Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          KOpdhR7pcRL+UviVMBEVbj1a1Bbi3QR7Lw4lIqtgxCc=
Subject key identifier:   AF:AB:1D:88:5A:70:DF:79:A5:B6:8E:A5:23:1C:4C:29:AA:BC:B7:41
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       4837EC24308650551CEAC9A2C622F660BF8DA527
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0373
Signing time:             Wed 08 Jul 2026 06:40:46 +0000
Manifest this update:     Wed 08 Jul 2026 06:35:46 +0000
Manifest next update:     Thu 09 Jul 2026 09:32:46 +0000
Files and hashes:         1: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: +8HTiaFO1tz0XMqjB3QOh+7oFgjSSt7I47V8xxob8mE=)
                          2: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=)
                          3: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=)
                          4: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=)
                          5: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=)
                          6: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=)
                          7: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:37:ec:24:30:86:50:55:1c:ea:c9:a2:c6:22:f6:60:bf:8d:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jul  8 06:35:46 2026 GMT
            Not After : Jul  9 09:32:46 2026 GMT
        Subject: CN=AFAB1D885A70DF79A5B68EA5231C4C29AABCB741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:c6:15:af:5b:eb:bd:3d:82:39:16:1b:d1:
                    f8:60:a2:8a:f9:15:6e:cb:69:e6:50:00:a6:64:a0:
                    37:60:b1:80:b8:d2:67:bc:02:92:60:99:21:6e:6a:
                    f9:5e:29:b8:26:fb:e9:12:fb:48:3d:85:0d:49:8b:
                    bd:19:ee:83:25:c1:3f:61:2c:19:2f:6d:47:f8:dd:
                    34:21:25:df:2a:5c:b6:1a:92:81:bd:2a:3b:9f:41:
                    3b:ef:a8:c7:f5:4b:42:d0:37:2f:be:e3:e9:94:ce:
                    e6:71:b7:03:ea:7c:c8:77:b3:52:1b:b9:9a:48:74:
                    08:ac:e5:8b:ab:db:8e:93:1c:d8:07:6a:75:89:d2:
                    ca:fa:23:97:64:42:89:69:7f:72:a5:a0:2f:b9:61:
                    25:b8:ea:d3:4c:12:4b:8d:67:ab:50:fb:43:fc:ee:
                    0d:38:a6:00:1d:2b:d8:1d:b5:be:40:c1:00:94:42:
                    6f:c6:37:8c:c9:f4:4e:db:31:a9:91:56:5b:6d:de:
                    a0:e8:56:7c:1f:14:dd:ae:d0:40:3f:32:09:f2:d6:
                    8a:1f:d2:63:ea:6d:0a:6d:d0:e5:f5:ad:bc:fc:6b:
                    a1:63:c1:d3:ac:e3:d1:c0:45:17:16:1e:77:a8:e6:
                    77:3e:52:fb:9a:7b:d9:f3:66:93:24:f5:be:d0:0a:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:1D:88:5A:70:DF:79:A5:B6:8E:A5:23:1C:4C:29:AA:BC:B7:41
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:31:c8:95:40:e7:94:86:73:57:ae:3e:a1:23:3a:ce:ff:
         08:9a:15:43:2f:c8:35:6a:0b:7a:1d:b5:bf:bb:a8:18:42:ec:
         53:66:30:51:fb:d2:7e:73:72:88:e4:69:08:dc:a0:9a:fb:31:
         ec:78:5a:32:c8:b6:34:72:03:44:7c:d5:77:3f:bf:fc:d1:72:
         70:01:99:ef:61:09:01:2c:f8:c4:9f:5b:b1:cc:2a:f4:23:63:
         7f:5a:aa:4a:a3:7d:8d:75:79:ee:3f:ef:20:d8:03:1e:d7:08:
         ff:a4:c4:f5:a4:cf:93:99:b1:37:96:2e:87:47:b6:28:7b:57:
         49:98:21:c2:ef:72:f1:dd:7e:b3:81:b2:ef:d4:f8:f7:bd:41:
         98:60:ad:83:69:69:59:46:df:0a:a1:5c:96:93:24:22:84:1a:
         17:33:a4:d9:4d:73:f3:71:42:90:ac:9a:38:eb:16:06:14:f1:
         69:2b:53:b3:e2:4e:cb:b6:2e:f8:9a:00:64:83:4e:37:90:74:
         d2:9e:67:94:af:61:2e:0c:f0:27:f6:fc:d6:16:8a:1c:2d:06:
         50:90:81:46:ed:e5:be:6a:3e:9c:99:ce:1d:a5:48:1d:bd:87:
         c7:7a:f1:20:5d:b6:6e:61:1b:b3:9c:22:93:fa:88:f0:a1:4e:
         51:17:6a:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSDfsJDCGUFUc6smixiL2YL+NpScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz
ODZGQ0FEMTAeFw0yNjA3MDgwNjM1NDZaFw0yNjA3MDkwOTMyNDZaMDMxMTAvBgNV
BAMTKEFGQUIxRDg4NUE3MERGNzlBNUI2OEVBNTIzMUM0QzI5QUFCQ0I3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpYMYVr1vrvT2CORYb0fhgoor5
FW7LaeZQAKZkoDdgsYC40me8ApJgmSFuavleKbgm++kS+0g9hQ1Ji70Z7oMlwT9h
LBkvbUf43TQhJd8qXLYakoG9KjufQTvvqMf1S0LQNy++4+mUzuZxtwPqfMh3s1Ib
uZpIdAis5Yur246THNgHanWJ0sr6I5dkQolpf3KloC+5YSW46tNMEkuNZ6tQ+0P8
7g04pgAdK9gdtb5AwQCUQm/GN4zJ9E7bMamRVltt3qDoVnwfFN2u0EA/Mgny1oof
0mPqbQpt0OX1rbz8a6FjwdOs49HARRcWHneo5nc+Uvuae9nzZpMk9b7QCgERAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUr6sdiFpw33mlto6lIxxMKaq8t0EwHwYDVR0j
BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV
Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1
NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hVZ3gvMC8y
OTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwdMxyJVA55SGc1euPqEjOs7/CJoVQy/INWoLeh21v7uoGELsU2YwUfvSfnNy
iORpCNygmvsx7HhaMsi2NHIDRHzVdz+//NFycAGZ72EJASz4xJ9bscwq9CNjf1qq
SqN9jXV57j/vINgDHtcI/6TE9aTPk5mxN5Yuh0e2KHtXSZghwu9y8d1+s4Gy79T4
971BmGCtg2lpWUbfCqFclpMkIoQaFzOk2U1z83FCkKyaOOsWBhTxaStTs+JOy7Yu
+JoAZINON5B00p5nlK9hLgzwJ/b81haKHC0GUJCBRu3lvmo+nJnOHaVIHb2Hx3rx
IF22bmEbs5wik/qI8KFOURdqXw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:26 2026 by rpki-client