Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
File:                     33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json)
Hash identifier:          5gxeT/V2cu6Fejou8XXhdRaK9cPsBHj3oslF+8X8txk=
Subject key identifier:   DC:39:8B:13:81:AA:4A:64:64:CF:2B:1C:75:5A:01:EF:96:8B:12:03
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       57B5670434F8B17A8CFAC91F8CC22DFD8A04C61B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
Manifest number:          03C2
Signing time:             Tue 17 Mar 2026 20:20:41 +0000
Manifest this update:     Tue 17 Mar 2026 20:15:41 +0000
Manifest next update:     Wed 18 Mar 2026 22:07:41 +0000
Files and hashes:         1: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: 65XCz7a3MWKVs7zGaFWxzye5qGPakmiAev6OY53gaHU=)
                          2: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: Gd/dCXCFJyIIr6GmvYmg7aRAxoHEylmhuiezZV+UUco=)
                          3: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: uorHiWjfVb9aNZ+4Z465bQJ128HaZXf9H4MY7ZRk/8A=)
                          4: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: RmnRH+umsuVJoPO5tihVD/T6Dsudqrhc/X17IwGgJps=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:67:04:34:f8:b1:7a:8c:fa:c9:1f:8c:c2:2d:fd:8a:04:c6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Mar 17 20:15:41 2026 GMT
            Not After : Mar 18 22:07:41 2026 GMT
        Subject: CN=DC398B1381AA4A6464CF2B1C755A01EF968B1203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:78:d6:f4:93:57:21:5d:eb:c8:7f:ea:b5:
                    56:fd:25:41:da:6b:8c:37:3d:ea:ed:1b:7d:d3:ca:
                    00:65:60:fa:61:37:b7:4d:44:14:37:07:27:cc:ef:
                    9c:e2:b4:3c:fa:b4:76:c6:d9:89:cb:73:93:34:4a:
                    7a:bd:4a:7c:69:43:27:b1:54:86:50:5e:b3:85:98:
                    b5:0d:b5:cf:6a:a5:88:c7:53:0e:25:4d:40:26:bd:
                    60:9b:40:35:1c:49:e2:6c:50:db:c6:e0:8e:70:7b:
                    78:1c:46:bf:88:99:d8:a9:4c:d8:36:72:95:47:18:
                    32:ab:49:4a:8a:28:ea:12:b2:b9:63:69:54:99:f5:
                    f0:4e:c7:6d:f4:29:a8:a3:91:56:82:8b:c5:65:71:
                    9e:3e:20:90:0c:0e:c5:6e:6a:eb:31:4b:b8:58:f5:
                    3c:9f:17:5c:28:a9:7c:b5:b8:85:88:29:e1:10:ff:
                    da:50:1a:98:67:f2:b5:bf:b8:30:fc:8c:47:3f:70:
                    37:05:39:aa:c6:98:e7:21:29:e0:ff:a5:7b:c3:f8:
                    89:27:06:31:03:f6:81:7d:e5:4e:03:e4:41:b5:35:
                    49:f3:a6:6d:5f:45:8b:bb:76:33:66:1f:fa:57:c6:
                    d7:48:55:b3:1c:c6:38:1c:a9:15:4b:ad:5e:ce:f8:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:8B:13:81:AA:4A:64:64:CF:2B:1C:75:5A:01:EF:96:8B:12:03
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:06:61:21:55:69:db:6e:7a:7e:c6:71:9d:1b:9e:d3:0d:
         ea:1d:79:e9:d0:f9:68:65:5b:6f:6d:f3:9c:af:d0:fb:75:6b:
         5b:6a:38:b2:f4:a0:16:62:7c:54:95:4f:36:43:54:c6:82:2f:
         e5:69:4f:24:ab:a4:ce:31:b6:af:66:13:92:13:b5:ba:1e:44:
         e8:91:8d:8e:7f:5b:2b:59:0e:68:d9:de:17:51:ff:3a:d9:62:
         0e:52:92:d4:c0:a0:ed:c3:37:97:24:92:51:d6:27:c1:2d:f0:
         86:62:d0:b2:dd:a7:b5:75:d4:69:71:44:33:b8:77:2f:ce:f4:
         9d:4e:1f:66:c2:e7:ff:b1:ed:90:d5:11:d0:c2:31:48:ab:d0:
         74:11:4f:7c:41:e9:94:dc:14:46:5d:59:4e:a6:11:a1:0d:a3:
         21:7b:43:de:af:de:46:18:06:f8:b4:d1:94:93:4e:96:7f:c1:
         36:a4:da:c9:72:b1:95:7d:81:48:1c:64:67:8a:23:dd:4d:1d:
         75:3b:c0:48:92:6a:6e:ae:7b:e3:e2:09:d6:02:73:09:3f:32:
         db:e9:0d:57:76:99:ab:50:a1:d9:42:14:9c:97:9a:f8:c4:0f:
         8a:c0:0d:f0:df:78:c1:9e:21:e5:b5:bd:ea:fe:29:ed:58:21:
         d3:5f:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----