Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          3cMGGx7+lGa1lVwALAeA2iwZsHeLudwPdUZaYbUrs0M=
Subject key identifier:   DA:5A:A7:AF:0F:80:CA:48:66:DF:F9:2E:CC:F8:C1:00:CC:DA:B6:D4
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       7C7A115AE563BC05FCA8BAE33BF2FD6D6D6C4E8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0337
Signing time:             Sat 23 May 2026 23:36:53 +0000
Manifest this update:     Sat 23 May 2026 23:31:53 +0000
Manifest next update:     Sun 24 May 2026 23:49:53 +0000
Files and hashes:         1: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=)
                          2: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=)
                          3: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=)
                          4: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=)
                          5: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: Op/BPHI9wXNnZcnGbT5pc8VeHKfLwTkcIobPr0qk/fs=)
                          6: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=)
                          7: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7a:11:5a:e5:63:bc:05:fc:a8:ba:e3:3b:f2:fd:6d:6d:6c:4e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: May 23 23:31:53 2026 GMT
            Not After : May 24 23:49:53 2026 GMT
        Subject: CN=DA5AA7AF0F80CA4866DFF92ECCF8C100CCDAB6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:6c:95:ec:25:66:75:5b:93:84:d5:27:ac:
                    f7:4e:23:29:49:07:38:a0:75:52:05:90:ba:c0:65:
                    79:3d:c6:62:06:94:09:4a:8d:f7:b1:58:60:e8:72:
                    26:21:94:6c:96:ee:eb:9d:13:f2:70:8f:dd:14:41:
                    66:6f:cf:37:26:a7:67:8d:d3:90:26:dd:c2:e6:6e:
                    24:70:d5:1d:3e:a8:0f:5c:67:aa:28:46:99:2b:7c:
                    c5:c8:9c:54:25:0f:a3:a7:3f:47:8e:b9:d0:16:20:
                    59:55:c8:35:df:83:fc:ae:29:39:9f:3c:9e:e9:86:
                    0b:22:5d:69:16:14:88:1a:2b:16:3a:38:5d:30:2c:
                    85:a3:6c:51:34:5f:14:df:07:0f:6a:10:c5:c0:b6:
                    69:b3:57:63:cd:15:a5:ce:c2:bf:8a:14:5f:34:fe:
                    6b:7d:3c:c0:e9:16:e1:a3:ae:35:96:71:9b:00:ea:
                    6a:2e:0d:f9:38:f3:85:64:18:7c:01:1b:94:1a:8b:
                    d5:ab:7b:ff:f3:ce:7b:ce:25:c7:2b:cf:0a:81:47:
                    f7:37:53:75:08:87:0e:91:48:16:28:82:49:b1:8a:
                    f6:37:95:8e:c1:29:76:8e:b0:e4:1a:99:35:b4:38:
                    3c:cf:f3:22:3d:81:6f:08:82:48:ef:38:a8:72:75:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5A:A7:AF:0F:80:CA:48:66:DF:F9:2E:CC:F8:C1:00:CC:DA:B6:D4
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d1:27:b0:c2:0b:d2:9e:72:85:87:44:dc:b3:ad:08:29:67:
         d9:71:48:49:68:10:e7:a6:10:88:7c:f6:07:a0:62:0c:ed:2d:
         de:dd:84:1d:53:1b:73:26:c3:ce:c8:7b:d5:f3:ac:3c:ff:ea:
         2b:97:14:3d:6a:26:90:df:54:b7:22:d3:5a:ac:65:73:0d:9b:
         5c:33:37:af:bd:f6:62:4d:4c:ec:10:89:98:b8:b6:9f:fb:9b:
         ff:da:de:63:08:ca:79:cf:ce:9f:36:b9:13:b0:1c:b1:ff:59:
         9b:9d:ad:2f:ee:7c:be:41:c4:21:4e:07:ac:89:8f:bf:b4:7c:
         10:97:a2:6d:55:be:f5:8d:a8:f8:6e:f7:20:58:a7:4c:0f:6c:
         2e:bf:95:bf:0a:48:88:87:8f:ce:67:ee:a3:0f:52:5e:7e:be:
         51:4f:9c:45:1e:98:9b:f1:bc:f1:ec:1b:8d:41:fa:86:31:02:
         fe:d2:5a:0f:d6:7d:af:75:8e:42:0d:51:9b:3c:f8:02:fd:6f:
         f2:cd:f4:7a:1e:7d:c6:0b:1a:7d:2a:8e:6b:00:cd:fc:21:d4:
         64:0f:44:df:27:b1:9e:37:49:ce:ca:02:c6:a0:8c:69:7b:c9:
         87:33:c7:99:c5:c9:33:d8:74:ff:5f:0b:14:39:f1:3a:a9:c2:
         bc:0c:4c:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfHoRWuVjvAX8qLrjO/L9bW1sTo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz
ODZGQ0FEMTAeFw0yNjA1MjMyMzMxNTNaFw0yNjA1MjQyMzQ5NTNaMDMxMTAvBgNV
BAMTKERBNUFBN0FGMEY4MENBNDg2NkRGRjkyRUNDRjhDMTAwQ0NEQUI2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwmyV7CVmdVuThNUnrPdOIylJ
BzigdVIFkLrAZXk9xmIGlAlKjfexWGDociYhlGyW7uudE/Jwj90UQWZvzzcmp2eN
05Am3cLmbiRw1R0+qA9cZ6ooRpkrfMXInFQlD6OnP0eOudAWIFlVyDXfg/yuKTmf
PJ7phgsiXWkWFIgaKxY6OF0wLIWjbFE0XxTfBw9qEMXAtmmzV2PNFaXOwr+KFF80
/mt9PMDpFuGjrjWWcZsA6mouDfk484VkGHwBG5Qai9Wre//zznvOJccrzwqBR/c3
U3UIhw6RSBYogkmxivY3lY7BKXaOsOQamTW0ODzP8yI9gW8IgkjvOKhydXRRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2lqnrw+Aykhm3/kuzPjBAMzattQwHwYDVR0j
BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV
Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1
NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hVZ3gvMC8y
OTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARtEnsMIL0p5yhYdE3LOtCCln2XFISWgQ56YQiHz2B6BiDO0t3t2EHVMbcybD
zsh71fOsPP/qK5cUPWomkN9UtyLTWqxlcw2bXDM3r732Yk1M7BCJmLi2n/ub/9re
YwjKec/Onza5E7Acsf9Zm52tL+58vkHEIU4HrImPv7R8EJeibVW+9Y2o+G73IFin
TA9sLr+VvwpIiIePzmfuow9SXn6+UU+cRR6Ym/G88ewbjUH6hjEC/tJaD9Z9r3WO
Qg1Rmzz4Av1v8s30eh59xgsafSqOawDN/CHUZA9E3yexnjdJzsoCxqCMaXvJhzPH
mcXJM9h0/18LFDnxOqnCvAxMsg==
-----END CERTIFICATE-----
Generated at Sun May 24 14:18:18 2026 by rpki-client