Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.mft
File:                     3B2BB1A685CC394F90605D8F40A7BC549EC60748.mft (raw, json)
Hash identifier:          rhGZ8T71E+L7eRuyDGq86Fd78PiMaIkcr1wBT70z5iA=
Subject key identifier:   3D:B5:07:54:21:3B:C2:0E:0C:19:F8:D4:41:16:DB:6D:8C:39:6A:F3
Authority key identifier: 3B:2B:B1:A6:85:CC:39:4F:90:60:5D:8F:40:A7:BC:54:9E:C6:07:48
Certificate issuer:       /CN=3B2BB1A685CC394F90605D8F40A7BC549EC60748
Certificate serial:       0111049894E7A65A95B355AEBCD130DA6F184B01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2BB1A685CC394F90605D8F40A7BC549EC60748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.mft
Manifest number:          91
Signing time:             Tue 20 Oct 2026 11:11:18 +0000
Manifest this update:     Tue 20 Oct 2026 11:06:18 +0000
Manifest next update:     Wed 21 Oct 2026 12:00:18 +0000
Files and hashes:         1: 34352e3233322e3138382e302f32322d3234203d3e203631353932.roa (hash: Nfk0BDLkbfHHYNk9vGr+NlN3xDFCMxjEXXjFnTEUO3w=)
                          2: 323830343a346333343a3a2f33322d3438203d3e203631353932.roa (hash: b2M0oVcv/QMBcv+fNc1pit73N4ygQbx9RXIzzpkcjo8=)
                          3: 3B2BB1A685CC394F90605D8F40A7BC549EC60748.crl (hash: 0NH3syjliDBhi3/TcpDejsAxv4+9stiwqqLpWZ2SFrM=)
                          4: 34352e3233342e3130302e302f32322d3234203d3e203631353932.roa (hash: bFWLaiJzbLbe54kOlPlDR6pzRp4NlFEzRZbbh4eNLCk=)
                          5: 34352e3232342e3231362e302f32322d3234203d3e203631353932.roa (hash: e0zcQuskH7H9Kd5i6+0KREnXWIAhg6QittU4v90PNT4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:11:04:98:94:e7:a6:5a:95:b3:55:ae:bc:d1:30:da:6f:18:4b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BB1A685CC394F90605D8F40A7BC549EC60748
        Validity
            Not Before: Oct 20 11:06:18 2026 GMT
            Not After : Oct 21 12:00:18 2026 GMT
        Subject: CN=3DB50754213BC20E0C19F8D44116DB6D8C396AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b4:d3:ac:c9:de:63:9f:21:68:b6:2a:56:37:
                    af:55:39:21:df:86:c4:1f:4a:f6:d7:f3:80:86:3b:
                    50:79:ed:3d:43:ac:4a:00:a2:e5:c3:49:4f:68:53:
                    9f:9d:36:69:79:95:07:3a:57:09:dd:3a:85:c3:91:
                    ad:dd:d6:0b:89:c1:d0:89:87:ff:b0:f9:73:97:0e:
                    2f:6f:97:52:17:72:76:fd:07:95:13:9e:59:c4:23:
                    ee:cd:16:ed:00:e6:67:7f:4e:61:0b:18:71:48:33:
                    d6:f3:ef:ae:e0:2f:21:cb:6b:05:31:7b:d8:4c:7a:
                    08:c0:da:8b:7a:12:8d:ce:7b:a9:b1:03:a4:ec:85:
                    dd:89:62:d5:8b:9d:77:b9:0d:30:0a:c9:01:97:47:
                    e5:b6:6b:99:25:90:bc:89:3f:8b:b4:59:7f:eb:ae:
                    04:5f:17:2c:53:61:82:fd:12:2b:42:08:9f:d1:f9:
                    f4:2b:cb:cb:34:93:8d:e9:8d:d9:47:1d:f4:07:22:
                    93:5c:1e:c1:a9:2f:f3:1e:f9:e9:18:e7:85:36:ab:
                    45:63:85:01:21:20:da:26:7c:98:0a:fc:2d:d2:5f:
                    0d:c9:6f:d1:7d:4e:fe:7a:14:b5:a2:3f:54:55:6a:
                    62:c3:30:5c:c2:df:e8:93:5a:fb:ff:9d:4c:5f:6a:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:07:54:21:3B:C2:0E:0C:19:F8:D4:41:16:DB:6D:8C:39:6A:F3
            X509v3 Authority Key Identifier:
                keyid:3B:2B:B1:A6:85:CC:39:4F:90:60:5D:8F:40:A7:BC:54:9E:C6:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2BB1A685CC394F90605D8F40A7BC549EC60748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:cf:18:eb:ab:8e:8c:aa:be:35:4b:60:b5:6f:c5:d2:f8:
         81:77:0b:74:d0:6a:43:93:05:6c:6b:77:ae:78:e5:00:4f:41:
         02:60:04:3f:d2:6e:9f:23:3a:88:df:ad:48:09:57:d4:48:da:
         95:e9:c4:85:ce:7b:6b:08:ec:f5:66:39:eb:5c:3d:00:22:d4:
         06:51:38:d9:b0:31:51:97:cc:e4:de:e2:74:f2:c4:ad:60:2e:
         04:b2:70:69:a2:eb:d7:38:af:61:ef:30:41:1e:79:e6:09:b8:
         da:92:cb:e2:fb:0d:30:c4:50:36:65:b7:06:39:81:2f:c9:0e:
         40:01:69:73:18:42:a0:76:e0:05:6c:a3:58:fb:bb:e8:fa:b3:
         dc:cd:ef:b1:ba:2b:ec:b2:5b:87:28:8b:14:0f:ac:df:67:6d:
         8a:c0:8e:a1:ee:30:cc:b5:dd:41:57:e4:69:72:58:20:67:69:
         66:9b:89:d9:6e:1c:bb:44:90:a9:7d:cc:cd:10:af:4c:fc:99:
         47:ad:47:34:02:f6:24:1e:3c:79:c0:67:d2:47:67:86:ab:c8:
         d0:34:8f:f0:89:be:94:6c:c6:79:c5:8f:a4:e3:18:f4:61:10:
         ca:e9:78:de:ad:60:d3:47:c9:54:65:6d:17:40:57:95:4d:63:
         3b:4a:9c:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAREEmJTnplqVs1WuvNEw2m8YSwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IyQkIxQTY4NUNDMzk0RjkwNjA1RDhGNDBBN0JDNTQ5
RUM2MDc0ODAeFw0yNjEwMjAxMTA2MThaFw0yNjEwMjExMjAwMThaMDMxMTAvBgNV
BAMTKDNEQjUwNzU0MjEzQkMyMEUwQzE5RjhENDQxMTZEQjZEOEMzOTZBRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstNOsyd5jnyFotipWN69VOSHf
hsQfSvbX84CGO1B57T1DrEoAouXDSU9oU5+dNml5lQc6VwndOoXDka3d1guJwdCJ
h/+w+XOXDi9vl1IXcnb9B5UTnlnEI+7NFu0A5md/TmELGHFIM9bz767gLyHLawUx
e9hMegjA2ot6Eo3Oe6mxA6Tshd2JYtWLnXe5DTAKyQGXR+W2a5klkLyJP4u0WX/r
rgRfFyxTYYL9EitCCJ/R+fQry8s0k43pjdlHHfQHIpNcHsGpL/Me+ekY54U2q0Vj
hQEhINomfJgK/C3SXw3Jb9F9Tv56FLWiP1RVamLDMFzC3+iTWvv/nUxfauj9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPbUHVCE7wg4MGfjUQRbbbYw5avMwHwYDVR0j
BBgwFoAUOyuxpoXMOU+QYF2PQKe8VJ7GB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC8zQjJCQjFBNjg1Q0MzOTRGOTA2MDVEOEY0MEE3QkM1NDlFQzYwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMkJCMUE2ODVDQzM5NEY5
MDYwNUQ4RjQwQTdCQzU0OUVDNjA3NDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84bXAvMC8z
QjJCQjFBNjg1Q0MzOTRGOTA2MDVEOEY0MEE3QkM1NDlFQzYwNzQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfy/PGOurjoyqvjVLYLVvxdL4gXcLdNBqQ5MFbGt3rnjlAE9BAmAEP9JunyM6
iN+tSAlX1EjalenEhc57awjs9WY561w9ACLUBlE42bAxUZfM5N7idPLErWAuBLJw
aaLr1zivYe8wQR555gm42pLL4vsNMMRQNmW3BjmBL8kOQAFpcxhCoHbgBWyjWPu7
6Pqz3M3vsbor7LJbhyiLFA+s32dtisCOoe4wzLXdQVfkaXJYIGdpZpuJ2W4cu0SQ
qX3MzRCvTPyZR61HNAL2JB48ecBn0kdnhqvI0DSP8Im+lGzGecWPpOMY9GEQyul4
3q1g00fJVGVtF0BXlU1jO0qcfA==
-----END CERTIFICATE-----