Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft
File:                     AF231F74DDE2311E23940DD27C9A363910CAB577.mft (raw, json)
Hash identifier:          HJfGsZkRbUg0EElKJ0MUOeq8mIuvHlgsaU1PxIvnIj0=
Subject key identifier:   AE:31:9E:D8:4A:65:12:F8:B4:19:5B:3D:14:F5:D6:19:35:38:C5:DD
Authority key identifier: AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77
Certificate issuer:       /CN=AF231F74DDE2311E23940DD27C9A363910CAB577
Certificate serial:       033F956800AD976BFF2081F14EC96661CD9E0804
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft
Manifest number:          EB
Signing time:             Fri 03 Jul 2026 14:23:31 +0000
Manifest this update:     Fri 03 Jul 2026 14:18:31 +0000
Manifest next update:     Sat 04 Jul 2026 15:19:31 +0000
Files and hashes:         1: 3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa (hash: EYyUElunll6ku9qCWDNirniijbr4tjX9Ij8ARgZeEgo=)
                          2: AF231F74DDE2311E23940DD27C9A363910CAB577.crl (hash: wN323dBpaooZbba6o/LqERFNWAjzP+PdA3noVDGgp1s=)
                          3: 323830343a333239383a3a2f33322d313238203d3e20323635303837.roa (hash: xOwOGSU7wTDhn3QFg+xaq3Te4NGx/6MLJ1r9YwedQNw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3f:95:68:00:ad:97:6b:ff:20:81:f1:4e:c9:66:61:cd:9e:08:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF231F74DDE2311E23940DD27C9A363910CAB577
        Validity
            Not Before: Jul  3 14:18:31 2026 GMT
            Not After : Jul  4 15:19:31 2026 GMT
        Subject: CN=AE319ED84A6512F8B4195B3D14F5D6193538C5DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:5c:45:c6:30:73:d9:fc:81:bf:5c:bb:66:
                    0b:78:a9:ec:39:1a:04:d4:82:55:7a:14:47:28:36:
                    47:b8:62:f9:77:90:0f:fa:5c:e3:88:39:b9:d0:4b:
                    ae:82:49:86:c4:6e:91:a1:fa:30:fe:d4:26:d3:e1:
                    f8:b0:0d:27:b4:0d:8c:3b:3b:a6:58:14:4b:96:b5:
                    c7:a1:6e:26:39:d8:53:a8:59:5f:d0:4c:c5:8c:92:
                    d3:7c:2a:d4:cd:4a:fd:64:63:f4:26:af:08:a0:54:
                    25:a1:2e:74:da:46:66:17:81:f2:2e:da:71:c4:3b:
                    23:e6:8e:bc:a7:ab:bd:57:e6:58:94:69:6e:20:ff:
                    b7:a0:d2:03:cd:37:9a:29:13:49:2d:00:55:62:75:
                    5c:0b:6a:ef:18:c0:df:f6:90:7c:c0:05:73:df:58:
                    16:46:f1:3b:f5:09:01:dc:cd:a6:39:ef:c7:e0:17:
                    26:9c:f0:ca:af:d0:7d:70:67:c9:c2:c0:57:59:d3:
                    5a:cb:5f:f9:fa:b4:e5:d0:65:b5:2a:a7:88:1a:37:
                    0e:9b:d4:17:c9:9c:08:38:38:3f:e0:47:60:22:7c:
                    12:49:91:78:b3:3e:be:53:27:66:1c:5d:1a:27:28:
                    da:cb:3c:a2:68:b6:02:4e:eb:bf:41:a8:25:30:1f:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:9E:D8:4A:65:12:F8:B4:19:5B:3D:14:F5:D6:19:35:38:C5:DD
            X509v3 Authority Key Identifier:
                keyid:AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:30:65:28:99:13:ed:43:bd:bd:2f:64:2c:fa:78:ec:a8:8a:
         d6:56:94:a9:2c:a5:e6:53:aa:a3:80:2f:f3:9e:20:31:b5:97:
         5c:af:5b:92:d1:4b:6e:c0:05:c0:e2:d1:90:e7:55:55:df:f0:
         31:70:ea:ca:40:96:bd:f4:e3:3d:25:2d:4d:1b:90:09:a1:e2:
         85:4f:3b:e7:c3:9c:bd:f6:9f:f0:c1:f9:b0:5d:96:68:31:3d:
         99:e2:a1:36:3d:7b:52:4c:40:1c:2f:60:54:fe:31:67:22:e4:
         51:28:ac:98:e4:c8:b6:d7:de:3e:a1:79:e3:1d:33:a9:fb:08:
         e9:7c:c0:48:7d:12:5f:85:9c:2d:99:b2:a2:e2:43:62:73:85:
         2a:9f:bc:e3:3f:6f:18:2a:d0:2b:30:1d:88:81:11:77:ca:cd:
         de:e3:6b:42:b8:49:e3:99:b3:72:95:72:42:f8:29:13:0b:bd:
         a2:ae:df:1e:ff:8a:b8:1e:df:71:20:3a:a1:68:c2:14:77:60:
         09:3a:98:b9:d4:22:ab:f7:28:78:e8:33:c5:67:b6:b4:c1:95:
         d0:e7:70:10:6f:c4:84:34:8c:99:08:2a:89:87:8c:03:e1:67:
         80:95:2b:c0:97:7f:a8:9b:ff:b7:6b:04:70:d2:b7:49:8a:d6:
         ac:b3:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----