Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
File:                     1370A03EC954E150A22BE78FA96515CB0158F5C1.mft (raw, json)
Hash identifier:          ClmvF9LtY5LyXkDDJ35XD1iDUITQN/0pPgZiZmPMBnc=
Subject key identifier:   53:45:D7:76:C5:A7:A3:EB:55:ED:BB:9F:A8:85:3C:F9:28:CE:D3:A2
Authority key identifier: 13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Certificate issuer:       /CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
Certificate serial:       6FD01F60B4E8EDC64D91CE758F906DA9A182930B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
Manifest number:          03AF
Signing time:             Wed 18 Mar 2026 04:15:42 +0000
Manifest this update:     Wed 18 Mar 2026 04:10:42 +0000
Manifest next update:     Thu 19 Mar 2026 06:16:42 +0000
Files and hashes:         1: 1370A03EC954E150A22BE78FA96515CB0158F5C1.crl (hash: eKSt0WcmIHBErn8nZ0HFvHyCYUQMuzjbXS5HvuZJ9uM=)
                          2: 34352e3138392e34302e302f32322d3234203d3e20323639353730.roa (hash: szDqMvBKaQ1Teofo2a2BL5lHE9bDGVfMwWHACqMHxIg=)
                          3: 323830343a363639383a3a2f33322d3438203d3e20323639353730.roa (hash: OFdMKU6S0WFAkTIMD3HdnrcuWydrwrNdgMiawRNqr5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d0:1f:60:b4:e8:ed:c6:4d:91:ce:75:8f:90:6d:a9:a1:82:93:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Validity
            Not Before: Mar 18 04:10:42 2026 GMT
            Not After : Mar 19 06:16:42 2026 GMT
        Subject: CN=5345D776C5A7A3EB55EDBB9FA8853CF928CED3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:85:3a:80:a6:7b:63:6c:09:ce:b8:2d:ef:
                    b7:29:27:d2:46:2b:3b:ac:8f:e3:7e:19:fd:ab:84:
                    3a:7f:32:3b:bf:43:f3:8f:96:fd:0d:af:da:d3:65:
                    de:d2:4d:19:3b:88:18:c4:41:10:65:37:75:a1:da:
                    48:92:f3:e5:df:5a:8f:b3:ae:63:5c:b1:dd:41:62:
                    88:fd:4d:73:36:d1:1c:d2:7d:0c:2e:84:f9:40:9a:
                    f2:8c:5e:ab:90:33:f7:c7:03:9a:26:34:c2:e4:30:
                    ac:0d:23:39:6b:65:29:e1:1f:d2:0d:25:26:4c:b2:
                    10:51:8e:91:63:7e:81:4d:51:49:c4:58:da:6a:10:
                    b6:b1:f1:86:d8:94:d8:14:88:5a:6d:62:50:fd:75:
                    50:af:53:f0:90:dd:11:b7:0e:c0:4d:fc:a1:5a:7e:
                    6c:1a:3e:72:5b:cc:dd:1e:16:d1:f7:4c:5f:ad:b3:
                    e7:fb:83:9c:96:6b:f9:6a:81:3d:49:5a:50:f5:a6:
                    62:71:d6:56:9d:6d:ee:6d:81:f9:22:ee:8d:b1:6e:
                    a7:cf:5f:b0:69:73:c6:eb:f0:18:0e:20:54:75:61:
                    7a:67:bc:92:a1:bf:fe:94:51:0f:18:0b:c9:10:0b:
                    d1:11:59:1a:1a:8d:6b:fa:2a:c0:08:f8:72:7a:83:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:D7:76:C5:A7:A3:EB:55:ED:BB:9F:A8:85:3C:F9:28:CE:D3:A2
            X509v3 Authority Key Identifier:
                keyid:13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:42:51:eb:73:4f:cb:76:cf:67:68:6a:b5:b6:e2:85:91:
         d9:ba:4e:4c:a9:32:2a:ae:55:25:03:22:f3:53:c6:ee:3d:88:
         9e:9a:a6:b6:07:0c:e8:e3:a8:6b:41:ff:6b:a2:cb:87:40:d5:
         5a:0d:df:cf:89:4e:19:5a:02:a9:9f:2f:9d:7f:c4:ee:3c:c3:
         f8:23:a2:9a:7b:1c:48:d2:e3:02:b1:b7:89:ea:fb:a8:29:fe:
         05:de:16:b1:bd:2c:e1:16:1e:35:3f:ed:00:57:34:d0:b5:70:
         95:c9:af:dc:b1:79:0d:e5:98:f0:87:dd:c0:87:b2:fd:64:fc:
         60:75:fd:b1:94:e7:aa:d1:99:57:19:5a:d3:b9:cf:b9:07:99:
         c4:54:3e:f4:50:02:80:0b:f1:e2:db:9e:d9:85:4b:fe:96:8b:
         4b:5d:41:86:35:64:65:96:f3:70:57:16:2e:66:20:20:80:82:
         2d:fc:b9:10:55:6d:74:f4:9a:86:ac:d3:31:c5:89:47:b3:d9:
         08:b4:35:55:6b:b9:9e:93:e3:88:88:93:8f:82:57:cb:dc:e4:
         32:50:20:82:3b:5e:ae:fc:d3:cc:53:20:fd:8c:e3:21:ff:15:
         f8:7c:e7:df:cb:0e:84:30:12:63:b2:65:a5:03:9b:a9:5f:5c:
         6f:0e:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:01:42 2026 by rpki-client