Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.mft
File:                     A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.mft (raw, json)
Hash identifier:          2Pq9S7yCj3U/SqHYfL/JULt/jFAbMt8G+KFoNkbGPbs=
Subject key identifier:   B3:75:A5:30:E9:46:41:0F:B8:75:C3:D5:B1:BA:15:73:88:A1:72:0B
Authority key identifier: A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F
Certificate issuer:       /CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
Certificate serial:       2E564017E74577B6CAC6738DD89E7BE772E88021
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.mft
Manifest number:          14
Signing time:             Wed 01 Jul 2026 05:50:20 +0000
Manifest this update:     Wed 01 Jul 2026 05:45:20 +0000
Manifest next update:     Thu 02 Jul 2026 06:06:20 +0000
Files and hashes:         1: A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.crl (hash: uZ7eBk/0R8Or1pz2SD61fXSVnuQVaddVFCO8T8ClJ+0=)
                          2: 34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa (hash: YnPewoHMCuPqztQFDCBBAtZZNvKAUn8RWXXjox7b3VE=)
                          3: 34352e3232352e3131382e302f32342d3234203d3e20323636393334.roa (hash: gOcqjn+iQJpSPb5OXf2sDLa20KBIysXeX6G7mvoBnvY=)
                          4: 34352e3232352e3131392e302f32342d3234203d3e20323636393334.roa (hash: 8gWB4J4Xyt3AUs2XpnMcnMWkj6j1/FHOyDUNSihJWEY=)
                          5: 323830343a343538633a3a2f33322d3332203d3e20323636393334.roa (hash: 1+I+TDwTNSqfMnYQxdj9UQbb957qNDv6ZTdpmRaR7fs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:56:40:17:e7:45:77:b6:ca:c6:73:8d:d8:9e:7b:e7:72:e8:80:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
        Validity
            Not Before: Jul  1 05:45:20 2026 GMT
            Not After : Jul  2 06:06:20 2026 GMT
        Subject: CN=B375A530E946410FB875C3D5B1BA157388A1720B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:9a:20:91:65:f9:3c:1c:15:33:ee:60:7d:
                    9a:dd:0b:ca:24:00:dc:ce:f4:25:02:2a:48:07:7d:
                    1b:4b:03:3a:9a:34:55:e8:bd:12:e3:66:15:a9:30:
                    a8:ce:d4:1b:37:e0:d5:31:d4:84:74:e0:14:55:75:
                    49:8d:fc:02:27:47:20:58:0f:09:4b:cc:f0:76:48:
                    46:e8:28:3e:ca:ee:c0:27:0d:14:13:2e:88:b9:34:
                    64:93:22:b9:0f:bb:6d:da:68:4c:d2:00:1a:ed:92:
                    81:91:69:2c:2b:82:9f:36:df:4f:ff:25:dc:71:ce:
                    44:ab:79:d5:ed:ea:52:5c:c1:db:f9:76:5a:60:a7:
                    72:b8:4a:fe:20:63:93:55:c2:f0:e1:21:6e:2d:23:
                    55:0b:ee:d2:8a:7f:de:e5:52:e7:4c:21:f2:0c:e7:
                    79:a6:6d:4c:b6:9c:58:e2:d7:83:6e:03:c1:ff:73:
                    3f:8f:6d:e4:70:68:e6:c3:d4:b6:37:25:d2:05:07:
                    d0:32:7f:0d:e0:3b:9e:db:6c:1c:24:a0:ae:15:2f:
                    38:e3:d5:19:df:7c:15:14:f9:54:a0:b4:cf:cd:6d:
                    48:52:4d:49:d7:ec:ec:10:57:9d:57:d7:b6:09:b7:
                    8c:20:1d:01:fc:b7:9b:d2:88:a4:17:b2:1e:3d:c8:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:A5:30:E9:46:41:0F:B8:75:C3:D5:B1:BA:15:73:88:A1:72:0B
            X509v3 Authority Key Identifier:
                keyid:A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:ea:ea:31:05:73:75:73:a4:c8:be:a4:b1:06:c5:d8:e2:
         1f:d5:51:99:2a:fc:2e:fb:d6:a2:a0:33:b6:30:79:b7:87:47:
         a8:48:3f:f1:0c:0e:b8:a6:d5:ee:b6:81:11:20:a1:44:f8:01:
         0d:51:8a:9d:df:3c:6e:aa:d0:20:4c:01:96:90:39:5b:86:80:
         de:60:b0:26:54:83:b3:39:75:c2:ff:01:e2:0a:c3:93:53:ef:
         23:5b:0b:c9:94:4b:3c:2e:0b:c9:2a:73:b5:69:90:ee:6b:19:
         c7:1d:c3:d0:b6:a2:65:e7:8f:28:1e:b8:6d:a1:f2:58:a5:5b:
         77:34:9c:22:f2:2e:29:76:63:70:b2:65:af:26:00:5f:d4:e3:
         8d:31:6a:4a:d8:ef:f0:0f:61:bf:a4:45:53:cc:cd:77:05:83:
         48:e3:bb:8c:fa:36:bb:a3:85:e1:62:28:72:1d:fc:76:13:c6:
         01:e4:07:b8:fc:0e:e7:53:85:a8:f2:6d:a7:af:13:dc:07:c8:
         31:ee:70:9b:74:76:3b:0a:3f:c6:b2:ce:fd:47:2c:86:05:6c:
         37:a3:ae:b6:23:12:2c:5d:d8:a7:79:c1:ef:5d:56:09:cd:4e:
         78:d3:1b:97:85:6f:f8:ee:be:7a:3a:a1:41:70:c9:09:6f:50:
         8c:59:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----