Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
File:                     9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json)
Hash identifier:          G798Q5n0Cm3qTF1X6LXcYKDKz9BpJbjG364+9tbMiks=
Subject key identifier:   76:AF:8A:3A:C5:65:48:37:02:56:22:09:E9:4D:63:77:AA:FF:C4:A9
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       7D1835ED7D966EA271CC6A50B2BA64743A4D079B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
Manifest number:          042C
Signing time:             Wed 17 Jun 2026 00:26:31 +0000
Manifest this update:     Wed 17 Jun 2026 00:21:31 +0000
Manifest next update:     Thu 18 Jun 2026 02:40:31 +0000
Files and hashes:         1: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: 9YEEiWcHWzoyxt4jbdxioxGIv2UrBnPqX79kFaanVTg=)
                          2: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: pIf1r0PU3hPVhAM77hExGbyirK3tKC7Mxa4FtN68Qzs=)
                          3: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: 0uQy9L11j3HcJXHaHnlRdlFGzjz0yCHWiKDVacV27Lo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:18:35:ed:7d:96:6e:a2:71:cc:6a:50:b2:ba:64:74:3a:4d:07:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Jun 17 00:21:31 2026 GMT
            Not After : Jun 18 02:40:31 2026 GMT
        Subject: CN=76AF8A3AC565483702562209E94D6377AAFFC4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:8f:df:82:20:90:99:bb:aa:a1:e7:e3:9b:
                    50:b9:c1:2a:c2:1b:56:fa:5b:98:d9:c3:d9:1b:70:
                    2c:b4:12:d5:f2:f9:d6:64:75:28:c1:1b:55:8d:70:
                    6a:59:4f:18:1e:d5:b0:38:25:a4:40:c5:54:c6:7f:
                    e2:d2:ec:ea:ba:49:18:83:12:24:c3:73:b1:0f:70:
                    5b:c6:bf:b0:e8:a9:c6:81:99:90:a6:af:1f:87:42:
                    94:dd:eb:60:20:3b:72:e4:1f:30:1e:75:8c:71:38:
                    cc:29:ba:48:b2:6b:a9:a4:e4:08:da:9c:95:b9:a1:
                    41:31:8f:cd:e7:e7:85:78:56:c8:7b:0b:b7:be:d8:
                    d1:58:fe:79:9f:ea:bd:55:ea:ae:49:cb:02:9f:d3:
                    3d:71:d9:78:13:c6:34:d5:c6:92:c1:8e:d4:9b:48:
                    85:51:a4:c0:e5:01:31:74:5b:ef:0e:86:dc:84:5d:
                    b0:3b:6b:fb:5c:b9:9e:b4:5a:ba:dd:fe:88:60:9a:
                    1f:4c:c1:d9:0b:1d:53:21:cb:f9:f7:0b:90:ed:68:
                    0f:45:30:34:c9:67:38:3a:c5:47:4b:a3:33:4a:8e:
                    38:73:cb:8b:71:4c:80:e3:61:e3:0d:8d:da:75:d4:
                    27:58:a0:db:57:4d:70:c5:e6:88:e5:fe:99:90:4f:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:8A:3A:C5:65:48:37:02:56:22:09:E9:4D:63:77:AA:FF:C4:A9
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:88:e8:45:bb:c6:da:7d:f6:54:a5:33:2d:01:7a:1c:20:
         9a:37:03:af:cf:14:f4:28:f6:7a:af:a4:5b:65:f9:b1:9a:e9:
         79:be:df:54:5b:a5:4f:c0:6a:06:c4:11:ee:de:cd:99:c4:3d:
         10:49:04:01:21:b6:43:d1:c9:6e:b4:3b:eb:58:10:f6:5a:d2:
         cd:6b:2b:8f:df:ac:aa:c7:14:cd:d5:01:47:44:95:bf:fc:dd:
         1a:7a:f9:53:7d:a6:9a:e8:ce:54:a2:cb:ba:06:5b:52:10:a0:
         4c:64:df:c2:7e:80:fb:3f:d8:b5:af:88:b6:0e:10:5f:ed:26:
         85:43:82:ed:94:e4:98:08:34:9b:b1:b9:2e:d1:d8:fb:3f:f8:
         45:02:7e:b6:fb:c0:cc:9a:89:82:f8:0b:d9:6e:36:05:de:91:
         5c:f8:85:2d:31:51:f1:b2:14:d5:d8:8a:27:16:5f:7e:be:d3:
         25:eb:7b:ed:6a:fe:7d:bc:fe:db:a2:f1:c9:9a:1e:16:92:0d:
         a5:08:4e:1c:90:b7:e7:86:ab:1a:77:b2:9f:e2:62:a8:d0:8d:
         33:7b:0e:71:c7:46:89:f5:57:80:ed:d8:c8:c5:27:bb:39:a1:
         45:ee:69:5b:e0:d4:12:8a:fd:64:ce:bf:c4:a2:9c:8a:fa:dd:
         90:4a:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----