Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft
File:                     BFB702449CB10F3DC44E7121930F9410743965D8.mft (raw, json)
Hash identifier:          Eqi32IL+OIFOpFqJ79uDsoeo9lp6J2FPEX2vyLwHNsw=
Subject key identifier:   33:63:EF:3E:C2:78:EE:14:41:81:46:3D:C0:CD:FC:DB:7C:11:49:5F
Authority key identifier: BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8
Certificate issuer:       /CN=BFB702449CB10F3DC44E7121930F9410743965D8
Certificate serial:       3A803A69A8214C55F1B2F6BE7590175E2C23EA3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft
Manifest number:          1B
Signing time:             Thu 19 Mar 2026 02:02:54 +0000
Manifest this update:     Thu 19 Mar 2026 01:57:54 +0000
Manifest next update:     Fri 20 Mar 2026 05:14:54 +0000
Files and hashes:         1: 323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (hash: hjXD43xsRRSrAt7rE4XT6hQODpkNUh+cNRANo5DJ34w=)
                          2: BFB702449CB10F3DC44E7121930F9410743965D8.crl (hash: zA5eUgpCbV4GzUi1G0d1O0k9a2d23mNDWuV7DwBHuFI=)
                          3: 3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (hash: ywjZoh0HrppMCg80HGonS6AHpJJimOXOO0uvBvlf4oQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:80:3a:69:a8:21:4c:55:f1:b2:f6:be:75:90:17:5e:2c:23:ea:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB702449CB10F3DC44E7121930F9410743965D8
        Validity
            Not Before: Mar 19 01:57:54 2026 GMT
            Not After : Mar 20 05:14:54 2026 GMT
        Subject: CN=3363EF3EC278EE144181463DC0CDFCDB7C11495F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:50:c2:2a:37:bb:2b:35:3a:f9:0c:77:04:
                    cb:86:cc:d3:23:6d:95:48:51:6e:b1:44:f8:4e:17:
                    90:27:d9:93:c7:2b:a4:0d:1b:38:18:4b:7c:7a:e5:
                    5b:e3:2d:c5:d5:db:6c:7d:a8:10:3d:88:68:3c:7c:
                    47:4f:22:dc:5e:1d:b4:1f:1f:c2:47:21:1f:0e:e2:
                    e8:b6:e1:36:22:e1:68:fa:10:26:52:91:6a:45:84:
                    49:6e:16:89:ae:b3:fb:29:f1:74:2b:95:bc:df:f5:
                    f0:c8:60:ee:c2:db:40:e2:b4:08:9f:7a:a0:64:b0:
                    37:05:ac:9a:95:d1:78:d3:8a:93:91:d2:b2:51:ae:
                    19:41:71:7c:a7:19:ef:70:54:90:4b:fe:5d:93:3f:
                    74:ba:ec:86:93:5e:b7:f3:3a:c3:94:ad:c6:56:56:
                    c3:f6:83:ce:97:37:e6:cc:f5:48:90:31:06:80:bb:
                    71:a7:71:9b:76:80:97:d3:73:34:ed:7f:57:b6:21:
                    b7:50:c0:ad:f7:3b:a7:0a:b3:72:83:57:e7:f7:5b:
                    c3:e3:8a:25:9a:a7:d2:af:6b:9c:72:34:7a:20:ef:
                    e7:78:dc:79:4e:6e:82:c0:c0:83:1c:7f:57:cf:b4:
                    76:a2:5e:e0:31:84:e3:be:70:46:44:21:16:47:40:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:63:EF:3E:C2:78:EE:14:41:81:46:3D:C0:CD:FC:DB:7C:11:49:5F
            X509v3 Authority Key Identifier:
                keyid:BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:3d:ba:88:0f:66:c3:6d:ac:c7:bf:44:81:59:b0:f6:d6:
         58:dc:b1:4a:0a:cc:18:89:1f:10:af:31:94:81:37:b3:f0:e8:
         fc:af:50:2c:79:67:23:b1:ac:b5:ff:49:1e:92:95:fa:ac:1e:
         dc:6d:bf:f5:89:9b:dc:c8:95:bd:71:a8:6a:45:ea:dc:06:ff:
         c4:ad:9a:92:bd:0e:76:26:33:26:24:92:e7:d2:44:59:f7:93:
         33:fb:46:df:90:55:1d:b0:a2:ec:71:30:48:84:0d:5a:17:85:
         1d:55:6f:80:e4:6d:e2:b9:a0:b5:2f:b5:d5:05:24:56:e6:09:
         66:5b:04:6e:31:5a:5e:1e:b1:fe:b8:9d:1a:3b:d7:c6:76:54:
         ce:5d:04:d1:c9:d0:23:93:21:32:df:ee:52:6f:fb:a4:bb:fe:
         e4:d6:2b:3a:b4:cf:48:16:02:5a:b4:23:21:19:85:4d:23:6a:
         2d:7f:54:f6:09:04:30:b8:cb:10:db:d8:15:a4:3a:6d:dc:a7:
         30:74:8c:79:9b:99:18:33:3a:4b:0a:8b:f5:49:bc:9c:de:ab:
         ec:a2:2a:e2:0e:d7:21:6a:3a:a5:d4:6a:05:66:ac:73:38:e7:
         1a:71:de:ad:d2:e9:fc:1b:f5:d8:47:4b:76:db:de:70:0e:2e:
         02:92:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----