Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json)
Hash identifier: o3FI0DFeBiHB8HmhMQyhvO8Tjr/rfrNmeAZKMa4X9Zw=
Subject key identifier: 83:01:F6:29:C0:A7:56:AC:D6:82:09:A5:78:90:40:64:38:94:D8:86
Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A
Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A
Certificate serial: 288BA0386EAFCE7FF08EF77A30D6E12C11957822
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
Manifest number: 01D9
Signing time: Mon 30 Mar 2026 08:45:36 +0000
Manifest this update: Mon 30 Mar 2026 08:40:36 +0000
Manifest next update: Tue 31 Mar 2026 11:30:36 +0000
Files and hashes: 1: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=)
2: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: VhHJJ2edhKn4ftHIdPaNolc4MCx5oZKkJHFr3E+rItk=)
3: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: 37owpn1oHg26Zpzw7lQIe6x1wAahYXbDIwKoS2hbbNk=)
4: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: sw3oEatXepjwQCpuqahj/6Vt7v30jl4t1qqftgBJOXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8b:a0:38:6e:af:ce:7f:f0:8e:f7:7a:30:d6:e1:2c:11:95:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A
Validity
Not Before: Mar 30 08:40:36 2026 GMT
Not After : Mar 31 11:30:36 2026 GMT
Subject: CN=8301F629C0A756ACD68209A5789040643894D886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:f1:5e:21:7c:a3:a3:6e:5a:f7:55:86:96:
aa:1b:cc:ba:67:bc:f3:32:50:7b:87:1b:72:12:fd:
cd:a3:8e:fb:4c:82:9c:26:03:6f:39:89:ae:06:1c:
61:90:1d:ee:ae:8b:12:60:c9:35:5d:dd:30:b7:b3:
6e:b1:7c:20:e9:bb:d1:67:d2:fe:11:d8:17:70:72:
e0:53:1e:54:b1:3d:75:5b:6e:66:77:99:b1:74:ed:
68:95:ac:e1:1f:fb:ba:16:21:99:c0:a6:84:6c:aa:
4b:5f:2a:51:b1:a8:73:53:34:a6:51:8b:d1:76:de:
05:da:88:01:59:44:7a:05:4f:4d:e8:3d:71:81:a6:
89:b7:6a:ba:e6:58:e5:b0:25:bb:77:6c:27:29:85:
fb:3b:7c:34:9b:e7:90:76:b0:14:85:97:e7:e4:e9:
5a:e5:d4:8d:f2:f0:22:56:ed:f0:0b:0d:66:24:a3:
59:c0:64:b4:70:c7:31:d1:6a:b0:3a:84:05:30:3a:
81:3c:6d:98:01:db:23:6c:35:e2:87:41:2d:77:a3:
97:05:68:56:99:2e:90:9a:5f:d6:01:b8:34:92:46:
e0:8b:01:f8:b5:8d:9b:40:33:21:35:e8:a8:be:ac:
45:14:57:32:45:89:38:34:cc:85:13:ee:ac:6c:44:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:01:F6:29:C0:A7:56:AC:D6:82:09:A5:78:90:40:64:38:94:D8:86
X509v3 Authority Key Identifier:
keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:11:46:28:d3:ed:95:f5:53:df:60:f2:67:a9:11:5c:7f:2f:
bd:cf:60:ba:59:40:93:20:fd:ff:ec:69:f0:bd:8a:02:0a:12:
c9:d6:8d:c4:da:bc:57:41:20:41:7b:6a:3f:cc:6a:72:d0:c6:
21:06:36:d9:fa:f7:ab:87:8a:af:e3:ea:0a:a1:7d:6d:cd:a7:
f8:da:38:66:b3:65:3a:2c:79:59:a0:78:56:aa:17:f0:f5:dc:
34:3d:bb:72:58:05:19:7f:56:ba:21:94:a7:46:0f:c6:b3:32:
97:42:95:2d:e1:42:b7:1e:c0:39:fa:ad:53:02:1b:8e:ca:01:
e4:68:cc:01:6c:b7:a9:2a:f3:61:94:58:05:53:fb:e8:56:6d:
57:6e:30:52:76:75:ab:28:c7:83:5b:03:8f:86:3a:14:70:19:
67:00:8a:a6:bd:03:f7:ec:cf:37:e5:ce:54:14:cc:48:dc:df:
40:97:ac:78:41:46:01:0d:b8:23:1d:7d:c1:8e:85:1f:0c:65:
96:c4:56:9f:9f:99:60:5a:7e:80:3a:24:01:a0:bc:4e:30:13:
00:c8:e8:be:f3:41:b2:04:a1:a1:42:3d:b5:eb:31:d7:da:9c:
33:d8:b2:81:d4:61:f2:fa:4e:42:9e:b5:94:5d:35:5a:3f:65:
b5:cd:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 11:18:16 2026 by rpki-client