Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
File:                     E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json)
Hash identifier:          HLFvIhGwtZAyf7jm4dH5uUtLcl1IZNO9gR9v11emzJA=
Subject key identifier:   11:47:A5:BD:94:F4:1E:7A:39:75:C9:5B:F1:FB:DC:54:59:16:30:BB
Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Certificate issuer:       /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
Certificate serial:       7CA1FBC50F6C29307E43E76B24BF0BBCB99CDC70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
Manifest number:          0473
Signing time:             Sun 09 Aug 2026 08:41:55 +0000
Manifest this update:     Sun 09 Aug 2026 08:36:55 +0000
Manifest next update:     Mon 10 Aug 2026 11:40:55 +0000
Files and hashes:         1: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: vsOF3/Jtv8IAz+LvjJnklTsbgl0U6j4wSWqa8cvRFic=)
                          2: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: H2dYrUQbz6InYD+dVqzdJ4A4AyL//RvnBVMMKMWA/lo=)
                          3: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: tb+FWvF4YQAZqihzeERHHdoqrZGzkryEKzzrbeylkh0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a1:fb:c5:0f:6c:29:30:7e:43:e7:6b:24:bf:0b:bc:b9:9c:dc:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Validity
            Not Before: Aug  9 08:36:55 2026 GMT
            Not After : Aug 10 11:40:55 2026 GMT
        Subject: CN=1147A5BD94F41E7A3975C95BF1FBDC54591630BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:ca:f3:24:19:3e:ad:f9:cd:07:db:e6:26:
                    ec:18:b7:c0:8e:fb:45:11:00:19:75:c6:22:e5:ae:
                    b9:16:d4:76:1f:82:24:e4:96:cd:93:96:db:53:d3:
                    86:cb:03:26:f2:05:80:7f:05:b9:2a:a5:55:b0:ff:
                    7b:78:63:11:88:5c:93:88:18:8d:1d:3c:b3:3d:33:
                    b0:ca:53:f7:6f:b8:6f:bb:2d:ff:92:1b:52:a1:5e:
                    52:56:12:5b:59:e9:9f:82:3d:c6:12:f4:57:77:b1:
                    96:f3:ec:e3:8f:ae:22:73:25:10:4d:d1:31:51:49:
                    7b:b1:05:ca:a4:9a:14:b5:74:bb:a4:65:4e:58:ed:
                    09:e7:04:43:f2:68:73:03:5e:ab:aa:fc:c1:f2:45:
                    63:46:c4:6b:4c:98:87:fb:67:8f:a0:64:91:6f:19:
                    8a:25:c4:2e:b2:22:b6:23:41:0c:01:8f:4d:29:43:
                    a3:2c:97:c9:48:d1:9e:68:95:1e:d0:5d:4c:e1:e9:
                    20:d5:ed:b4:8b:dd:6a:dc:1b:53:5b:78:3e:11:58:
                    30:4e:1b:e0:56:ae:dd:22:c7:b0:c4:49:35:9f:4f:
                    cc:0e:8b:66:52:04:a9:84:ab:6d:f7:d1:74:c0:96:
                    df:a3:bf:45:d8:3c:74:21:f7:35:a1:49:7b:1a:02:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:47:A5:BD:94:F4:1E:7A:39:75:C9:5B:F1:FB:DC:54:59:16:30:BB
            X509v3 Authority Key Identifier:
                keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:30:e1:0a:f0:b2:20:f4:60:3e:ed:74:8e:be:5c:e4:3d:6b:
         b2:ca:b1:0c:64:67:d4:2c:d5:8a:cb:b7:e5:c3:e3:f5:31:c1:
         70:cc:2d:c3:28:61:34:e2:87:92:75:5f:05:68:aa:1d:bb:03:
         24:9f:85:94:e7:1f:56:39:6e:45:29:1d:70:36:59:9e:44:61:
         99:fe:47:3e:31:3a:00:02:1a:fd:06:8b:46:d1:c5:c1:ca:d8:
         74:57:33:50:58:9e:dc:a8:35:b5:61:80:26:24:1b:f6:71:ac:
         13:7f:10:bd:99:7a:56:56:f8:1e:82:d8:c7:d9:5b:3a:a8:17:
         28:b1:eb:08:c2:6f:fa:1a:10:6b:ee:c9:bf:50:34:a2:91:53:
         85:49:72:32:52:58:fc:8d:92:ee:19:bc:78:4a:f7:e7:23:55:
         69:c2:3d:87:b9:e7:06:ed:ec:55:a8:e7:b7:ff:94:df:3b:d1:
         44:4e:f6:71:4b:aa:1b:a2:42:ec:b5:06:25:bc:c7:18:fe:95:
         91:7e:9d:e7:9d:cc:c8:d3:66:e5:37:f9:c4:66:63:95:f6:3e:
         c5:ab:9a:99:5b:ce:a8:4d:82:71:f0:2a:e8:8d:7e:a8:e6:68:
         bc:7c:2a:84:4c:8c:35:f7:23:79:fa:6f:2f:a8:27:35:9d:06:
         3f:9d:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----