Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
File:                     E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft (raw, json)
Hash identifier:          apMJiPJmV4EEWaozfUQ349RfHgc8EtlHTEQ6k5lNim8=
Subject key identifier:   3A:6C:FC:A0:47:08:4E:5C:BF:93:34:DA:25:71:FF:38:F2:E8:B1:92
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       34A07300080E0A1E2B09E2079FD85A943901D7E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
Manifest number:          03A2
Signing time:             Tue 17 Mar 2026 20:50:41 +0000
Manifest this update:     Tue 17 Mar 2026 20:45:41 +0000
Manifest next update:     Wed 18 Mar 2026 23:47:41 +0000
Files and hashes:         1: 3133382e39342e34342e302f32322d3234203d3e20323634313235.roa (hash: /NNSuwtSTAZex6aVtEcltvfx1O5f3eY00+oED5jPTmA=)
                          2: E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl (hash: BL7UW8KmFTzoR/1UxhMNIqEktB2oVFYj75ZyOkx1kUs=)
                          3: 323830343a323264343a3a2f33322d3438203d3e20323634313235.roa (hash: A353h4nPQV5mug8PsxdBSNnozUQ5PiKI50pWLOozO7M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a0:73:00:08:0e:0a:1e:2b:09:e2:07:9f:d8:5a:94:39:01:d7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: Mar 17 20:45:41 2026 GMT
            Not After : Mar 18 23:47:41 2026 GMT
        Subject: CN=3A6CFCA047084E5CBF9334DA2571FF38F2E8B192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:83:72:fd:51:b1:3c:b9:d1:91:9a:a5:15:
                    4d:0f:05:8f:5d:d9:3e:ee:30:33:14:16:ea:29:f3:
                    92:8c:ac:19:97:97:4f:31:d5:88:f2:fc:41:52:9a:
                    52:c5:6d:1c:1c:b5:62:05:70:b3:02:26:db:13:11:
                    d4:42:38:2a:54:11:98:9c:d8:6c:41:bb:ac:cc:9c:
                    88:8a:91:5f:14:43:e2:cb:57:ab:c7:c7:0f:f8:6a:
                    1f:d8:66:96:9d:84:d4:aa:4e:88:aa:f0:15:57:9a:
                    d5:28:22:c7:05:e7:9d:b7:8c:9d:fb:61:8e:41:29:
                    12:dd:46:f8:a8:d6:fe:99:51:65:e8:95:40:98:41:
                    45:e8:9c:91:36:52:dd:af:dd:0f:62:03:18:c6:1c:
                    0e:af:75:d9:ae:09:69:8a:07:fd:97:d7:3e:b2:ce:
                    36:fa:c4:37:93:c2:51:23:ae:5a:42:59:e8:83:5f:
                    1c:68:77:e8:cd:b5:ec:75:e3:ce:35:e1:66:fc:a3:
                    7b:f7:4e:f4:61:ad:5e:5c:03:05:ea:9b:ec:e6:3d:
                    1e:b4:9d:c2:5d:f7:e3:c2:7d:11:90:94:ea:5c:0b:
                    fa:f0:b7:81:86:f3:c2:d8:3c:d7:d1:a0:a6:d8:15:
                    99:dd:01:59:c1:fe:0a:2b:bc:44:06:61:1d:b9:73:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6C:FC:A0:47:08:4E:5C:BF:93:34:DA:25:71:FF:38:F2:E8:B1:92
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:9c:fd:ab:b6:ab:c9:47:e6:86:fd:c9:c5:1f:52:55:f4:
         e5:dd:58:03:76:e7:9b:84:4f:55:ff:9d:be:e0:5b:66:88:97:
         f7:47:42:66:20:04:ab:e1:1e:d0:c1:c0:e7:f9:66:86:63:64:
         f1:e5:98:bc:b7:1e:3e:0b:97:f0:e0:af:25:1d:21:b0:14:67:
         ba:43:d1:e2:18:9b:62:2b:28:19:e2:e0:e9:bc:a1:5e:e1:d5:
         62:b5:3e:c8:58:61:a6:d3:6b:a8:b3:6d:61:0a:87:d5:cb:73:
         45:d1:dc:10:d3:2d:7e:b4:4e:a5:08:0a:5d:c4:20:a2:cc:88:
         3a:4c:80:30:c1:85:2c:54:e4:34:c7:87:d2:8e:5f:37:22:90:
         0c:ed:35:9c:51:e2:26:23:a3:bd:82:af:16:af:f2:24:44:f1:
         70:90:90:bc:4b:33:1c:7e:29:82:03:07:cc:ab:e8:22:c5:f3:
         4f:30:d5:71:3d:6b:37:3e:57:7e:5a:99:60:f3:f0:b8:3d:e7:
         39:00:9c:02:74:86:6a:05:ba:e7:a0:61:9f:0e:24:e3:08:cd:
         97:00:3d:0c:9b:94:54:9c:75:59:b1:ad:75:b4:bb:3c:3a:6c:
         e8:1b:cf:15:f5:25:1a:40:1b:08:d7:ee:f6:3b:42:ac:b8:8f:
         4b:a0:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----