Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
File:                     211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft (raw, json)
Hash identifier:          cNeGDdimEsLn7B+3hl+UR2pbEtMCdfBegDAoiQMnvVI=
Subject key identifier:   07:E9:05:EC:E3:04:D6:05:D1:EB:D3:14:CC:BF:6A:E7:3A:02:B7:73
Authority key identifier: 21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE
Certificate issuer:       /CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE
Certificate serial:       599136D940704231A196A4ABD893E0DD9B2D3854
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft
Manifest number:          03D0
Signing time:             Thu 19 Mar 2026 10:34:51 +0000
Manifest this update:     Thu 19 Mar 2026 10:29:51 +0000
Manifest next update:     Fri 20 Mar 2026 12:54:51 +0000
Files and hashes:         1: 323830343a363932633a3a2f33322d3438203d3e20323730323533.roa (hash: qelJjM5d33Imc6UYcUNyfhiBYBiDTusid0cQJFtvHZ8=)
                          2: 3230302e3131302e3230342e302f32322d3234203d3e20323730323533.roa (hash: RJ1WZFBfEzWGniIdzhAmmz9+gLm7fbEqwNn3B6soCOw=)
                          3: 211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl (hash: eUKXg4wwLgK6AfSGVRSZI9H2Ud/Z9Z+iyYzc40v2nAI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:91:36:d9:40:70:42:31:a1:96:a4:ab:d8:93:e0:dd:9b:2d:38:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211F3D420A136AE7395A367C0DC2C730D3B84CBE
        Validity
            Not Before: Mar 19 10:29:51 2026 GMT
            Not After : Mar 20 12:54:51 2026 GMT
        Subject: CN=07E905ECE304D605D1EBD314CCBF6AE73A02B773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:47:a7:46:d2:5d:5f:23:0b:97:3c:e8:db:
                    5e:f1:94:a7:ad:69:27:a4:08:ed:64:fc:95:e0:48:
                    75:be:7f:02:21:bb:76:f1:5a:ef:55:d4:3d:99:b3:
                    cb:12:1b:45:ad:2d:cd:57:50:af:b3:6d:43:2f:c2:
                    86:a8:7c:15:d0:d5:0b:02:dc:7a:75:16:d9:d2:f4:
                    52:70:3b:91:43:9b:e2:4b:dd:b7:ad:3d:aa:1a:bf:
                    61:ed:d2:41:de:a0:f5:f3:dc:9c:f8:1d:6d:6b:e9:
                    ac:43:36:ab:71:19:d7:86:fc:b5:bf:e2:14:07:c9:
                    cb:c4:70:53:ff:19:ae:88:aa:92:ac:d5:37:1f:5b:
                    24:80:1f:ae:6f:14:75:f2:91:6f:49:27:30:7d:e8:
                    2e:ba:c9:a7:6b:35:85:39:ac:fc:fc:8c:80:98:f3:
                    09:85:3d:5c:df:8d:4c:81:0d:8e:b0:5c:d0:81:59:
                    3c:90:99:64:d8:ce:ea:7c:75:c6:5c:e8:a8:e9:bd:
                    7c:5b:ae:33:48:e1:58:6b:7c:03:57:3b:8c:db:a0:
                    e3:9b:4f:52:75:f8:3d:99:c7:dd:33:85:06:d0:cc:
                    51:04:4d:b1:db:1a:a7:17:56:3c:c7:23:fc:2f:22:
                    e8:0f:be:6a:84:ad:22:b1:79:49:3f:f7:e9:11:f6:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:05:EC:E3:04:D6:05:D1:EB:D3:14:CC:BF:6A:E7:3A:02:B7:73
