Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft
File:                     4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft (raw, json)
Hash identifier:          vmVnbTOnPrSi1TIAiyqn1tTxQCw2WrWnCjU9vy8R+gg=
Subject key identifier:   A8:6E:7F:BF:D4:DE:55:FA:A1:C9:99:29:0E:BA:E3:50:10:01:B1:50
Authority key identifier: 4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE
Certificate issuer:       /CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE
Certificate serial:       508D08B6937C5D89DEE52E6A198078AAB4B3DB94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft
Manifest number:          021B
Signing time:             Thu 05 Mar 2026 10:51:02 +0000
Manifest this update:     Thu 05 Mar 2026 10:46:02 +0000
Manifest next update:     Fri 06 Mar 2026 11:27:02 +0000
Files and hashes:         1: 4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl (hash: sFoX84Bvkn4RzEdCmsOrGMwA5rjKEsrF8J+hzRJs2gg=)
                          2: 323830343a333837633a3a2f33322d313238203d3e20323636343831.roa (hash: Xg7u5TEUOdwWJ3esMyZOH1cyXmBbJVQNXi5zpBvRxcE=)
                          3: 3137302e38332e38382e302f32322d3332203d3e20323636343831.roa (hash: vazIoFnlNXeHYVCsEop8LP0yUwkxfQF95vo1cY+uiDk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8d:08:b6:93:7c:5d:89:de:e5:2e:6a:19:80:78:aa:b4:b3:db:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE
        Validity
            Not Before: Mar  5 10:46:02 2026 GMT
            Not After : Mar  6 11:27:02 2026 GMT
        Subject: CN=A86E7FBFD4DE55FAA1C999290EBAE3501001B150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:06:67:95:89:d2:e2:9e:01:80:eb:ea:2e:
                    ed:08:56:1d:4e:de:b4:f3:1f:5c:d5:17:17:57:dd:
                    96:a8:c8:6b:3a:08:7a:2e:14:7b:4b:8b:44:64:ae:
                    ec:03:99:14:a7:1d:02:93:14:ff:52:1f:e5:41:0e:
                    0f:5a:4e:8f:b5:58:a6:e3:1e:82:81:3f:29:8a:8e:
                    71:f6:82:b6:ef:20:18:19:33:f1:f1:2e:ee:c5:88:
                    65:2f:90:4b:06:70:2e:6a:61:8f:6c:80:da:68:c6:
                    f4:2f:5a:19:5b:6e:cd:e1:19:c5:79:cb:82:33:31:
                    01:d6:17:48:21:ed:dd:07:c4:95:4f:12:c7:7a:b8:
                    1f:7f:dd:43:61:23:50:a4:98:f4:cb:8b:d2:f8:20:
                    95:cc:81:c7:e6:e7:d8:8b:97:8d:14:ea:3f:44:3b:
                    1f:7e:d2:89:d0:5f:90:97:b5:ee:48:f8:5d:b8:f7:
                    0a:8e:4b:c4:fd:e6:23:93:48:c6:80:ba:4a:44:a5:
                    36:0c:a9:82:6d:cd:7d:c2:9e:99:2d:ec:df:06:56:
                    47:65:4a:65:93:7f:33:45:2d:22:10:8e:55:d3:94:
                    de:0d:6c:2a:e5:c9:55:7e:bd:ba:b8:d8:a6:86:6d:
                    f9:f2:cd:94:5d:94:4c:5c:d4:0e:45:8d:66:ca:1b:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:7F:BF:D4:DE:55:FA:A1:C9:99:29:0E:BA:E3:50:10:01:B1:50
            X509v3 Authority Key Identifier:
                keyid:4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:80:54:9f:d5:7a:f9:64:24:45:1a:88:cc:3c:8d:2a:55:
         74:f6:e4:5c:b4:fa:73:e7:5f:60:84:b8:e2:b4:eb:8e:e3:b9:
         7a:84:ec:03:3b:1b:4c:77:97:46:b8:4b:49:bb:b9:14:6a:01:
         01:83:f5:3e:04:55:77:ec:48:94:85:b0:bd:34:49:52:ed:a8:
         5b:7d:bf:1e:b2:4e:65:61:2d:20:2b:1a:f0:e2:40:67:e8:a7:
         c4:c1:c1:c3:37:9a:3a:7d:c8:f8:32:c4:28:a1:5e:0d:9b:32:
         c8:e8:f0:65:c7:c4:84:d7:fd:44:cc:88:14:1e:bc:71:68:80:
         9e:bf:6e:3d:3d:bf:db:f9:99:7f:f3:39:6e:12:4c:b8:1c:e2:
         9c:d7:ce:b0:80:ab:bf:3e:65:e4:13:8d:3a:52:10:be:2b:42:
         7f:82:20:56:d6:5b:da:b9:91:91:44:f2:4a:ff:cb:63:3d:85:
         21:a0:2a:15:3f:2f:bf:69:f0:71:29:6d:af:c0:2d:cb:e5:36:
         5f:ae:78:7e:01:a5:0e:d9:32:77:ac:7b:2d:db:53:65:ac:8d:
         05:b6:5c:95:0e:bb:d5:04:d2:fd:0c:44:d3:a8:8e:70:18:f2:
         cf:59:05:e3:ec:69:36:54:32:1f:a1:55:89:70:cd:e0:91:15:
         a4:29:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:53:39 2026 by rpki-client