Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
File:                     2942F22000F3A7315703CF3B13100D76386FCAD1.mft (raw, json)
Hash identifier:          015N9rA8CBj+gTPITz3bo9p9YkcObLT4dYBsllxJDkM=
Subject key identifier:   32:45:0A:DD:23:8A:F5:61:33:F2:81:37:6B:20:6E:67:8D:0D:8B:F3
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       0CC67BA2F939E34CC00995479C2574AE7BEE9D48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
Manifest number:          0329
Signing time:             Wed 13 May 2026 09:06:53 +0000
Manifest this update:     Wed 13 May 2026 09:01:53 +0000
Manifest next update:     Thu 14 May 2026 12:48:53 +0000
Files and hashes:         1: 3139312e352e3232302e302f32322d3332203d3e203533323138.roa (hash: U9aEVaVfbCN4TWb4JyTorgv2xoRrXRGxv1uQWYpU+sM=)
                          2: 3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (hash: 5arLMvCsc280JhuRn9DGKcC5Do+QytmTiZqgSS31aVo=)
                          3: 2942F22000F3A7315703CF3B13100D76386FCAD1.crl (hash: P5QFw7RBfseR2a3d/TvIFSGxnBNOGpkAWe1zMLTMlCM=)
                          4: 3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (hash: +Akn/L1H09I4e3niGgqeQYFi/oJuhqEqLbE1F+LA0zI=)
                          5: 3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (hash: 3DMepOCJsB4RYYr4kz8XiRydllbiQu6BC/Dt9YVTrTI=)
                          6: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (hash: iBr1MiWYW/lwYBnPl9PjYIN0TqmORmziogOjdaousGo=)
                          7: 3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (hash: d3yAWyibARFUG+HZzby8Z4svUHtKG4r21e/DyYGWSoU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c6:7b:a2:f9:39:e3:4c:c0:09:95:47:9c:25:74:ae:7b:ee:9d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: May 13 09:01:53 2026 GMT
            Not After : May 14 12:48:53 2026 GMT
        Subject: CN=32450ADD238AF56133F281376B206E678D0D8BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:0b:78:f4:01:41:eb:75:3f:27:49:36:ab:
                    50:58:4a:cd:4f:2e:4b:c6:d9:f1:20:2a:32:e2:10:
                    f6:4a:11:50:01:f0:a1:28:2e:a1:69:d8:ec:5b:3b:
                    de:40:48:88:44:5f:d9:60:0a:26:69:5a:5d:88:8d:
                    c4:42:7e:4c:42:06:85:a0:36:d6:78:32:23:cc:34:
                    b1:f2:7a:47:a9:6a:30:c9:4d:58:74:8a:cc:c1:77:
                    f2:c1:dd:3b:ec:e2:11:af:db:6d:a2:26:21:ec:c9:
                    1a:3d:6f:4c:ce:ee:ec:01:80:25:49:75:7d:c7:1b:
                    87:10:6f:63:fb:55:fc:fb:dd:89:89:01:50:f7:bd:
                    00:91:a8:de:87:98:69:3d:4f:8e:b9:eb:0e:b3:2d:
                    46:c1:6f:cf:a3:bf:6c:cb:fe:93:52:0f:95:fb:ba:
                    73:3a:30:80:cf:50:4f:00:bb:05:a7:47:a8:41:30:
                    7c:48:40:1e:ee:98:05:94:32:08:51:27:47:32:4e:
                    03:fa:0f:a9:ce:69:0b:96:97:0f:17:05:eb:c0:29:
