Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft
File:                     289C0FA8F74E8A496A1CF040353916504C4E789F.mft (raw, json)
Hash identifier:          jp+dx3QGcrkMxTqtij9CkpGOpVAmu1k2yZU1seQQu2w=
Subject key identifier:   C5:02:4D:18:5A:2E:69:35:CC:33:D3:69:0E:1D:3F:96:B6:47:40:04
Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Certificate issuer:       /CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Certificate serial:       1785FF8983238D81009E22943A6C4CF31D93F97C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft
Manifest number:          039E
Signing time:             Tue 17 Mar 2026 20:25:41 +0000
Manifest this update:     Tue 17 Mar 2026 20:20:41 +0000
Manifest next update:     Wed 18 Mar 2026 22:03:41 +0000
Files and hashes:         1: 289C0FA8F74E8A496A1CF040353916504C4E789F.crl (hash: OmJ/dPZYa5SCCnMfYbSWvY0rOBCI8LNVeMGskRMgZUs=)
                          2: 34352e3232382e3134382e302f32322d3234203d3e20323637303738.roa (hash: v1wrjfYs/XN4AL+meICElKQP9scnXquXOc/B2Xkm9JI=)
                          3: 323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (hash: +gP3s6w113DB3ZyjXxmKKAlbxghpSVPSj8Lqa0WGlnI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:85:ff:89:83:23:8d:81:00:9e:22:94:3a:6c:4c:f3:1d:93:f9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
        Validity
            Not Before: Mar 17 20:20:41 2026 GMT
            Not After : Mar 18 22:03:41 2026 GMT
        Subject: CN=C5024D185A2E6935CC33D3690E1D3F96B6474004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0f:e2:ab:e9:45:3a:f8:ee:d6:d4:49:51:01:
                    a9:ad:09:f2:28:08:3d:86:92:85:d1:a2:93:8b:c7:
                    0f:d1:f5:f0:57:bc:3e:7e:d5:b6:3a:5b:93:40:b1:
                    cd:89:1d:e2:8e:1d:2c:09:fd:92:7f:ac:d2:b4:9c:
                    82:47:e8:59:80:69:ab:40:9f:4d:27:f9:2d:fa:c2:
                    7d:0b:91:e5:f6:84:5b:71:b5:48:29:36:3e:c1:b0:
                    44:66:42:e0:f2:0c:04:ab:fd:a7:9c:da:5c:f1:58:
                    71:30:cc:93:b8:57:14:64:85:ec:94:ec:03:2d:8a:
                    b5:3a:10:97:be:df:f6:73:c3:b7:19:24:1f:7c:0c:
                    d6:80:af:bf:b2:bc:65:e3:c5:dd:7f:69:a1:d7:a1:
                    8a:82:f5:98:92:f3:0d:f5:7c:b6:9e:91:d4:e4:83:
                    0e:1f:06:f6:4d:0b:b3:6f:48:d2:e9:12:82:c9:2b:
                    1b:38:41:f2:a3:f9:3e:4c:d6:8d:d0:1d:16:36:d8:
                    55:46:6c:98:b7:75:3e:ce:c5:38:3a:99:11:6b:b4:
                    4e:94:85:a3:8c:c0:5b:71:42:ed:dd:b0:46:3d:7e:
                    7f:c7:dd:ef:dd:60:44:53:6f:b7:b1:d9:a9:33:d0:
