Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File:                     9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier:          00DpP7pJlK59iglvU14sNNhw+kAXKRosI1nEw5/hpt8=
Subject key identifier:   6B:A3:2F:0A:90:5D:53:D7:50:3C:76:DF:77:9B:B0:C6:1B:68:45:31
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       502C1C7B94E84989FFCB27E0CC2E482BDBA55455
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number:          02AD
Signing time:             Fri 15 May 2026 11:12:46 +0000
Manifest this update:     Fri 15 May 2026 11:07:46 +0000
Manifest next update:     Sat 16 May 2026 11:43:46 +0000
Files and hashes:         1: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=)
                          2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=)
                          3: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: wh7z8n2Vd7kRCAdw6ymW9V4no2/1ZW5BzdFQ9OzoW2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2c:1c:7b:94:e8:49:89:ff:cb:27:e0:cc:2e:48:2b:db:a5:54:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: May 15 11:07:46 2026 GMT
            Not After : May 16 11:43:46 2026 GMT
        Subject: CN=6BA32F0A905D53D7503C76DF779BB0C61B684531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:bd:ad:62:75:cc:7d:ff:2c:18:90:f6:82:
                    57:87:1b:ee:63:87:f8:b7:8c:b1:ec:a6:28:62:6e:
                    f2:a7:0b:04:65:15:a1:fa:83:10:a6:42:43:bf:26:
                    97:ee:08:14:57:b7:b7:d6:ba:4f:55:1d:18:4d:38:
                    7c:ef:a4:82:80:65:c5:73:80:1a:96:d6:15:32:90:
                    c6:d5:94:00:99:d0:15:ea:b0:95:2d:c5:cd:4c:6f:
                    57:99:9a:2d:af:bf:fe:02:23:ad:b9:12:1a:f7:b5:
                    34:6c:c3:29:13:18:62:90:3d:32:0a:bf:8a:0a:85:
                    32:dd:ac:7b:c5:04:f4:89:30:d6:b3:53:b0:6e:bd:
                    e6:69:78:9f:0c:6c:8e:81:58:99:44:58:ef:bc:e0:
                    66:2c:fd:7f:a0:b7:43:f0:bf:d5:f9:d7:7f:69:54:
                    77:b2:7a:d5:51:a7:6c:36:af:db:15:ff:fd:fb:db:
                    ab:83:6c:a0:73:54:c3:c3:a8:75:81:97:b6:5d:3c:
                    5a:3a:b0:25:c6:7d:cb:04:50:49:4e:bf:72:7a:58:
                    1f:78:29:99:9c:a4:fd:2e:5b:3c:d3:1a:17:fe:6c:
                    fe:95:d4:ef:3f:30:aa:52:d6:5f:38:ff:0d:4e:3d:
                    88:2c:39:0d:b9:b6:be:c5:18:3f:c0:10:cf:ee:6b:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A3:2F:0A:90:5D:53:D7:50:3C:76:DF:77:9B:B0:C6:1B:68:45:31
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:87:d8:bd:dd:9b:84:9d:d3:67:95:37:ab:52:04:51:cf:1c:
         41:a8:95:e8:34:e5:ff:05:aa:d4:a4:21:a6:d9:03:ab:fc:65:
         a7:e0:2d:5c:9a:f8:77:c3:bd:1d:ab:72:0b:e3:24:6e:4d:da:
         06:83:e4:aa:27:3d:58:e4:03:90:cb:44:9a:3e:30:18:04:c7:
         e1:8f:af:d7:50:95:8e:49:74:9c:1c:f4:25:b2:f3:87:be:c5:
         e0:95:ad:cd:2e:79:7e:d8:a6:de:5f:85:f2:27:1d:ec:99:3d:
         96:5c:e9:bd:2e:88:82:5c:bf:49:8a:17:05:75:eb:d3:f4:37:
         de:bd:af:f8:72:a4:9d:aa:02:40:20:c4:4a:10:5a:58:50:be:
         7f:58:67:d0:fa:d8:2d:20:9c:4c:f2:fb:42:81:7c:bc:a4:d9:
         b2:8f:9e:00:9f:21:b2:95:e7:fa:b0:00:c3:8b:71:e6:f2:a8:
         18:13:67:ad:a5:12:6c:d2:1d:8d:83:29:be:e1:8f:88:b3:56:
         79:09:bf:7c:41:73:58:ad:64:6c:f8:9c:55:b8:e2:4f:72:3f:
         cb:df:f3:dc:38:bb:56:ff:fe:2d:df:97:d2:ce:9d:1b:1d:02:
         40:d3:be:a6:b0:33:ed:03:9a:70:1f:7e:d9:23:58:c0:93:54:
         c6:ed:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:03:04 2026 by rpki-client