Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.mft
File:                     224F89CF4DCD6D8502746106CEF010C054C45395.mft (raw, json)
Hash identifier:          FBAUu072vrg40pSZsbqxN8cvYeWy1VD4PPA3EbeClyk=
Subject key identifier:   E4:FA:2C:29:D5:B6:99:F9:F3:3F:7A:CB:AE:7F:15:56:11:5B:97:D1
Authority key identifier: 22:4F:89:CF:4D:CD:6D:85:02:74:61:06:CE:F0:10:C0:54:C4:53:95
Certificate issuer:       /CN=224F89CF4DCD6D8502746106CEF010C054C45395
Certificate serial:       362D95BE5C4CD143296EFDE3B5F5E4377519C81C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.mft
Manifest number:          0129
Signing time:             Fri 21 Aug 2026 09:29:15 +0000
Manifest this update:     Fri 21 Aug 2026 09:24:15 +0000
Manifest next update:     Sat 22 Aug 2026 11:01:15 +0000
Files and hashes:         1: 3137302e38322e35322e302f32322d3232203d3e20323636343334.roa (hash: wWeWU05MOOj6hMpby+AwEgMIu10o1tRd4+LBsSZDgFE=)
                          2: 3137302e38322e35322e302f32342d3234203d3e20323636343334.roa (hash: GJRojiTsl+h5uSVjKI5XDyPsHz+ObP7+TPwkR06o/6M=)
                          3: 323830343a333763303a3a2f33322d3332203d3e20323636343334.roa (hash: NK+CioEJHjy4r+fSeI/dly5ptkXa43z6GvO7RlOylvg=)
                          4: 3137302e38322e35322e302f32332d3233203d3e20323636343334.roa (hash: WxeN9NIq1sLUYyl8a06Ps8J+0hE4AuFsR5nhhKjMAv0=)
                          5: 3137302e38322e35352e302f32342d3234203d3e20323636343334.roa (hash: zS0BqPbFdQF2RaBqkVXh4cV7GfQsD1iCj0fvBsPQvEk=)
                          6: 224F89CF4DCD6D8502746106CEF010C054C45395.crl (hash: 5Xi0IcFhkTMytshxyrAt+7f+70lipMaShZbGHkjZ/4Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2d:95:be:5c:4c:d1:43:29:6e:fd:e3:b5:f5:e4:37:75:19:c8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=224F89CF4DCD6D8502746106CEF010C054C45395
        Validity
            Not Before: Aug 21 09:24:15 2026 GMT
            Not After : Aug 22 11:01:15 2026 GMT
        Subject: CN=E4FA2C29D5B699F9F33F7ACBAE7F1556115B97D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:a8:8f:25:08:95:5d:b6:c7:97:71:12:e0:
                    92:3d:6d:14:f7:63:15:98:a9:34:a4:52:6e:d5:4d:
                    3c:65:86:57:42:a8:25:ba:54:67:7a:82:73:75:a1:
                    fb:04:6d:bb:93:d7:b0:3e:a5:8e:2b:76:c5:9b:61:
                    ee:4f:ad:8e:b2:30:78:2b:42:88:8e:52:db:bb:85:
                    69:2d:e1:ca:e7:10:a8:86:3c:74:5e:f5:fc:23:33:
                    80:aa:d5:60:79:c9:06:89:50:6c:cf:c4:d5:a8:3c:
                    79:f1:74:46:7a:96:ad:4b:62:02:51:75:2f:1b:63:
                    33:af:a2:94:fc:18:2a:e0:90:74:d1:45:e0:3f:e1:
                    04:2a:72:18:bd:38:dd:b8:3a:6f:75:ab:12:bb:30:
                    7b:38:c7:4f:1f:4b:d7:30:eb:3a:9e:8a:c7:44:9e:
                    83:13:33:5b:dd:25:47:69:51:e7:06:f2:73:27:45:
                    f7:d7:5a:af:51:f8:9c:51:ce:20:cd:7d:a5:7b:56:
                    9b:f3:b1:7b:4c:cf:e0:4f:8c:31:45:2f:7f:dd:be:
                    61:63:a1:46:b9:50:4b:93:11:c9:df:1a:da:b1:51:
                    53:22:49:d1:81:9f:88:d3:85:f1:07:0f:2e:a6:62:
                    18:1d:3a:f3:c2:67:c3:cb:8c:1e:41:46:5c:8c:74:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:2C:29:D5:B6:99:F9:F3:3F:7A:CB:AE:7F:15:56:11:5B:97:D1
            X509v3 Authority Key Identifier:
                keyid:22:4F:89:CF:4D:CD:6D:85:02:74:61:06:CE:F0:10:C0:54:C4:53:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/224F89CF4DCD6D8502746106CEF010C054C45395.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/0/224F89CF4DCD6D8502746106CEF010C054C45395.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:42:81:a0:e3:9e:28:a4:7d:67:c1:a2:07:ec:f1:2f:1b:da:
         11:32:7c:de:eb:56:27:48:57:38:a0:ec:d3:d6:d3:7d:d2:5d:
         88:16:35:37:72:91:e7:bd:d4:d3:18:b8:34:05:d4:83:f9:b4:
         6f:05:1a:91:6d:bd:b8:2c:eb:49:da:28:1e:a9:22:9a:b1:d9:
         04:a7:23:1c:1b:42:bf:d0:6a:e5:5f:23:a9:25:f8:3f:15:05:
         7c:c2:98:a8:3e:a1:04:72:a2:90:9b:f4:7b:d3:10:d8:02:2b:
         67:f0:cb:d7:07:88:e9:b6:8e:35:c8:72:df:9d:b5:88:be:fb:
         d6:a7:05:96:c1:8b:a5:01:d5:12:0f:45:53:45:0d:08:c2:2a:
         d7:c4:5b:0c:e8:24:e6:8d:fc:d8:bf:8e:d2:f0:6a:5a:71:0b:
         e9:6b:3e:a0:10:75:9e:e7:44:6b:3f:ff:01:40:ac:be:cd:b6:
         e0:a0:a4:a8:79:48:76:50:20:11:ea:90:11:1d:91:a8:d6:b1:
         39:73:fe:e4:92:2d:4d:22:be:52:d0:26:99:10:f2:6f:cb:64:
         04:c9:3a:35:18:77:82:53:66:28:20:b5:6f:c1:1a:62:87:ea:
         7e:c9:aa:0c:c7:77:06:52:69:63:54:a3:c9:94:8a:c7:cf:21:
         bc:92:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----