Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
File:                     099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft (raw, json)
Hash identifier:          T5iCqXmUiPhktf2E5Uu4deqctCJYzlWiNK0cTMLqTcg=
Subject key identifier:   5D:B7:73:E8:74:8C:FC:5B:C1:DE:0D:1D:F6:D4:B9:C4:D0:E4:5A:8A
Authority key identifier: 09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37
Certificate issuer:       /CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
Certificate serial:       213D2BB66CBC548DFB668EBFFA2673BD874CA80B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft
Manifest number:          03DA
Signing time:             Mon 19 Jan 2026 11:20:09 +0000
Manifest this update:     Mon 19 Jan 2026 11:15:09 +0000
Manifest next update:     Tue 20 Jan 2026 11:20:09 +0000
Files and hashes:         1: 323830343a313763383a3a2f33322d3335203d3e20323633323531.roa (hash: dLtgWFo3Ut4Jpy9K/rkuZ219OW32xVuCAPOdnOBe8+M=)
                          2: 099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl (hash: kxRgXWNfsN+UojEn1CNSPE7dHjhyg0rjUth5JbPSfwM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:2b:b6:6c:bc:54:8d:fb:66:8e:bf:fa:26:73:bd:87:4c:a8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099DF7CCFC5474CEBED5335C709CBFAE484FBA37
        Validity
            Not Before: Jan 19 11:15:09 2026 GMT
            Not After : Jan 20 11:20:09 2026 GMT
        Subject: CN=3082010A0282010100BF4D3F5424274D702FB0BD6A3278879038DC050D3C166974311B15129DFD23585937D53999F5B9D22A8E48FF02D2BBA68DAA2BCB46D93DCFC5776546E9FFA7367B0AB321A9792EB939DC783F1FB3B3CF6ACF61873ED841463D2ECF17549CAD510BA78ADD63C1463D9000FD6BAB38B3C46245A7D22380B2E97DFE522D0DE87374F2DECF6C07D511B00C6132F52DEB36041129D3834A89653B5EB3D42FE4ED9C060A3EC265BAF381B9369CDCB99B6E06336FE2E270F70832B9F728E5CCC27F9AD761DB72888D146A282308E357F429B4F798F8AE45EC3F716B36BB8D31C0A57FC1D7C8F616CD7B3B1B45E30C298DD0C5FE1BFDE5DC6CC92A13D7708DF270CCBC730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:3f:54:24:27:4d:70:2f:b0:bd:6a:32:78:
                    87:90:38:dc:05:0d:3c:16:69:74:31:1b:15:12:9d:
                    fd:23:58:59:37:d5:39:99:f5:b9:d2:2a:8e:48:ff:
                    02:d2:bb:a6:8d:aa:2b:cb:46:d9:3d:cf:c5:77:65:
                    46:e9:ff:a7:36:7b:0a:b3:21:a9:79:2e:b9:39:dc:
                    78:3f:1f:b3:b3:cf:6a:cf:61:87:3e:d8:41:46:3d:
                    2e:cf:17:54:9c:ad:51:0b:a7:8a:dd:63:c1:46:3d:
                    90:00:fd:6b:ab:38:b3:c4:62:45:a7:d2:23:80:b2:
                    e9:7d:fe:52:2d:0d:e8:73:74:f2:de:cf:6c:07:d5:
                    11:b0:0c:61:32:f5:2d:eb:36:04:11:29:d3:83:4a:
                    89:65:3b:5e:b3:d4:2f:e4:ed:9c:06:0a:3e:c2:65:
                    ba:f3:81:b9:36:9c:dc:b9:9b:6e:06:33:6f:e2:e2:
                    70:f7:08:32:b9:f7:28:e5:cc:c2:7f:9a:d7:61:db:
                    72:88:8d:14:6a:28:23:08:e3:57:f4:29:b4:f7:98:
                    f8:ae:45:ec:3f:71:6b:36:bb:8d:31:c0:a5:7f:c1:
                    d7:c8:f6:16:cd:7b:3b:1b:45:e3:0c:29:8d:d0:c5:
                    fe:1b:fd:e5:dc:6c:c9:2a:13:d7:70:8d:f2:70:cc:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:73:E8:74:8C:FC:5B:C1:DE:0D:1D:F6:D4:B9:C4:D0:E4:5A:8A
            X509v3 Authority Key Identifier:
                keyid:09:9D:F7:CC:FC:54:74:CE:BE:D5:33:5C:70:9C:BF:AE:48:4F:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cb2EoyNrUB2CmFP5xzvrSw9W4ApGERRYbsuJz88Z8eW/1/099DF7CCFC5474CEBED5335C709CBFAE484FBA37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:1f:20:a8:d0:fa:59:1e:c4:1c:04:ab:04:e7:b1:79:ac:fe:
         17:a3:cd:ee:bf:cc:64:d9:83:89:70:f9:8d:00:f8:20:7c:f4:
         2a:58:d0:96:d4:7f:c6:35:91:34:c6:d6:96:29:18:82:c4:e1:
         93:e5:b4:07:49:c3:5e:2c:4e:14:17:a9:ca:e8:88:59:bf:b0:
         58:70:55:82:ba:10:df:d1:76:3d:b8:91:9d:13:93:fe:11:14:
         21:5b:89:67:ce:a7:d4:85:7b:a3:66:67:25:53:f8:76:3f:da:
         b2:e5:13:4f:7e:73:93:ec:af:48:ee:8a:9e:82:c4:b8:df:f1:
         34:6e:c6:95:98:e0:7b:75:9c:1a:bf:1d:bf:86:06:ec:eb:31:
         79:87:b2:07:b1:62:1a:f8:4e:10:3e:4d:f6:d1:56:fb:7b:ac:
         6f:c9:19:38:ca:00:c6:7f:a3:19:80:08:3a:af:83:84:57:b2:
         b7:fe:6a:17:42:a5:eb:be:1b:0f:b5:bd:33:2b:41:75:26:6a:
         2d:8f:8d:82:ca:a4:da:11:76:c6:c4:a4:06:0a:a0:3a:3b:81:
         8c:26:25:30:0e:49:6c:62:85:9f:6e:7a:07:86:67:05:cc:8e:
         2c:2f:60:f5:62:48:bd:da:7c:e3:88:5f:d7:32:90:32:14:2c:
         f7:32:ac:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 8 16:39:05 2026 by rpki-client