Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          DntEzewjeGHaoFak22tx79ErnDP18CVFAYuEw3EFoZY=
Subject key identifier:   3C:F4:54:3B:DF:C2:CB:81:48:78:08:FF:00:33:4C:97:EA:3C:46:D0
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       56332FBDD7C6E02F224C88CF649337AC84D937CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0389
Signing time:             Fri 24 Jul 2026 14:19:46 +0000
Manifest this update:     Fri 24 Jul 2026 14:14:46 +0000
Manifest next update:     Sat 25 Jul 2026 15:17:46 +0000
Files and hashes:         1: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 1ZbPlI5v57rYUaVQi21wyq+sIAw7vLo8snzV7zFZc9g=)
                          2: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: /mhfetzQio/E/qnhQ9kuqb/6RsmTfwL8dwBK4dlPe6E=)
                          3: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: 7KNGGn/BHmAvq1tjdyOQD/Hc7ecYI8H5af+AD+SpaSc=)
                          4: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: sWnFbadnpGgGV2z+3TDXaFuPH753nPbklRf5SvQpCVw=)
                          5: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: bLJCezHUciICKBSR+r7VuTqFXf1SEYOpnxLjF3fc66M=)
                          6: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: W2VojqXeRjNqg1ykoK5IEvP5VmTxgcMDzD2JEUyvv/s=)
                          7: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: 4Fbve+UwbgeUI6ca5uR09Eyf6sZ8PDDD5/ZPNxmaCzg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:33:2f:bd:d7:c6:e0:2f:22:4c:88:cf:64:93:37:ac:84:d9:37:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Jul 24 14:14:46 2026 GMT
            Not After : Jul 25 15:17:46 2026 GMT
        Subject: CN=3CF4543BDFC2CB81487808FF00334C97EA3C46D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:93:27:fa:91:7f:0b:f2:e5:b2:f9:e7:68:
                    b1:f0:ec:9d:f3:09:87:2b:23:bb:ad:35:15:39:15:
                    cf:f6:52:dd:3c:a6:4e:a7:77:60:5e:92:50:7a:fa:
                    28:a5:52:74:22:5a:4a:1a:ae:63:fd:0d:60:1d:7e:
                    22:0b:85:f0:b6:c2:5a:49:3b:c0:60:50:36:37:1c:
                    07:2e:f4:38:b3:cc:cf:bf:83:f9:30:6a:14:8b:dd:
                    00:8c:3c:56:06:d1:c0:9c:18:04:1a:fc:73:b0:a7:
                    d7:98:c0:48:f8:de:ed:82:1c:f2:c1:d1:e6:e5:11:
                    14:d2:2a:c8:86:b7:2d:dc:7c:a8:5e:9e:36:d1:36:
                    e2:aa:5b:be:07:ac:74:fb:b7:c4:12:67:10:b9:5b:
                    2a:13:09:68:27:b1:6a:8a:6e:9a:40:9e:b1:41:35:
                    8f:ef:19:c8:86:ec:9b:40:45:bb:41:66:79:d8:8e:
                    df:a2:73:48:b4:be:de:c8:6c:1b:19:3b:cd:04:49:
                    14:88:b3:c6:ee:b6:41:ad:19:76:b9:b6:be:a5:f7:
                    1e:01:82:12:7f:10:41:0f:8d:5c:4e:4d:15:7a:f1:
                    3d:75:be:75:6e:bc:2b:ea:7b:0e:a7:3f:b7:d2:b1:
                    03:62:7e:15:9e:e6:33:05:e5:c2:7b:7f:f0:4f:6f:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F4:54:3B:DF:C2:CB:81:48:78:08:FF:00:33:4C:97:EA:3C:46:D0
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e2:2e:a9:7b:fc:a6:92:68:e1:2e:3a:63:0f:0e:36:69:5e:
         89:be:4c:d8:ed:ad:a0:a6:bf:d3:69:80:cc:be:4f:72:7b:98:
         09:89:5d:1d:17:a8:24:ec:a9:d4:2a:ed:83:1f:7c:60:7b:3e:
         09:ff:19:c5:0a:0b:53:c8:92:a4:0f:38:14:69:f5:78:5e:fa:
         62:1c:51:71:c8:62:ad:4e:4f:ce:7a:6a:69:56:38:41:02:e2:
         dd:7e:4a:37:e0:ad:25:47:10:36:90:88:db:5b:ac:9a:ca:76:
         f9:22:db:b0:c6:d0:01:49:ad:37:5e:1e:cf:34:ed:27:c1:87:
         9c:d1:93:21:f3:cb:c2:38:1a:4b:9f:ff:3b:96:06:6a:b6:4b:
         16:32:36:6f:0c:f1:df:de:60:38:73:40:73:84:0c:0e:a6:f6:
         00:50:47:0b:1e:04:a2:43:03:22:ac:60:aa:1b:18:19:6b:ba:
         a6:4e:a0:4c:82:b8:1b:24:ab:f0:96:68:93:97:af:19:12:a8:
         8a:12:da:3e:cd:c0:cd:c2:dc:ab:2c:b0:c9:c9:64:9d:b7:53:
         02:f4:de:50:b0:65:da:54:52:b3:c4:0a:21:2e:d9:01:ff:7d:
         1a:86:33:6e:19:7c:67:85:a5:ad:e6:bf:a1:34:be:a3:85:5c:
         b6:e2:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:33:51 2026 by rpki-client