Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft
File:                     EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft (raw, json)
Hash identifier:          soDlo84OXFhrGQsqo5kwqtYFY9h/SnMZWDU/T3+AjVQ=
Subject key identifier:   94:D2:D5:DE:8F:77:26:86:84:7A:2F:69:FB:AA:69:9C:A1:75:22:E2
Authority key identifier: EA:23:AB:40:E4:81:E8:BE:E7:FD:B7:F6:D7:BD:7D:60:CD:62:57:E8
Certificate issuer:       /CN=EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8
Certificate serial:       25638236E2610000DF764507086B5B9015648C57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft
Manifest number:          2B
Signing time:             Wed 09 Sep 2026 10:34:11 +0000
Manifest this update:     Wed 09 Sep 2026 10:29:11 +0000
Manifest next update:     Thu 10 Sep 2026 14:18:11 +0000
Files and hashes:         1: 3132382e3230312e3230342e302f32322d3234203d3e20323636363438.roa (hash: 7weaEMyK7B1wg4WLyBAmFP6jU/gQBQts5wnhHWyyg24=)
                          2: 323830343a336634303a3a2f33322d3333203d3e20323636363438.roa (hash: 4th1H4Sa7tsIrwbbyy2ke3JyW2kO4waWQw8mczhnvug=)
                          3: EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.crl (hash: Th2926FW9+K5s32aTNz3N+UiDz7V4IV47faCB3uqmJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:63:82:36:e2:61:00:00:df:76:45:07:08:6b:5b:90:15:64:8c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8
        Validity
            Not Before: Sep  9 10:29:11 2026 GMT
            Not After : Sep 10 14:18:11 2026 GMT
        Subject: CN=94D2D5DE8F772686847A2F69FBAA699CA17522E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:03:8c:2a:20:b2:ff:ef:c1:78:aa:dd:70:85:
                    c2:dd:e3:7f:90:ab:57:16:82:80:f0:68:4f:34:c9:
                    8c:b2:11:1f:11:11:b4:a6:6e:e1:22:16:1b:4d:d2:
                    8e:a9:2e:00:ab:f1:b6:fc:c9:c0:2d:7c:2e:f0:e1:
                    46:74:4d:c4:60:bd:d7:86:6b:15:64:ed:a2:9f:fa:
                    f9:2a:35:17:3a:1d:08:a6:ee:eb:af:7c:1e:e1:c1:
                    0f:d3:0f:07:ed:c1:d4:02:4d:38:56:23:a2:c7:d4:
                    d4:6c:4c:ed:ba:74:88:ad:21:ca:85:d8:98:b2:6d:
                    4d:a0:fa:3c:6a:3a:2e:1d:d5:1b:ec:29:5f:8c:2b:
                    94:c4:f7:44:66:b9:8e:27:de:1c:01:17:8f:ad:46:
                    de:26:e3:1b:d6:20:05:38:b2:61:16:c3:43:b0:82:
                    68:fd:43:73:e0:bb:2b:e9:8c:2d:b0:e8:54:3e:22:
                    15:25:26:d6:4c:ce:a6:ba:a4:a6:72:de:17:d5:97:
                    e9:e5:79:1a:c1:50:d1:0f:ab:fa:45:ef:0f:7f:0f:
                    5b:24:a4:21:2d:73:c8:33:59:26:a6:95:ee:7d:f6:
                    d1:1d:ea:59:1b:df:5b:3e:44:97:31:f1:78:89:3d:
                    48:ea:d0:84:90:5d:1d:b5:49:a0:cd:35:61:f4:8b:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D2:D5:DE:8F:77:26:86:84:7A:2F:69:FB:AA:69:9C:A1:75:22:E2
            X509v3 Authority Key Identifier:
                keyid:EA:23:AB:40:E4:81:E8:BE:E7:FD:B7:F6:D7:BD:7D:60:CD:62:57:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/0/EA23AB40E481E8BEE7FDB7F6D7BD7D60CD6257E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:38:96:f8:15:94:1e:4a:95:ab:7e:01:f2:7b:12:b0:7c:d6:
         13:8b:f3:65:d0:16:3f:70:1f:8f:e1:06:4e:02:25:36:3f:ad:
         15:14:33:69:f1:85:8c:9c:dd:dd:20:e0:b5:47:e8:3c:c3:e6:
         d1:41:be:b4:cf:be:0c:9b:77:71:f7:cf:80:04:26:fd:2f:7e:
         e8:4c:a8:dc:1f:9c:db:4b:87:b6:51:3f:32:86:a6:c2:af:23:
         d2:f2:67:89:9d:65:31:27:92:50:49:51:a5:e8:27:c9:17:19:
         6b:70:30:ea:8f:be:df:c9:37:47:98:51:b3:85:89:57:c7:4d:
         55:fe:fd:e4:7b:d3:f0:2b:7e:ff:5d:25:13:47:58:cb:02:aa:
         48:8a:c7:b6:5d:af:8f:0d:64:92:13:e9:47:76:fb:ce:48:07:
         45:d4:5e:6b:43:41:59:78:70:c0:7f:08:66:8f:60:15:4e:39:
         73:f2:b6:ea:5b:24:30:98:7f:c0:e0:67:f9:de:41:ed:d5:02:
         7e:3d:5b:97:7c:08:eb:c3:33:5b:7b:b1:dd:59:5a:a3:42:0b:
         ab:d6:af:0c:dd:74:27:3e:83:c9:86:bb:36:02:6f:82:ed:22:
         64:73:bf:d5:17:d5:c1:e5:7c:56:3f:09:5b:79:d2:21:03:51:
         d1:fb:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----