                    c9:4b:c4:13:32:ee:06:c8:9e:61:f8:fa:4c:43:13:
                    e2:20:6f:33:a7:46:ec:72:37:53:d0:0a:cb:d2:7d:
                    33:30:37:26:0f:fc:82:2d:6a:22:3d:0f:a9:e7:44:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:0A:DD:23:8A:F5:61:33:F2:81:37:6B:20:6E:67:8D:0D:8B:F3
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d7:3e:f7:88:46:99:6a:38:81:0c:59:6a:d7:b7:ea:a1:87:
         71:4f:8a:08:94:07:31:bf:85:a7:47:5e:51:9b:16:14:35:ab:
         af:91:bb:19:00:51:fa:95:70:f1:f4:44:03:1a:14:db:43:59:
         83:f5:46:80:d9:58:1d:12:c1:18:24:2e:b3:4c:44:c3:94:38:
         c5:8a:5f:da:62:ea:09:2e:3c:93:d3:38:89:87:0d:ab:ac:d9:
         63:87:56:a9:db:fa:e2:48:06:46:70:cd:6c:aa:9a:ed:46:45:
         e9:57:4f:44:b8:a6:7b:42:13:e9:05:65:e3:5f:91:7d:4f:b0:
         30:19:67:5c:4d:a2:2a:eb:bf:63:b1:21:3b:e7:99:af:a5:93:
         55:f1:ac:17:f5:f8:57:f9:00:fa:8f:d8:08:06:c6:e2:c1:93:
         ea:e7:ad:d1:f1:fc:d3:a6:5e:4e:c8:e5:4e:3e:6e:93:8a:7c:
         22:4f:b7:1e:b5:12:22:20:20:7b:50:8b:31:24:e1:35:7b:7e:
         50:89:99:22:f1:88:72:8f:e6:80:ee:76:05:e3:9d:dd:4c:af:
         57:87:d6:4d:83:6e:14:e1:51:a0:0e:3f:4a:be:c8:00:85:11:
         da:f1:54:4b:b8:71:b3:46:24:7a:54:fe:c3:f0:a8:32:73:d6:
         3f:af:bc:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDMZ7ovk540zACZVHnCV0rnvunUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0MkYyMjAwMEYzQTczMTU3MDNDRjNCMTMxMDBENzYz
ODZGQ0FEMTAeFw0yNjA1MTMwOTAxNTNaFw0yNjA1MTQxMjQ4NTNaMDMxMTAvBgNV
BAMTKDMyNDUwQUREMjM4QUY1NjEzM0YyODEzNzZCMjA2RTY3OEQwRDhCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQAt49AFB63U/J0k2q1BYSs1P
LkvG2fEgKjLiEPZKEVAB8KEoLqFp2OxbO95ASIhEX9lgCiZpWl2IjcRCfkxCBoWg
NtZ4MiPMNLHyekepajDJTVh0iszBd/LB3Tvs4hGv222iJiHsyRo9b0zO7uwBgCVJ
dX3HG4cQb2P7Vfz73YmJAVD3vQCRqN6HmGk9T4656w6zLUbBb8+jv2zL/pNSD5X7
unM6MIDPUE8AuwWnR6hBMHxIQB7umAWUMghRJ0cyTgP6D6nOaQuWlw8XBevAKclL
xBMy7gbInmH4+kxDE+IgbzOnRuxyN1PQCsvSfTMwNyYP/IItaiI9D6nnRLrFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMkUK3SOK9WEz8oE3ayBuZ40Ni/MwHwYDVR0j
BBgwFoAUKULyIADzpzFXA887ExANdjhvytEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hV
Z3gvMC8yOTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDJGMjIwMDBGM0E3MzE1
NzAzQ0YzQjEzMTAwRDc2Mzg2RkNBRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NVk5aFliZ2tvOEFYRkFibzZUUjIzWHRVdUFDUXdHODZVNGdkU0pZM3hVZ3gvMC8y
OTQyRjIyMDAwRjNBNzMxNTcwM0NGM0IxMzEwMEQ3NjM4NkZDQUQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWNc+94hGmWo4gQxZate36qGHcU+KCJQHMb+Fp0deUZsWFDWrr5G7GQBR+pVw
8fREAxoU20NZg/VGgNlYHRLBGCQus0xEw5Q4xYpf2mLqCS48k9M4iYcNq6zZY4dW
qdv64kgGRnDNbKqa7UZF6VdPRLime0IT6QVl41+RfU+wMBlnXE2iKuu/Y7EhO+eZ
r6WTVfGsF/X4V/kA+o/YCAbG4sGT6uet0fH806ZeTsjlTj5uk4p8Ik+3HrUSIiAg
e1CLMSThNXt+UImZIvGIco/mgO52BeOd3UyvV4fWTYNuFOFRoA4/Sr7IAIUR2vFU
S7hxs0YkelT+w/CoMnPWP6+8dw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:40:25 2026 by rpki-client