Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
File:                     2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json)
Hash identifier:          X3UCS5Tb5x4unTUhcnV1wbG/N68x6jTAvwAzKuswxZ0=
Subject key identifier:   7D:34:56:1E:09:3B:FD:8A:5A:3D:B7:83:68:E4:FA:80:C7:1F:D7:E3
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Certificate issuer:       /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial:       3B2D452C65989A86C39610219BC73A8A2090FEC0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft
Manifest number:          0434
Signing time:             Wed 18 Mar 2026 08:10:43 +0000
Manifest this update:     Wed 18 Mar 2026 08:05:43 +0000
Manifest next update:     Thu 19 Mar 2026 09:16:43 +0000
Files and hashes:         1: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: lsPfySBrQRokkFGPXoHfXtf83HsA13dTki6xitZ2OTw=)
                          2: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI=)
                          3: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=)
                          4: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: 1SAjrNY5VP7t70zY1VL8a3AMKmx4q1essiwvWXpjOzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2d:45:2c:65:98:9a:86:c3:96:10:21:9b:c7:3a:8a:20:90:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
        Validity
            Not Before: Mar 18 08:05:43 2026 GMT
            Not After : Mar 19 09:16:43 2026 GMT
        Subject: CN=7D34561E093BFD8A5A3DB78368E4FA80C71FD7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:d4:8e:09:d7:e7:3a:c8:26:73:bb:bf:92:
                    b9:59:88:de:57:5d:5a:15:14:47:be:53:de:b2:8c:
                    fc:ae:53:5b:54:13:e7:68:f3:79:e5:5d:22:b6:b3:
                    4c:36:b8:16:57:0f:35:d9:3c:c3:5c:f1:fd:38:de:
                    9a:12:79:87:dc:b2:27:e6:15:30:a9:97:5e:2b:9e:
                    c0:50:8d:10:3a:74:6e:14:00:70:c0:64:e1:50:f0:
                    3c:6b:50:24:6a:bc:44:29:6a:8e:f6:2d:d5:18:ea:
                    fd:36:db:40:3b:3d:78:a7:06:4c:84:fc:c1:37:87:
                    4a:ca:94:74:cf:cb:5b:00:8f:82:a5:03:16:ac:70:
                    a6:2d:98:dc:cc:a0:ca:54:6d:2a:11:be:93:0f:5d:
                    e0:bd:b3:32:58:a2:ce:cb:1b:30:47:5b:76:fd:d7:
                    9b:c4:18:52:7b:5b:38:f4:42:8e:ee:2c:fb:3c:4a:
                    21:74:0b:c5:80:ab:36:af:3f:46:f3:e4:19:52:57:
                    dc:04:54:dd:c2:8c:dd:53:24:d5:83:40:71:d8:1d:
                    65:1d:27:37:44:14:f9:2f:8c:fa:2f:1b:ad:f1:ea:
                    42:2b:08:73:97:d9:68:46:0e:5d:ff:7a:e9:93:81:
                    49:b1:d2:c6:15:41:e6:8b:64:ea:df:b4:7f:03:12:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:34:56:1E:09:3B:FD:8A:5A:3D:B7:83:68:E4:FA:80:C7:1F:D7:E3
            X509v3 Authority Key Identifier:
                keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:88:4c:03:5f:83:fd:13:25:09:e5:19:7b:24:bf:25:13:
         a5:4e:b4:f5:9b:55:d7:03:84:6a:cd:72:0f:05:c2:12:bb:8f:
         8c:f8:42:ea:89:16:70:75:25:f1:02:a9:e7:22:35:14:83:e0:
         b3:67:22:33:55:99:08:34:61:d8:66:75:af:92:17:14:b4:01:
         07:ec:9a:26:bc:86:87:e8:2b:48:dd:b1:85:c6:f3:6f:80:b7:
         09:f3:8f:7d:94:f3:93:69:89:60:fd:e5:2a:06:47:fe:5b:5b:
         a6:38:dd:09:55:39:52:f4:58:f1:4e:8a:d1:7d:0d:c1:9b:17:
         84:d2:54:21:a6:bc:85:30:ab:21:84:92:35:db:09:7a:26:38:
         c1:95:85:64:5d:24:91:72:26:a1:3c:83:ae:f8:51:5c:66:a6:
         74:41:2b:aa:56:5b:10:c7:37:8f:af:24:47:5d:ef:68:ac:83:
         3b:58:28:1e:00:3f:ee:a0:f1:d2:f3:a7:8e:c5:ca:2e:6b:8a:
         7c:08:25:6b:45:9d:27:7e:a7:63:ea:4b:e6:3a:6c:72:4c:da:
         24:34:84:ab:3e:49:0c:33:fc:16:d7:23:9b:a8:81:0b:23:77:
         da:c8:de:c2:ca:ec:12:1b:51:dc:28:83:09:d3:9c:3f:ca:e3:
         0f:20:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----