                    6f:d3:10:c8:b0:e3:8f:87:08:eb:5c:90:e4:f9:0e:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:02:4D:18:5A:2E:69:35:CC:33:D3:69:0E:1D:3F:96:B6:47:40:04
            X509v3 Authority Key Identifier:
                keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:5d:4e:6e:ae:12:47:4a:dc:38:ac:e5:f5:91:62:9a:6f:2a:
         60:2e:b2:d0:d6:21:02:13:bf:17:3d:61:32:6f:88:67:82:2a:
         2c:ac:e4:23:fd:02:ad:2a:cb:a0:a4:ce:bf:be:b4:b7:4b:35:
         43:5f:7e:5f:b4:a4:8c:d9:b8:59:71:4c:c4:5e:7f:25:ad:e5:
         ad:e9:5f:ee:8b:6f:b7:ae:86:5d:3c:b4:82:29:6d:fb:c4:79:
         5d:e0:4c:6d:9b:6f:a6:71:d5:43:bc:3f:d7:85:bc:57:2d:0e:
         73:1e:f8:b8:b4:4f:ec:2b:be:fa:be:84:ae:80:12:d6:5a:85:
         60:62:bd:87:9e:47:35:bd:65:3c:f2:01:c7:65:83:bf:18:93:
         9b:e7:22:51:fa:b9:aa:f7:16:7e:0b:34:64:b4:e4:7c:61:a3:
         ff:19:d3:b0:56:f3:d2:f2:78:a3:0b:82:8e:41:4b:4d:6d:b7:
         15:d9:7e:03:36:0c:ea:de:a3:c2:d2:44:95:a2:47:a1:9b:1c:
         3f:30:74:90:ef:db:30:47:5f:3d:36:95:71:7b:f5:17:1f:1a:
         0b:08:c3:30:cf:5a:26:85:6c:1c:2f:4b:91:a8:52:dc:9d:29:
         9a:98:41:82:d0:b1:43:c3:24:90:1b:35:d4:c4:1b:00:57:72:
         b3:cc:67:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF4X/iYMjjYEAniKUOmxM8x2T+XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg5QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0
QzRFNzg5RjAeFw0yNjAzMTcyMDIwNDFaFw0yNjAzMTgyMjAzNDFaMDMxMTAvBgNV
BAMTKEM1MDI0RDE4NUEyRTY5MzVDQzMzRDM2OTBFMUQzRjk2QjY0NzQwMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWD+Kr6UU6+O7W1ElRAamtCfIo
CD2GkoXRopOLxw/R9fBXvD5+1bY6W5NAsc2JHeKOHSwJ/ZJ/rNK0nIJH6FmAaatA
n00n+S36wn0LkeX2hFtxtUgpNj7BsERmQuDyDASr/aec2lzxWHEwzJO4VxRkheyU
7AMtirU6EJe+3/Zzw7cZJB98DNaAr7+yvGXjxd1/aaHXoYqC9ZiS8w31fLaekdTk
gw4fBvZNC7NvSNLpEoLJKxs4QfKj+T5M1o3QHRY22FVGbJi3dT7OxTg6mRFrtE6U
haOMwFtxQu3dsEY9fn/H3e/dYERTb7ex2akz0G/TEMiw44+HCOtckOT5Dsx3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUxQJNGFouaTXMM9NpDh0/lrZHQAQwHwYDVR0j
BBgwFoAUKJwPqPdOiklqHPBANTkWUExOeJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJq
YWMvMC8yODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4OUMwRkE4Rjc0RThBNDk2
QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJqYWMvMC8y
ODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzV1Obq4SR0rcOKzl9ZFimm8qYC6y0NYhAhO/Fz1hMm+IZ4IqLKzkI/0CrSrL
oKTOv760t0s1Q19+X7SkjNm4WXFMxF5/Ja3lrelf7otvt66GXTy0gilt+8R5XeBM
bZtvpnHVQ7w/14W8Vy0Ocx74uLRP7Cu++r6EroAS1lqFYGK9h55HNb1lPPIBx2WD
vxiTm+ciUfq5qvcWfgs0ZLTkfGGj/xnTsFbz0vJ4owuCjkFLTW23Fdl+AzYM6t6j
wtJElaJHoZscPzB0kO/bMEdfPTaVcXv1Fx8aCwjDMM9aJoVsHC9LkahS3J0pmphB
gtCxQ8MkkBs11MQbAFdys8xngA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 18:15:58 2026 by rpki-client