Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
File:                     1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json)
Hash identifier:          KBuaA1t/2A1w4XS9A8CtB+sS1RkWfmiacDYtrrWXXio=
Subject key identifier:   60:EE:1F:C1:E7:4C:BD:C6:05:7E:8B:33:9B:38:CD:59:8E:51:60:44
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Certificate issuer:       /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial:       2C8A756B4C8B01F12E73404ABFB5A0EA3BE44868
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
Manifest number:          03A7
Signing time:             Wed 18 Mar 2026 01:25:42 +0000
Manifest this update:     Wed 18 Mar 2026 01:20:42 +0000
Manifest next update:     Thu 19 Mar 2026 01:25:42 +0000
Files and hashes:         1: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: oh3940Qcjknuk+jChQ6Y3ybJKVOUqxUcjP5r77qjHuo=)
                          2: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: +IGFqJkjNSWZd2bOOEzKPgSNY5qaC9rAK5gZ1T+N+68=)
                          3: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: HttORUTK54DXuvbzznZ1KonA2g6/yrbTgqMwqK2+H60=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8a:75:6b:4c:8b:01:f1:2e:73:40:4a:bf:b5:a0:ea:3b:e4:48:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Validity
            Not Before: Mar 18 01:20:42 2026 GMT
            Not After : Mar 19 01:25:42 2026 GMT
        Subject: CN=60EE1FC1E74CBDC6057E8B339B38CD598E516044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:35:7d:8b:71:19:6a:9e:0c:2a:7d:2c:9f:fe:
                    6e:58:33:bc:6f:99:e2:86:6e:9a:07:1c:8c:1c:0f:
                    b6:84:ab:7b:2c:61:a9:b9:00:f0:d5:bd:3b:cf:88:
                    ff:47:ce:a1:f0:46:2f:2f:77:d0:16:c8:8a:9d:10:
                    9e:bf:1c:e0:5b:b3:2c:06:bc:6d:7f:91:5b:1d:88:
                    9a:d4:06:63:5d:a4:c4:27:cb:66:c5:f3:d4:bc:5f:
                    be:a4:01:b0:af:de:b4:d0:8a:35:5c:b1:93:44:de:
                    99:17:72:a8:e1:9e:b0:97:55:9e:d3:0e:20:49:ed:
                    b6:11:44:7b:96:a3:55:b2:02:e7:18:4e:1e:d5:8c:
                    a3:2f:d3:5b:c4:a4:dd:a1:00:b3:81:65:e3:38:0b:
                    19:ae:40:eb:c6:9d:b0:81:ea:ff:9e:7d:e6:b6:1c:
                    8c:08:25:6b:c3:0a:c7:a4:fc:be:9e:c7:39:ac:be:
                    87:3e:6a:83:d8:9b:de:6f:64:79:4b:20:f7:e7:78:
                    fc:b1:f1:99:f1:43:7d:44:61:da:b4:9f:47:7e:89:
                    48:12:4d:ff:97:89:bb:2e:61:19:f6:7b:1d:9f:7f:
                    2d:93:fb:90:88:12:98:d1:69:8a:40:59:4a:e6:89:
                    da:2a:d7:78:52:5f:c6:3a:a9:b7:72:55:52:10:cb:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:1F:C1:E7:4C:BD:C6:05:7E:8B:33:9B:38:CD:59:8E:51:60:44
            X509v3 Authority Key Identifier:
                keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:c8:66:93:3e:f1:7b:c8:0a:9a:44:1a:90:62:63:25:5a:
         9d:05:f8:b6:85:ae:46:09:9a:90:1f:86:df:09:b7:5d:a2:c7:
         ba:26:c6:2b:6f:a5:41:0a:32:90:78:2d:d6:b6:2e:29:4f:49:
         1b:a9:78:97:b9:ed:e1:d4:f7:14:bf:04:e6:ee:7c:2e:ea:60:
         fc:fd:dd:1e:ae:4c:e0:95:b2:46:8a:cb:03:06:e2:b0:79:d7:
         07:93:3b:92:f7:35:de:9d:0b:6f:30:1a:04:0a:f4:61:de:5f:
         ef:a1:70:07:bb:09:4c:14:f3:d0:26:6f:20:57:65:91:99:5b:
         4c:c9:32:04:05:ad:ba:35:69:2d:85:71:bf:fc:b0:8f:23:90:
         89:ce:5c:83:c1:dd:26:20:fa:2e:cf:74:ed:20:c3:58:b1:a9:
         b4:2b:27:90:66:0a:68:0e:3d:2d:09:ed:91:74:b5:94:9b:b8:
         dd:25:b7:0f:b8:f7:05:cd:cc:0d:26:f5:6d:de:c1:6d:53:6f:
         11:27:5d:1d:9e:9f:85:b4:f7:14:73:f4:ad:15:31:a5:21:c0:
         94:9c:a8:50:2d:76:9e:e7:ff:40:6f:bc:4f:c1:a1:3d:f8:3a:
         02:6e:d8:56:26:f9:16:aa:2a:d0:6d:6d:94:73:3c:42:45:b8:
         59:c3:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----