Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.mft
File:                     D104990D7FBEE06F5C7017C7163D8A152452DC99.mft (raw, json)
Hash identifier:          7l2LcvQLLJVg/dZszJ685mB12tzjLlY2HIpjWWiG6TI=
Subject key identifier:   9D:20:57:0E:CB:98:3D:F0:F5:46:A9:04:2A:A7:76:45:1C:37:09:30
Authority key identifier: D1:04:99:0D:7F:BE:E0:6F:5C:70:17:C7:16:3D:8A:15:24:52:DC:99
Certificate issuer:       /CN=D104990D7FBEE06F5C7017C7163D8A152452DC99
Certificate serial:       38B0C881CCDB6968E9DAA2E36D31BDFC114512A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D104990D7FBEE06F5C7017C7163D8A152452DC99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.mft
Manifest number:          5A
Signing time:             Thu 01 Jan 2026 20:36:13 +0000
Manifest this update:     Thu 01 Jan 2026 20:31:13 +0000
Manifest next update:     Fri 02 Jan 2026 21:49:13 +0000
Files and hashes:         1: D104990D7FBEE06F5C7017C7163D8A152452DC99.crl (hash: qgDQUnhTagv8LkPdejEjJyKrsCjGD6iZP7Qz7AqyxEM=)
                          2: 3230302e3134322e3233322e302f32322d3332203d3e20323730363837.roa (hash: x2acalBNbDYRAGzrW8+ONmoyI+aiy9uhDsd5ljKo59s=)
                          3: 323830343a366664343a3a2f33322d313238203d3e20323730363837.roa (hash: vRK6GNmPY7EWWw3E9WWA/PAjnnmLzWEWF5NtEQOLMSM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:c8:81:cc:db:69:68:e9:da:a2:e3:6d:31:bd:fc:11:45:12:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D104990D7FBEE06F5C7017C7163D8A152452DC99
        Validity
            Not Before: Jan  1 20:31:13 2026 GMT
            Not After : Jan  2 21:49:13 2026 GMT
        Subject: CN=9D20570ECB983DF0F546A9042AA776451C370930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:9e:8a:f2:51:62:8b:8a:2f:09:4c:82:5a:
                    2d:9b:39:86:e4:eb:b0:a6:ac:6d:c5:5f:67:da:d5:
                    a8:a8:74:2b:2a:53:a8:3a:36:cc:01:54:b4:a8:8e:
                    64:19:4d:23:df:72:2c:58:f3:82:b8:c5:1c:5a:fa:
                    5c:85:ec:cd:d6:1a:82:72:0c:fd:0c:b1:3c:4d:eb:
                    53:4b:84:c0:74:1a:b4:2f:96:67:d2:e6:fd:3b:f4:
                    f3:2a:0f:cd:ae:8b:49:ea:09:28:38:91:52:76:a6:
                    8a:8e:94:88:81:b9:7f:1b:52:3f:27:fe:fd:fc:04:
                    9b:ac:00:cc:b3:7b:a5:64:0e:0f:e2:6d:4d:97:6a:
                    f3:b3:9e:a0:e5:2d:d9:c8:82:ca:c3:58:75:e6:78:
                    64:7f:bf:a5:18:84:5c:08:a2:00:f8:f1:79:d8:f7:
                    34:e6:60:b5:bd:1f:79:dd:7b:87:90:dd:d1:8d:2a:
                    5f:ff:3c:f6:2f:16:cd:9f:ff:97:c8:14:fc:7e:7a:
                    f6:6d:9d:67:4d:29:9b:21:e5:34:0a:1b:db:98:ff:
                    8f:07:11:23:3b:da:23:de:91:71:ae:3e:8f:77:b2:
                    5d:f0:f4:bb:b6:99:97:22:7a:9f:fe:d8:54:76:d0:
                    9d:ba:71:83:d9:69:a6:ae:5e:44:9f:9f:70:12:11:
                    4f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:57:0E:CB:98:3D:F0:F5:46:A9:04:2A:A7:76:45:1C:37:09:30
            X509v3 Authority Key Identifier:
                keyid:D1:04:99:0D:7F:BE:E0:6F:5C:70:17:C7:16:3D:8A:15:24:52:DC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D104990D7FBEE06F5C7017C7163D8A152452DC99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/0/D104990D7FBEE06F5C7017C7163D8A152452DC99.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:d7:54:48:4b:66:82:e1:52:0b:0f:69:02:f6:e0:d4:04:
         5f:41:c3:c9:b4:2a:af:e4:c0:cd:5f:e8:8a:1a:c0:cb:f6:ba:
         e1:9c:10:71:d0:6c:5a:76:5b:be:75:85:e8:8e:41:24:d9:90:
         f4:6f:8e:bd:3a:c3:44:41:83:8c:02:a6:bf:86:69:10:35:76:
         2f:53:15:82:80:79:d7:47:08:9f:88:6c:12:f8:fb:0c:8d:dd:
         3a:a4:e6:c4:52:ea:4e:7f:85:f2:d1:a4:b4:04:2c:e4:73:df:
         10:e3:b4:ca:ff:b9:2c:72:4d:16:ac:e6:5d:72:6f:c9:06:5b:
         5a:cd:f3:e6:cf:15:fb:f7:c7:22:68:bf:a4:6f:5c:8e:74:82:
         bd:a3:46:0b:8d:76:cb:b9:2d:ff:9a:17:97:58:48:5d:39:24:
         22:50:3a:58:28:80:3d:78:a2:09:fb:1f:71:0c:7b:97:a1:ea:
         bb:e7:86:d9:31:3c:a2:c3:35:75:e5:d4:e3:3c:47:0b:9d:07:
         b1:b3:d5:2a:d5:8b:29:47:ec:51:e1:4c:88:89:16:cf:19:a9:
         46:b2:30:53:e1:ff:49:5b:6a:8b:2a:e6:bd:0a:f4:40:b6:2a:
         57:36:3e:06:94:ec:a9:1e:3b:91:7c:62:df:20:63:57:72:b8:
         8c:de:d7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----