Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft
File:                     2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json)
Hash identifier:          TUVs4LilFqlpTrSk8fTg/pqDqnQneZ5D8dzod3YCvFk=
Subject key identifier:   E0:DE:3D:24:42:11:AB:54:E9:D8:E5:C4:19:89:E8:1B:5A:EC:E7:63
Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E
Certificate issuer:       /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
Certificate serial:       595DAA66FAC72D7DBE59C68CD447C46E2F028094
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft
Manifest number:          03A9
Signing time:             Wed 18 Mar 2026 01:40:42 +0000
Manifest this update:     Wed 18 Mar 2026 01:35:42 +0000
Manifest next update:     Thu 19 Mar 2026 02:40:42 +0000
Files and hashes:         1: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=)
                          2: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=)
                          3: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: U8TXQiRNgpEILkj5BaFx32Ih3L8Gqb+18ATIvMFiPbk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5d:aa:66:fa:c7:2d:7d:be:59:c6:8c:d4:47:c4:6e:2f:02:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E
        Validity
            Not Before: Mar 18 01:35:42 2026 GMT
            Not After : Mar 19 02:40:42 2026 GMT
        Subject: CN=E0DE3D244211AB54E9D8E5C41989E81B5AECE763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:31:cf:44:78:ea:d2:20:3f:c0:fc:c2:2b:
                    49:b8:91:96:25:47:28:66:15:93:de:0e:96:b1:2b:
                    75:17:1b:70:29:2b:30:27:c6:28:9b:86:e3:91:fc:
                    7a:63:6c:7c:c4:a0:02:7c:f3:fd:dc:27:02:a4:25:
                    ca:19:b3:73:b7:9b:71:b1:a9:57:8a:f0:2f:9f:22:
                    a7:32:b0:e6:e8:2f:c1:17:d5:d8:85:63:66:39:d0:
                    6a:2a:4a:11:00:a8:6b:8f:b0:cf:9d:de:19:2b:0b:
                    9e:a8:7a:b9:af:06:69:65:62:e1:74:ca:99:6a:0d:
                    ad:6c:50:8f:8a:c8:1d:f5:8e:91:f9:aa:d7:30:57:
                    75:2b:03:7d:dd:87:12:3a:04:c4:f7:4b:18:fa:9a:
                    81:e2:bd:30:41:aa:95:82:b3:4b:5d:fc:0e:4b:86:
                    1e:30:cc:67:5b:b7:cf:f0:7f:0d:e0:b9:c4:2d:09:
                    1e:81:82:13:ad:78:1f:dc:42:8f:0c:67:3a:21:e7:
                    28:46:93:0c:04:67:ba:13:7f:31:ff:71:39:75:0a:
                    b4:bf:5b:29:5a:b0:1e:76:16:4f:a6:21:08:a1:b2:
                    8a:e8:bf:23:50:b6:64:14:0c:cb:34:ac:df:1c:9b:
                    ec:5f:f9:d5:c5:f1:c1:98:9d:0a:f5:7e:0e:20:43:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:3D:24:42:11:AB:54:E9:D8:E5:C4:19:89:E8:1B:5A:EC:E7:63
            X509v3 Authority Key Identifier:
                keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:04:fa:04:3a:e3:9e:95:d0:ce:f5:e2:f3:b2:4a:f8:5d:80:
         56:81:54:86:2f:2a:81:95:ac:d4:0c:dc:f7:4a:1f:29:f5:4d:
         df:ed:be:d2:37:47:30:5f:62:e7:07:3c:d8:53:dc:30:d3:37:
         5c:cb:11:30:49:7a:a4:4d:5b:fd:17:a3:c7:06:cb:da:84:38:
         b8:ff:52:35:7d:15:f9:08:01:4f:25:2f:af:bb:51:4a:8e:f2:
         d2:dd:6c:f6:e3:f8:7f:aa:9c:e6:7c:19:61:6e:ff:8f:3b:6c:
         81:3b:6e:13:53:2b:33:af:db:40:b6:1c:9a:28:18:e5:4f:0f:
         d3:9c:96:ba:0e:f1:5d:2c:cf:7a:48:de:9d:7b:c0:41:0f:4a:
         e3:74:99:a7:25:e7:03:1d:b6:cc:ca:e7:c9:32:af:96:e4:d2:
         73:de:7e:27:8a:28:bf:50:32:e7:41:15:53:e6:3b:59:88:1f:
         2c:1b:8c:02:5e:fe:44:2f:c3:33:7d:f7:19:e8:40:ff:ff:58:
         a8:ab:2e:74:5b:b8:74:87:c8:3c:38:4b:0e:ed:1b:3d:48:7a:
         94:90:17:40:1c:f3:fe:e4:fd:12:85:13:aa:cc:32:61:bd:97:
         3d:82:47:d8:91:d9:3d:34:c4:6d:87:24:f5:3a:97:09:29:9b:
         cd:fc:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----