Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
File:                     AA5A260F505713B62C4766443558AE922FFFC6F7.mft (raw, json)
Hash identifier:          0V9Db+sjlqrXQX8FaerOqEhfHGhNR4KwBKLx9JwZ66c=
Subject key identifier:   7A:25:37:E2:B4:F4:EF:E3:BA:43:29:9F:1C:0C:AF:E8:A9:EA:CE:92
Authority key identifier: AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7
Certificate issuer:       /CN=AA5A260F505713B62C4766443558AE922FFFC6F7
Certificate serial:       0AF3280D86946F851E434C3F9BA375E6486AA123
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft
Manifest number:          03A0
Signing time:             Fri 13 Mar 2026 05:03:47 +0000
Manifest this update:     Fri 13 Mar 2026 04:58:47 +0000
Manifest next update:     Sat 14 Mar 2026 05:03:47 +0000
Files and hashes:         1: AA5A260F505713B62C4766443558AE922FFFC6F7.crl (hash: HN63GQZQ7eqF6S/MG5xm+YbfYCwtPNUaJ0IJOZcxerI=)
                          2: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: huEKz5Rv0/DL3utheC6XMNSS9klyFfCicwNP2ck+n1E=)
                          3: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: 6aMUO8WcGzYUv+SRr//9ZHFDrGAcuwV7cGI7oiGorPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f3:28:0d:86:94:6f:85:1e:43:4c:3f:9b:a3:75:e6:48:6a:a1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA5A260F505713B62C4766443558AE922FFFC6F7
        Validity
            Not Before: Mar 13 04:58:47 2026 GMT
            Not After : Mar 14 05:03:47 2026 GMT
        Subject: CN=7A2537E2B4F4EFE3BA43299F1C0CAFE8A9EACE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:13:02:0f:08:04:42:8a:a6:41:95:d8:69:
                    7b:3c:e7:73:2f:34:39:4a:8d:cb:55:39:b4:ff:f4:
                    09:74:27:04:bc:a4:80:53:f0:5d:90:d8:ec:b0:e4:
                    c2:fc:99:ab:0d:50:66:fb:7c:57:fd:df:eb:06:87:
                    cd:77:9f:ff:18:55:9d:04:e9:a5:df:5c:a7:f8:75:
                    3b:1e:01:c3:24:e3:0b:4e:fe:26:df:14:5d:54:52:
                    40:77:ac:13:9e:6c:e4:05:bf:7f:d1:84:f9:01:85:
                    70:5c:02:d5:ba:1a:bb:25:71:2b:a9:a6:4b:9e:33:
                    7c:ae:70:0b:95:65:9b:29:52:f1:44:9d:ba:0a:13:
                    81:29:bb:bb:51:0e:dd:01:69:f8:be:e5:57:5e:38:
                    e8:ec:28:8d:d6:cf:4f:81:bb:ce:d5:fa:17:1a:8d:
                    7d:d5:f9:73:3f:ef:79:da:12:12:27:fa:e7:5e:09:
                    2e:c9:b4:b3:d7:14:a2:4b:66:71:e5:5d:5d:9b:40:
                    8d:7f:dd:67:9b:0a:9c:a1:41:9b:31:4e:ff:7d:8a:
                    d4:06:5e:21:c2:86:00:ff:7c:d0:0b:cf:cf:48:05:
                    0f:92:ab:68:aa:2f:75:f2:4f:1f:f4:81:f3:25:ca:
                    6d:a6:b6:eb:43:b7:eb:f2:19:08:f2:a8:e8:b6:29:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:37:E2:B4:F4:EF:E3:BA:43:29:9F:1C:0C:AF:E8:A9:EA:CE:92
            X509v3 Authority Key Identifier:
                keyid:AA:5A:26:0F:50:57:13:B6:2C:47:66:44:35:58:AE:92:2F:FF:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA5A260F505713B62C4766443558AE922FFFC6F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/1/AA5A260F505713B62C4766443558AE922FFFC6F7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:04:27:31:ce:d8:8e:4a:0f:2e:dc:ef:e7:31:58:08:f2:
         77:cd:49:f3:6c:68:a6:35:67:11:ee:43:c3:eb:b5:69:4b:ed:
         3e:38:ad:c7:55:d7:40:82:ad:b6:5f:04:2e:a6:37:ba:bd:32:
         a1:cc:48:48:de:89:52:27:48:60:4c:25:4b:30:5b:2c:ee:18:
         b7:9e:a6:00:01:ec:44:fe:c7:b2:9f:1a:97:ef:cb:fe:10:70:
         8f:3b:0b:b8:c5:73:c9:c0:ae:bc:d1:e1:b7:cd:28:be:9a:d0:
         f5:a9:bf:43:0e:e6:16:b1:be:9c:d4:a3:35:92:14:a9:a5:89:
         53:54:36:23:ab:65:09:e5:3d:1e:dc:fd:4c:14:af:73:94:51:
         ba:ab:5b:2e:e3:ca:f9:d1:fe:87:dd:a7:4f:02:59:82:b7:85:
         a1:29:8d:69:04:c7:68:d1:8c:ca:8a:b9:4f:a6:7a:3e:91:32:
         aa:2f:0d:0c:73:e3:1f:f1:15:de:87:90:a8:29:49:41:71:3b:
         4d:fb:05:7e:3d:d3:3a:9f:d3:a2:a5:3f:96:dd:4d:71:ad:a0:
         27:68:b0:2d:71:a3:60:7a:54:a7:38:d4:8e:c9:17:16:af:f7:
         93:ca:c8:d4:b0:8f:3c:19:90:e5:a1:12:ad:e0:79:a3:10:d0:
         09:a9:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----