Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
File:                     CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json)
Hash identifier:          3kKfuUosGX2X3JzSQj0tbEacue9TsF/wCIs6kW328Fc=
Subject key identifier:   23:74:2C:19:50:50:6D:B1:DE:51:4E:B3:45:AD:C5:34:CC:6C:3B:06
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       3B50421C88AB5DD084C704649D1F52E9BCD49DB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
Manifest number:          03B9
Signing time:             Tue 17 Mar 2026 20:35:41 +0000
Manifest this update:     Tue 17 Mar 2026 20:30:41 +0000
Manifest next update:     Wed 18 Mar 2026 23:47:41 +0000
Files and hashes:         1: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=)
                          2: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=)
                          3: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: dat2rgozgXlNAR/R2BaU6NJJsGN1Ma5OnYO3muTs46Y=)
                          4: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:50:42:1c:88:ab:5d:d0:84:c7:04:64:9d:1f:52:e9:bc:d4:9d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Mar 17 20:30:41 2026 GMT
            Not After : Mar 18 23:47:41 2026 GMT
        Subject: CN=23742C1950506DB1DE514EB345ADC534CC6C3B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:3a:03:de:58:b7:78:ca:a3:1e:28:a2:9a:
                    c4:9c:9b:5c:bd:d7:06:18:8a:cc:69:bf:97:bb:e3:
                    2e:90:92:bd:56:7b:5a:c1:1e:bf:cd:58:a0:52:95:
                    f7:89:b0:9f:99:4f:31:d8:bc:6c:c9:46:19:72:9a:
                    1f:d2:4e:d7:86:a5:db:2f:5d:24:76:2a:af:91:74:
                    ba:7a:3e:57:7b:fb:d7:48:89:0a:dd:01:32:98:5e:
                    68:c2:27:b3:4c:7c:8c:b4:91:1c:cf:24:d2:28:3f:
                    4e:69:37:82:b8:45:a9:0e:96:a2:6e:af:a0:6e:92:
                    2e:78:4b:46:20:eb:52:bf:f6:1d:a7:be:0a:73:c3:
                    3b:e9:e5:ed:a7:c9:d0:9e:a7:2e:52:24:60:59:29:
                    cc:b4:ca:b5:e7:ce:60:75:c9:67:53:3e:78:01:2a:
                    32:9d:30:37:8f:4b:b6:f3:29:c8:9b:dc:9e:63:6a:
                    1f:88:af:52:c4:c2:dc:a0:04:3b:48:93:c6:49:f0:
                    f3:d5:b8:5c:cb:8d:e5:fd:e4:d2:74:0c:d7:6a:fc:
                    ce:9d:a3:5c:be:10:61:a0:99:5e:a7:39:66:34:5a:
                    f4:ce:ee:c2:7b:2c:73:60:0b:4a:38:3d:53:ad:0c:
                    48:0b:4a:de:37:8d:4f:b4:68:18:ca:a6:6b:3f:68:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:74:2C:19:50:50:6D:B1:DE:51:4E:B3:45:AD:C5:34:CC:6C:3B:06
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:70:6a:01:a3:52:d6:f3:39:c6:e2:af:1d:ae:14:4e:1b:
         f0:c3:30:77:a6:4f:b0:d5:20:c8:59:02:ff:dd:e8:52:1f:a3:
         49:28:19:85:8a:db:67:b7:dc:82:6c:6c:46:44:41:b6:63:be:
         b9:07:16:a5:96:a7:9c:13:66:2a:30:54:33:a3:88:83:d0:53:
         09:c2:55:58:5f:8d:c1:6d:f0:a9:d6:e9:67:e6:e3:0f:2a:61:
         ae:f5:2d:78:5a:8f:b3:e0:ee:cd:12:95:43:d8:cf:6e:bc:d4:
         2a:dd:55:c7:89:2f:57:36:17:56:86:a5:9c:fe:0e:e6:e9:bc:
         6c:02:d1:85:81:d8:e0:e3:f2:79:65:df:af:e0:bd:cd:06:78:
         e9:1e:30:33:e8:f3:48:2c:79:5f:21:d0:92:67:e3:8a:74:d4:
         0a:d3:31:44:82:91:8c:78:22:8f:4f:04:ac:bb:3d:62:1b:33:
         cc:9f:c3:8b:51:fd:6b:ec:5d:e5:50:95:fa:c8:20:db:02:20:
         7d:09:ce:7d:f8:1a:1d:4c:64:08:4d:1d:51:1e:00:39:bf:8a:
         1f:f3:b6:54:f9:91:26:0e:00:63:ca:f0:e1:34:9c:35:9d:d0:
         d8:fc:15:6f:71:c4:f0:13:52:e8:d3:0a:fe:17:c7:e1:b4:dd:
         d6:d3:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----