5ku+D19j/YSl74vM6uwSY9C8=)
                          8: 3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (hash: VH68N7fjVvpj4gQDPqnink88r+X9xalDoNm+b02XgTU=)
                          9: 3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (hash: ULi4FYYWXFlCDZDpBCYZVSTISsenxy/YJAuvKwr9m8g=)
                          10: 3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (hash: MTXzRzx9eWPQGuMrvp9aHbj6hANaYRgh1dxgQCA7+2U=)
                          11: 3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (hash: gwfbQtvZPw+lHpqSQB/2PtztyzWhC+GVEenvJssP4iY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:7f:7f:89:76:b2:36:8a:1c:25:5a:47:20:54:bf:e6:c8:14:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Apr  8 01:32:22 2026 GMT
            Not After : Apr  9 01:54:22 2026 GMT
        Subject: CN=D8AE56BCD98E7FB6E780F7AB754C5250E0AF489F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:a9:71:56:32:37:f1:19:8d:bc:cf:3d:fa:
                    0b:3c:3e:89:46:d0:9e:67:af:8e:75:da:c2:13:3d:
                    76:78:4f:a9:0b:0d:e2:67:3e:82:8e:77:b1:7e:99:
                    39:2c:fd:f8:ed:8f:db:b6:12:77:93:07:98:24:41:
                    f0:f4:e9:20:a8:8a:10:19:c0:39:b0:22:39:12:7a:
                    3f:30:ab:1a:f4:b3:df:81:9c:48:7c:05:c5:a6:84:
                    04:7b:72:17:43:57:8e:35:44:71:25:08:37:9a:04:
                    c3:6a:d5:c1:dd:8d:85:00:45:3c:45:36:d2:d5:82:
                    f3:a3:ad:af:c6:fa:ee:1f:8c:7c:c5:93:f0:22:79:
                    e7:a1:02:88:af:5e:09:f0:d5:c0:cc:e5:d0:be:f3:
                    c1:f6:97:e4:9d:ac:70:c0:0f:20:9c:47:65:67:b6:
                    c1:c8:b9:7b:e4:e8:3e:47:4c:b8:83:4a:a0:ae:42:
                    99:91:9a:e8:aa:b3:2d:07:d9:08:b0:78:38:2b:c1:
                    09:47:ae:ac:dc:2a:8b:eb:19:9e:12:db:3b:42:7a:
                    dd:95:3d:55:30:c3:cc:bf:2c:0b:b5:db:32:20:90:
                    3f:8f:b1:0e:33:d5:52:68:50:07:75:dc:53:ce:cf:
                    fe:ef:29:19:80:f0:e2:4c:84:d9:6b:b0:7c:8c:82:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:56:BC:D9:8E:7F:B6:E7:80:F7:AB:75:4C:52:50:E0:AF:48:9F
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:98:17:0d:49:36:5d:10:b4:3b:d3:2c:b2:e7:80:ea:53:23:
         90:e4:c1:3c:37:bc:cd:98:f8:bd:ef:58:81:f4:97:c4:bf:e0:
         34:c1:25:bb:f1:60:72:c3:fe:cb:85:f6:1f:0d:4a:9e:74:a2:
         a3:aa:c5:61:20:2a:3c:42:52:f8:e0:d1:87:d1:d6:1d:40:e8:
         c6:fd:d5:7e:8a:54:da:57:88:dc:21:32:e3:1d:21:15:65:99:
         a4:2b:21:95:ad:d5:c7:2d:c5:ec:63:ed:e4:05:0f:b7:1d:b4:
         93:ec:38:e7:a9:f3:6c:52:af:93:75:ec:ed:4f:77:c0:6e:c7:
         3f:8d:f8:fb:b5:e3:64:43:29:0d:a3:f1:34:3e:f0:05:ac:9b:
         1c:3c:ba:3d:0e:58:b4:10:87:20:12:fe:9e:b8:9c:b0:2a:86:
         69:3a:93:2a:c3:59:3a:85:10:bc:4a:be:25:90:f0:7c:26:21:
         b4:47:a5:75:cf:6b:c5:44:be:dd:b3:10:a2:4f:a5:1d:9d:3c:
         24:71:c3:33:0d:7e:8a:01:89:97:f1:fb:a0:3d:72:94:eb:16:
         96:c8:5f:41:6e:4e:e9:8b:01:25:f2:ae:e8:ec:e7:ac:f3:81:
         26:3a:96:ea:91:c5:42:bd:1d:1e:96:16:89:d2:4c:db:a9:2b:
         70:e2:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:04:57 2026 by rpki-client