Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
File:                     5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json)
Hash identifier:          FIGE+G6QyBR+a1JJ82qo7uaaE4sN5Izu95I3rcVLcGU=
Subject key identifier:   A8:B5:9B:B5:50:F0:F4:A1:E0:6D:59:0C:B7:0C:99:F0:B2:0A:09:15
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       419CD3B6EBA15682A424D2DB30BB0622CA99E497
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
Manifest number:          040F
Signing time:             Tue 17 Mar 2026 20:10:41 +0000
Manifest this update:     Tue 17 Mar 2026 20:05:41 +0000
Manifest next update:     Thu 19 Mar 2026 00:05:41 +0000
Files and hashes:         1: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=)
                          2: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: gfPfqd+6YPTNnfH4QcWMSOulj3TGCamp8EwjUQN+32A=)
                          3: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9c:d3:b6:eb:a1:56:82:a4:24:d2:db:30:bb:06:22:ca:99:e4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Mar 17 20:05:41 2026 GMT
            Not After : Mar 19 00:05:41 2026 GMT
        Subject: CN=A8B59BB550F0F4A1E06D590CB70C99F0B20A0915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:3b:e1:0d:29:8b:fe:54:37:66:bc:7e:97:
                    c7:42:91:f5:33:3e:b9:f9:b3:42:2a:d1:4f:6f:6f:
                    7c:81:63:2b:e8:1b:43:73:b7:17:58:fd:f6:6c:a4:
                    93:9e:77:03:ed:4f:9c:a1:12:1b:16:12:4b:1a:da:
                    3b:4e:9d:34:24:a5:13:57:11:dc:11:75:68:3b:fd:
                    8e:b3:b5:41:c3:ac:b4:45:a5:72:e1:e4:c3:0d:d4:
                    f3:4b:37:94:a8:3d:ad:4c:8a:13:47:60:26:6b:65:
                    3f:86:a7:21:6c:33:4f:a6:74:c3:79:34:69:37:de:
                    d7:4c:53:da:81:f4:1c:14:9c:11:67:ae:86:3f:ac:
                    8f:55:c0:ec:1a:49:62:fb:51:e4:30:56:7b:79:df:
                    52:df:fe:80:55:b3:b9:d2:6c:30:99:e9:6a:6f:eb:
                    90:3a:b6:da:20:74:70:fc:3a:65:e2:6b:59:ea:c3:
                    ea:9c:3d:21:86:6b:10:0e:cc:d1:a1:03:96:f6:82:
                    67:46:36:5e:fc:de:df:2a:0c:93:a7:20:94:fd:b0:
                    2d:1e:f0:e6:72:bd:d8:6b:97:e4:f3:03:94:38:96:
                    f7:ba:d4:55:73:28:82:f9:61:ee:76:55:4c:a7:4e:
                    2e:bf:e4:1e:22:1f:43:fc:71:47:eb:63:47:c6:d5:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B5:9B:B5:50:F0:F4:A1:E0:6D:59:0C:B7:0C:99:F0:B2:0A:09:15
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:22:ae:0d:08:0a:6e:d0:82:64:e3:f7:0a:37:5c:28:55:21:
         1f:84:54:7d:62:be:15:90:df:a0:45:aa:de:55:b5:51:6b:b0:
         6f:77:97:f4:c3:9d:8f:18:2a:1d:82:43:a4:d4:01:83:a8:3a:
         79:64:4e:72:9e:70:a3:23:5b:a3:b2:59:05:c5:1f:83:20:c4:
         a2:33:77:61:8e:11:93:12:d1:c5:44:5f:bc:ad:c0:be:25:93:
         95:8a:f0:5b:0a:ce:65:e9:88:e3:47:da:d7:53:4a:48:48:43:
         07:1b:ce:df:c1:ec:5d:57:6d:5f:95:66:75:ac:80:fe:9a:89:
         ba:75:56:b8:94:75:e8:63:46:95:f0:ed:b5:c7:c2:e8:97:90:
         9b:43:ed:8f:2c:f5:88:73:70:0b:ae:a4:48:c7:2d:ce:41:32:
         72:8c:28:f1:f4:65:be:fb:6a:48:67:ee:37:60:f0:78:21:13:
         09:12:26:78:ae:77:5b:13:fd:69:9f:5a:4c:b2:aa:9c:3c:8a:
         d3:e3:4f:68:6e:44:51:35:78:9d:99:d6:81:c2:c8:1b:16:02:
         2f:4f:c2:e5:6a:47:74:ca:5b:98:4f:bf:e4:a6:da:26:2e:f5:
         c0:49:66:ce:b8:26:84:1d:e3:ab:6f:bd:e8:50:00:6e:1b:c7:
         63:26:ce:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQZzTtuuhVoKkJNLbMLsGIsqZ5JcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG
MERCRUQwMzAeFw0yNjAzMTcyMDA1NDFaFw0yNjAzMTkwMDA1NDFaMDMxMTAvBgNV
BAMTKEE4QjU5QkI1NTBGMEY0QTFFMDZENTkwQ0I3MEM5OUYwQjIwQTA5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tTvhDSmL/lQ3Zrx+l8dCkfUz
Prn5s0Iq0U9vb3yBYyvoG0NztxdY/fZspJOedwPtT5yhEhsWEksa2jtOnTQkpRNX
EdwRdWg7/Y6ztUHDrLRFpXLh5MMN1PNLN5SoPa1MihNHYCZrZT+GpyFsM0+mdMN5
NGk33tdMU9qB9BwUnBFnroY/rI9VwOwaSWL7UeQwVnt531Lf/oBVs7nSbDCZ6Wpv
65A6ttogdHD8OmXia1nqw+qcPSGGaxAOzNGhA5b2gmdGNl783t8qDJOnIJT9sC0e
8OZyvdhrl+TzA5Q4lve61FVzKIL5Ye52VUynTi6/5B4iH0P8cUfrY0fG1Z+fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUqLWbtVDw9KHgbVkMtwyZ8LIKCRUwHwYDVR0j
BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw
RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhHc3YvMC81
RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhSKuDQgKbtCCZOP3CjdcKFUhH4RUfWK+FZDfoEWq3lW1UWuwb3eX9MOdjxgq
HYJDpNQBg6g6eWROcp5woyNbo7JZBcUfgyDEojN3YY4RkxLRxURfvK3AviWTlYrw
WwrOZemI40fa11NKSEhDBxvO38HsXVdtX5VmdayA/pqJunVWuJR16GNGlfDttcfC
6JeQm0Ptjyz1iHNwC66kSMctzkEycowo8fRlvvtqSGfuN2DweCETCRImeK53WxP9
aZ9aTLKqnDyK0+NPaG5EUTV4nZnWgcLIGxYCL0/C5WpHdMpbmE+/5KbaJi71wElm
zrgmhB3jq2+96FAAbhvHYybO2w==
-----END CERTIFICATE-----