Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
File:                     2C425257AE7B63529EB88108AC7DEA60648B43E5.mft (raw, json)
Hash identifier:          0IBYvnCk0w40GtpDPcK8LO5sANdqC4UgSNQJp0NifHI=
Subject key identifier:   FD:D1:1E:72:6C:62:4B:56:89:B3:FC:49:2E:CB:51:3A:49:B9:49:0B
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       4D643641DD1D0CB3CE9A04548400291FAEE26F19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
Manifest number:          0541
Signing time:             Sat 26 Sep 2026 23:47:51 +0000
Manifest this update:     Sat 26 Sep 2026 23:42:51 +0000
Manifest next update:     Mon 28 Sep 2026 02:19:51 +0000
Files and hashes:         1: 323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (hash: 9VzaQ7vDmNrMa4deko9XK8+Pr/jUWjlpX8PpBjNLnak=)
                          2: 3138312e3233322e3233302e302f32332d3233203d3e20323732353439.roa (hash: wwa6fzPN5lamHJSujdCR7c5+Dz0yZ5YJCRcnr95Io7I=)
                          3: 323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (hash: N4VGJmgCa+nRIRw1veRc/4Q5MScpjZJXFiygzSDeI6w=)
                          4: 2C425257AE7B63529EB88108AC7DEA60648B43E5.crl (hash: tSpOixqhLQT+kJwg2CDfAtIp6LW7RuQrQiqBVZZ5NiQ=)
                          5: 3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (hash: klDBb+/bFR7ZmSokue+sj4oDGi4pIXmffEq4mhcUzV0=)
                          6: 323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (hash: kg4D3OUQl7VyP0EOT1sqrFor/X1vPyfsQh0euNYjK5o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:64:36:41:dd:1d:0c:b3:ce:9a:04:54:84:00:29:1f:ae:e2:6f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Sep 26 23:42:51 2026 GMT
            Not After : Sep 28 02:19:51 2026 GMT
        Subject: CN=FDD11E726C624B5689B3FC492ECB513A49B9490B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:6a:8e:ea:59:75:e9:ff:ab:15:29:b8:1c:
                    92:8f:5d:4d:5f:f1:47:c8:84:a0:f2:1c:a2:b8:85:
                    f6:a1:4c:fe:8b:4c:1d:a7:21:f4:d5:a1:61:22:fb:
                    1b:7a:63:95:40:7f:81:31:54:a3:1c:46:d4:fe:e0:
                    e9:84:54:52:7b:c5:92:76:60:dd:47:6f:de:f6:4f:
                    30:25:d4:0a:f4:f3:30:2d:ef:33:2f:62:7e:d3:a3:
                    7d:6a:c4:19:1c:cf:d6:61:67:91:ad:41:49:84:f5:
                    a5:51:83:99:40:4d:8a:b7:69:a2:6e:08:b2:c1:20:
                    b0:99:db:f0:a4:14:87:2b:fd:94:8a:fb:c1:33:d5:
                    7f:b6:8b:93:79:c0:af:95:f5:05:08:63:df:96:98:
                    68:cb:18:b8:4b:ac:dc:88:4f:cd:3d:d1:f1:54:75:
                    71:eb:b2:d0:e7:5c:c9:90:8e:fb:3e:b8:f8:8b:75:
                    46:06:45:30:74:45:86:0d:4e:63:b7:27:21:82:01:
                    7c:34:cc:ac:f6:a7:a8:49:90:15:ac:db:ad:31:4f:
                    8e:47:63:ad:da:37:be:41:f9:ce:73:ce:a9:00:0c:
                    c7:27:a7:0a:bd:fb:7f:f4:69:cb:04:f3:88:06:43:
                    cb:bc:4c:c0:24:be:ec:9f:fe:fc:fa:db:d1:81:1f:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D1:1E:72:6C:62:4B:56:89:B3:FC:49:2E:CB:51:3A:49:B9:49:0B
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6a:75:b3:35:aa:d4:ad:bb:fe:6c:46:93:21:ed:e4:3b:df:
         ee:c0:76:d6:f7:6f:5f:9b:e7:2d:df:5f:84:d1:b9:35:92:f1:
         8c:ab:28:43:be:82:b3:11:91:e5:2e:02:b2:e5:ec:44:e3:c9:
         c9:d3:14:41:91:82:4a:42:5b:30:e0:06:c1:3c:91:01:e8:2b:
         24:8b:8f:99:3b:55:43:9e:6e:60:26:19:b8:c3:5f:a4:5a:fc:
         27:ef:14:4a:4f:0a:06:1a:33:60:d9:9c:57:7c:2a:0b:a8:ef:
         da:64:c1:86:33:fa:58:37:fe:2d:0c:5a:2e:39:40:07:52:ea:
         0d:4e:db:1d:70:f6:5b:c5:f6:39:69:60:f5:a3:38:8f:d5:26:
         26:6e:06:8e:a3:b8:23:f3:5e:04:0b:6f:f3:93:b1:0b:a2:db:
         03:11:d1:c4:b8:11:af:b9:c1:93:8d:fe:cc:93:3e:38:d0:cf:
         30:ae:0e:65:07:cc:51:de:6f:91:b6:c6:48:52:a9:f5:25:e0:
         db:68:aa:c0:47:ee:80:16:84:89:98:f1:88:78:1c:5d:af:2f:
         9d:b4:ff:13:bd:27:a3:04:e3:7c:13:8e:14:b7:5a:83:34:3a:
         f7:d7:5e:94:81:cd:6a:50:91:ed:49:60:f9:1c:39:e9:fd:b3:
         7e:72:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----