Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.mft
File:                     DBCF56AB055BE9E72AC73599B36098BD418CD9DF.mft (raw, json)
Hash identifier:          lsXHcZr6p/NkExf2annRknFtfmtDYB/r6lxkJQKjLjQ=
Subject key identifier:   18:91:CA:52:A1:19:01:D9:35:57:04:FD:B7:81:6B:E5:09:C9:D6:7B
Authority key identifier: DB:CF:56:AB:05:5B:E9:E7:2A:C7:35:99:B3:60:98:BD:41:8C:D9:DF
Certificate issuer:       /CN=DBCF56AB055BE9E72AC73599B36098BD418CD9DF
Certificate serial:       05945112514E63BE15DBC6FF53258D1F29A9AA7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.mft
Manifest number:          15
Signing time:             Sat 06 Sep 2025 02:07:15 +0000
Manifest this update:     Sat 06 Sep 2025 02:02:15 +0000
Manifest next update:     Sun 07 Sep 2025 05:15:15 +0000
Files and hashes:         1: DBCF56AB055BE9E72AC73599B36098BD418CD9DF.crl (hash: JddnuLkOOQ9I3Bw8rQpXPGI91Hr8++JH8XGT7K+LhIc=)
                          2: 3138362e36352e39322e302f32322d3232203d3e20323730363634.roa (hash: FE6YtZqEsYBdri0JkxwcSemFVVW32zZqUuDm19xiQo4=)
                          3: 3138362e36352e39352e302f32342d3234203d3e20323730363634.roa (hash: VJoYywPTWWXZiX4FE5yglEWAzNRB59X0oieS26P6NFA=)
                          4: 3138362e36352e39342e302f32342d3234203d3e20323730363634.roa (hash: 4oeely8AMbVXv2FUqa9mbWbY/ODitpBewOE40izM0JM=)
                          5: 3138362e36352e39322e302f32332d3233203d3e20323730363634.roa (hash: 6lX08K1VJ5wqJO10wJVoLHsEamtgyesZzNDhQa6LuBQ=)
                          6: 3138362e36352e39332e302f32342d3234203d3e20323730363634.roa (hash: rx9yhJMSvROocAbm8zc3+UoBxCAFURUNPUVRVqKobHs=)
                          7: 3138362e36352e39342e302f32332d3233203d3e20323730363634.roa (hash: ZM879O7OcTKIM+yTu1K2sFQr47xJVMRpdY9yinqpuMk=)
                          8: 323830343a366638303a3a2f33322d3332203d3e20323730363634.roa (hash: mrrEIrB098T9gpikaihQsocWsf0Fs2fZTMoAvbLJIw8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:94:51:12:51:4e:63:be:15:db:c6:ff:53:25:8d:1f:29:a9:aa:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBCF56AB055BE9E72AC73599B36098BD418CD9DF
        Validity
            Not Before: Sep  6 02:02:15 2025 GMT
            Not After : Sep  7 05:15:15 2025 GMT
        Subject: CN=1891CA52A11901D9355704FDB7816BE509C9D67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:8d:fa:c0:57:35:b8:56:42:a0:fe:f7:0d:
                    23:fb:95:b3:30:ab:c2:59:e8:bb:eb:d1:86:7e:0a:
                    f1:11:93:29:b0:b9:d0:08:7c:51:e7:1a:ff:e5:76:
                    bb:f6:45:6b:30:d0:e0:0d:0a:fc:16:37:18:9b:5a:
                    8f:71:cc:42:7e:ad:67:ac:6f:b7:95:88:43:87:c9:
                    1f:ce:78:8e:71:3f:48:93:9d:5f:bf:c5:fa:53:71:
                    63:2e:91:4a:d9:a2:a4:df:53:44:8d:ae:37:90:1d:
                    11:dd:22:f6:02:07:77:1d:72:69:32:28:e2:29:a8:
                    07:5a:a7:63:de:6a:fd:bd:39:65:a8:51:6a:f9:7a:
                    20:ca:6d:5f:2d:83:1b:20:09:56:f4:0f:1d:9e:e6:
                    85:c4:99:71:a1:de:c5:11:70:94:1d:ac:9b:57:b3:
                    9e:79:d0:56:71:6c:ae:e4:8c:ab:9c:2c:73:11:4d:
                    6f:8b:dd:c0:62:6e:f1:95:85:92:fb:e4:92:7e:c2:
                    41:bd:7b:59:61:ef:78:e2:5e:2f:22:bf:26:3e:39:
                    26:b0:2a:1e:90:7d:36:91:48:10:11:a3:53:ac:11:
                    24:2b:35:62:50:0a:4f:0c:e6:d7:1b:e9:98:d3:e9:
                    d4:eb:a7:b3:39:79:b3:4b:5f:5c:06:2f:38:a2:e3:
                    ca:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:91:CA:52:A1:19:01:D9:35:57:04:FD:B7:81:6B:E5:09:C9:D6:7B
            X509v3 Authority Key Identifier:
                keyid:DB:CF:56:AB:05:5B:E9:E7:2A:C7:35:99:B3:60:98:BD:41:8C:D9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:e3:bd:98:c1:3a:13:82:af:b8:b8:e1:a4:74:88:27:cb:
         4c:35:ab:6d:9f:ff:a6:b4:c6:1f:f8:c5:19:af:35:ce:9f:a3:
         f7:7d:16:9c:35:de:a9:d2:4d:e4:9f:fe:ce:86:bf:68:49:da:
         e8:e0:60:7a:0e:87:52:ea:6e:42:e2:22:f9:b3:12:b1:96:72:
         39:c1:eb:7b:ee:bc:45:ee:4b:44:91:69:0f:a0:98:87:33:f1:
         71:1e:28:99:1e:25:e5:5f:d2:11:75:42:6e:ac:e3:f8:72:de:
         d5:b8:57:f6:82:29:ba:30:d8:e5:27:45:82:67:ce:8a:83:89:
         b3:b6:41:4a:b3:6d:0b:ab:89:62:16:96:d7:77:85:35:34:a7:
         c7:3c:dd:d4:8d:ba:7b:7a:4b:ef:6b:11:1e:13:d4:a2:73:29:
         ed:17:70:29:d3:4c:25:ad:13:0a:1c:c0:c1:57:72:50:cf:0e:
         2a:4e:a2:a2:b9:75:58:45:33:88:22:02:92:5a:5b:f5:d7:73:
         bf:61:b2:dc:a8:a1:b6:9e:c8:f8:b9:de:f5:bf:e7:b5:23:71:
         f4:bf:96:ef:74:97:e6:cb:e5:01:38:97:f3:8d:fc:1a:a0:86:
         da:37:e7:20:e2:70:00:3a:35:9b:5b:a2:af:cf:8b:70:79:d4:
         38:c7:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 01:05:43 2025 by rpki-client