Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          qUue5rRjRGB1xnc2eIfH8gJatqhdvrWahK7XqsdakCY=
Subject key identifier:   B1:C4:05:2D:B0:5A:3B:C3:C2:75:A4:65:C2:20:F3:36:DB:F5:B8:E6
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       531ACE7B1118894F1DF2C746668272BF432F707F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          022B
Signing time:             Mon 03 Nov 2025 07:21:50 +0000
Manifest this update:     Mon 03 Nov 2025 07:16:50 +0000
Manifest next update:     Tue 04 Nov 2025 10:56:50 +0000
Files and hashes:         1: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: wzh+E5F7Rg6GQ0nWE72s+UNJGI6W8UksbBsN1V1M9Zg=)
                          2: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=)
                          3: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=)
                          4: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=)
                          5: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=)
                          6: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=)
                          7: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1a:ce:7b:11:18:89:4f:1d:f2:c7:46:66:82:72:bf:43:2f:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Nov  3 07:16:50 2025 GMT
            Not After : Nov  4 10:56:50 2025 GMT
        Subject: CN=B1C4052DB05A3BC3C275A465C220F336DBF5B8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:4b:cc:b3:9a:d3:1b:c1:8c:81:ea:90:3e:
                    67:b1:a9:f9:b3:ca:7b:a8:2d:2b:f4:5f:37:3b:4a:
                    90:65:4e:26:75:8e:9b:3f:30:f4:37:8e:ec:df:56:
                    80:6f:38:4a:ab:3e:92:0f:24:f5:f8:89:c7:7a:55:
                    1e:a1:bc:48:49:7f:5f:b9:6b:b5:ce:03:74:2e:a9:
                    19:eb:39:6d:1f:f1:2f:e1:85:6b:c4:7a:fc:65:ec:
                    56:a3:ab:3f:96:a5:d3:68:74:03:0b:cb:36:c2:86:
                    52:24:28:c1:b8:25:53:d5:8b:ce:44:b7:c6:03:af:
                    82:67:79:4c:4b:ae:31:92:41:fb:1c:fd:a9:cc:b9:
                    58:9c:ac:a2:1e:8a:86:19:d3:be:84:b1:23:df:d8:
                    c4:11:43:e6:8c:d7:cf:62:19:3d:f8:99:2a:b7:26:
                    eb:5f:c2:21:37:fc:53:08:ea:00:b7:a3:6a:aa:92:
                    3c:fb:77:a3:e9:8a:b3:f5:27:b5:b4:92:f3:25:ca:
                    b0:a5:54:84:26:74:92:37:6b:c8:04:2c:50:b4:df:
                    6c:be:da:22:b0:15:99:60:1a:ce:a0:40:f4:15:f0:
                    a9:16:41:31:0f:2c:28:76:40:e6:11:cf:8a:b7:c1:
                    ef:b2:47:57:1f:19:96:e1:c0:1a:2f:a7:3d:1b:cb:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C4:05:2D:B0:5A:3B:C3:C2:75:A4:65:C2:20:F3:36:DB:F5:B8:E6
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:3a:f9:bb:ec:0f:46:96:34:69:f1:41:28:08:86:10:b5:
         9a:13:a8:40:29:5c:ea:21:34:c2:6c:9b:ee:44:df:fa:13:67:
         24:f0:b7:20:1e:16:99:f7:79:17:21:0f:19:c6:f7:f9:59:27:
         6b:86:45:bb:14:9b:0b:6c:12:01:eb:2e:9a:cb:ca:2a:50:1b:
         5a:df:00:b3:29:1c:a8:8e:1b:2f:90:4c:38:c9:07:38:ca:b2:
         3e:67:04:7b:98:78:74:7c:b9:0d:a7:a3:f2:d3:5e:e9:bc:06:
         38:c6:14:e4:14:c8:ea:ff:c2:66:a4:3f:34:59:06:fc:88:81:
         4c:8a:65:33:18:c0:69:c1:8f:c0:28:23:1b:7f:2c:d4:b5:58:
         4b:1c:b9:36:b2:fc:87:69:78:31:6e:20:ec:9a:e2:ca:0f:17:
         0e:51:7f:6e:34:f9:30:ac:ae:fd:ff:db:fc:af:30:9a:cb:bd:
         15:9c:90:85:8f:e9:94:e8:ee:88:16:9f:fd:23:bd:ce:51:bd:
         8b:03:36:be:76:70:19:84:ce:d2:06:b3:22:53:c3:48:b5:41:
         db:c7:9d:2a:43:8b:ac:26:f3:85:71:1c:87:45:1f:14:2d:bf:
         5b:e7:7a:40:16:60:57:45:bb:29:b3:46:0a:2e:fb:6f:4c:7d:
         d3:bf:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:49 2025 by rpki-client