            X509v3 Authority Key Identifier:
                keyid:21:1F:3D:42:0A:13:6A:E7:39:5A:36:7C:0D:C2:C7:30:D3:B8:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/211F3D420A136AE7395A367C0DC2C730D3B84CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/211F3D420A136AE7395A367C0DC2C730D3B84CBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:ab:5f:76:b1:6b:89:d9:b5:80:ab:31:0c:53:6b:34:04:
         48:31:ea:88:d4:4c:a6:bc:d9:5c:84:b7:4d:fb:c2:a4:be:2d:
         56:84:8e:2a:1c:33:b4:a8:cf:6e:cd:c5:d5:5f:c6:30:08:fd:
         33:a5:d4:68:cd:c3:73:04:49:4f:45:f5:e6:02:b4:47:15:a8:
         05:9f:6d:bc:be:57:0f:70:e7:b4:08:db:ff:a1:87:cd:df:ab:
         b9:ac:7a:eb:64:22:b7:04:e5:c5:e2:dd:41:1f:20:89:f5:85:
         b7:f3:82:f1:1d:64:f5:84:41:6d:07:f8:77:ec:ef:fd:95:10:
         1c:73:0e:f6:27:64:1d:60:d3:ec:9c:cc:61:32:81:c7:0c:01:
         a8:77:02:1d:4c:08:89:a2:e5:ca:51:60:b2:6c:b1:cc:1d:7e:
         d1:9b:0a:1e:20:1d:fd:74:f3:ef:38:cc:96:df:8f:fb:2d:1e:
         45:7e:82:9c:26:40:b1:aa:f1:64:04:80:9c:21:92:ee:f1:8c:
         5e:06:2d:14:7d:27:ec:ee:ff:4b:52:4a:af:1c:ba:78:6b:16:
         5d:a8:26:91:70:59:ec:87:01:56:f5:70:e6:42:c4:49:e6:fb:
         06:10:56:63:8c:b9:06:97:cf:21:c8:92:60:36:3c:79:0d:76:
         fd:bf:b5:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWZE22UBwQjGhlqSr2JPg3ZstOFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExRjNENDIwQTEzNkFFNzM5NUEzNjdDMERDMkM3MzBE
M0I4NENCRTAeFw0yNjAzMTkxMDI5NTFaFw0yNjAzMjAxMjU0NTFaMDMxMTAvBgNV
BAMTKDA3RTkwNUVDRTMwNEQ2MDVEMUVCRDMxNENDQkY2QUU3M0EwMkI3NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/EenRtJdXyMLlzzo217xlKet
aSekCO1k/JXgSHW+fwIhu3bxWu9V1D2Zs8sSG0WtLc1XUK+zbUMvwoaofBXQ1QsC
3Hp1FtnS9FJwO5FDm+JL3betPaoav2Ht0kHeoPXz3Jz4HW1r6axDNqtxGdeG/LW/
4hQHycvEcFP/Ga6IqpKs1TcfWySAH65vFHXykW9JJzB96C66yadrNYU5rPz8jICY
8wmFPVzfjUyBDY6wXNCBWTyQmWTYzup8dcZc6KjpvXxbrjNI4VhrfANXO4zboOOb
T1J1+D2Zx90zhQbQzFEETbHbGqcXVjzHI/wvIugPvmqErSKxeUk/9+kR9qGnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUB+kF7OME1gXR69MUzL9q5zoCt3MwHwYDVR0j
BBgwFoAUIR89QgoTauc5WjZ8DcLHMNO4TL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4
UnIvMC8yMTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMUYzRDQyMEExMzZBRTcz
OTVBMzY3QzBEQzJDNzMwRDNCODRDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC8y
MTFGM0Q0MjBBMTM2QUU3Mzk1QTM2N0MwREMyQzczMEQzQjg0Q0JFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZRGrX3axa4nZtYCrMQxTazQESDHqiNRMprzZXIS3TfvCpL4tVoSOKhwztKjP
bs3F1V/GMAj9M6XUaM3DcwRJT0X15gK0RxWoBZ9tvL5XD3DntAjb/6GHzd+ruax6
62QitwTlxeLdQR8gifWFt/OC8R1k9YRBbQf4d+zv/ZUQHHMO9idkHWDT7JzMYTKB
xwwBqHcCHUwIiaLlylFgsmyxzB1+0ZsKHiAd/XTz7zjMlt+P+y0eRX6CnCZAsarx
ZASAnCGS7vGMXgYtFH0n7O7/S1JKrxy6eGsWXagmkXBZ7IcBVvVw5kLESeb7BhBW
Y4y5BpfPIciSYDY8eQ12/b+1ig==
-----END CERTIFICATE-----
Generated at Wed Apr 8 15:41:48 2026 by rpki-client