Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.mft
File:                     152696C719E46D5202EEA288828D038B7D3FD514.mft (raw, json)
Hash identifier:          1K3Hs0+/EYPif2tKK9XS7WYE1jJ4vOzAbvzM5XE526Q=
Subject key identifier:   33:D8:7D:AA:F6:9D:4E:1C:68:96:AF:50:9F:FB:94:71:16:71:D0:FF
Authority key identifier: 15:26:96:C7:19:E4:6D:52:02:EE:A2:88:82:8D:03:8B:7D:3F:D5:14
Certificate issuer:       /CN=152696C719E46D5202EEA288828D038B7D3FD514
Certificate serial:       3762A6ABF8E204211804BE601E1D74960F9CDD28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.mft
Manifest number:          0149
Signing time:             Tue 17 Mar 2026 21:51:01 +0000
Manifest this update:     Tue 17 Mar 2026 21:46:01 +0000
Manifest next update:     Thu 19 Mar 2026 00:28:01 +0000
Files and hashes:         1: 323830343a366330303a3a2f33322d313238203d3e20323730343339.roa (hash: JkOv5JOsBVb6zEUXzVb6djTYWI0vPz9ETY1XD24iJN8=)
                          2: 152696C719E46D5202EEA288828D038B7D3FD514.crl (hash: h57IN7smB+JwA5DlOwCAFOtp5htlkfpc3/qJRWeovDU=)
                          3: 3230302e31312e3132302e302f32322d3332203d3e20323730343339.roa (hash: rM9eUGf9BTjCqkmO6eAy0UD6HqZkp22/QEdv3sTyW+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:62:a6:ab:f8:e2:04:21:18:04:be:60:1e:1d:74:96:0f:9c:dd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152696C719E46D5202EEA288828D038B7D3FD514
        Validity
            Not Before: Mar 17 21:46:01 2026 GMT
            Not After : Mar 19 00:28:01 2026 GMT
        Subject: CN=33D87DAAF69D4E1C6896AF509FFB94711671D0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:f2:ab:1b:15:38:c8:70:04:6f:a3:4f:16:
                    64:95:7f:f3:86:bb:98:1e:25:da:f5:0b:99:b7:cd:
                    44:a5:0b:b3:9d:be:20:99:65:13:ad:27:9c:6b:03:
                    1f:8f:73:43:27:49:61:47:46:07:3a:d7:5d:b2:88:
                    38:ea:9a:f3:38:a0:d1:55:99:f0:2f:13:c0:17:e7:
                    29:80:03:48:0b:91:5a:1e:32:6a:74:ec:af:b2:ee:
                    d9:ee:e5:92:6c:80:b9:fe:f8:38:be:f1:56:6d:02:
                    02:3d:6c:ee:d6:17:1a:63:d5:96:f6:b1:57:b7:15:
                    1d:85:c0:50:f1:1a:04:92:74:2a:92:c9:55:10:06:
                    b4:f5:22:82:c8:11:e4:4d:b5:9d:15:9c:5e:09:0a:
                    fb:f7:f3:f8:45:ce:e7:f3:0b:be:30:ae:c6:3e:f8:
                    53:fc:21:1c:b2:b4:a6:96:50:d7:b0:3d:6e:f5:52:
                    79:e3:d9:72:9e:6b:4c:7f:d6:0e:3c:65:be:f1:0d:
                    1b:75:0b:78:e0:df:d3:9c:36:35:7a:87:de:16:a6:
                    48:a1:98:a6:e6:3e:fa:fb:22:57:d5:84:cd:34:bf:
                    3a:61:bf:24:f2:6d:bc:ed:7d:63:2c:aa:2e:ca:f0:
                    1d:72:35:c0:b7:79:6f:fc:ae:de:ca:d0:0d:07:12:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D8:7D:AA:F6:9D:4E:1C:68:96:AF:50:9F:FB:94:71:16:71:D0:FF
            X509v3 Authority Key Identifier:
                keyid:15:26:96:C7:19:E4:6D:52:02:EE:A2:88:82:8D:03:8B:7D:3F:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e0:56:68:0e:9e:c7:6a:b9:7d:40:25:eb:26:ef:bf:4f:3b:
         73:bc:ca:55:c5:c8:7f:ef:7a:79:dc:c5:13:20:79:47:62:a1:
         56:10:cb:07:12:87:1a:29:0c:7e:a1:7e:c6:3d:23:2c:0a:d1:
         4a:c9:de:e5:e9:4f:aa:01:a2:4d:02:dd:ea:dd:c1:aa:42:7d:
         9e:83:f1:15:f9:55:60:2d:2f:0b:b0:97:29:4b:7f:8c:6f:ea:
         52:6f:9f:76:c4:9e:38:1a:f6:72:23:ab:8b:20:d8:b3:ae:f4:
         17:27:e3:07:f3:14:11:61:a6:ce:de:42:a9:6e:9d:71:42:de:
         c7:d5:c6:0a:05:5f:f5:31:a1:3d:e5:6a:be:ec:2c:fc:55:fd:
         43:c3:0e:25:5d:a9:8e:86:19:2d:59:37:ab:cc:aa:04:3b:3f:
         48:d1:73:00:a9:d3:87:12:1f:31:e9:ff:a9:86:51:8e:8e:72:
         37:93:66:3f:0b:17:e9:da:5d:05:9d:05:f4:e0:76:83:d5:0f:
         13:76:a0:e3:cd:48:e1:8a:27:02:48:5c:50:8f:11:ef:a7:e2:
         97:df:43:f2:e9:bc:cb:1d:33:71:28:6d:d9:f3:89:7f:2e:87:
         05:4f:c6:0a:70:cc:32:b3:9a:ba:48:46:bd:87:b1:35:6f:29:
         09:6a:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----