Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
File:                     CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json)
Hash identifier:          uMgVWWKJrn2fGf3DADz6LBuntNm2H6AqbGk89Ph76do=
Subject key identifier:   12:29:33:E8:B2:90:AE:25:33:4C:A2:27:BF:C1:CD:74:B2:F9:F1:3F
Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D
Certificate issuer:       /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
Certificate serial:       3069790EB9DB11EA39CC6E31C874608EA9BFCB1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft
Manifest number:          0463
Signing time:             Mon 17 Aug 2026 08:54:05 +0000
Manifest this update:     Mon 17 Aug 2026 08:49:05 +0000
Manifest next update:     Tue 18 Aug 2026 09:35:05 +0000
Files and hashes:         1: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: n1WfTF/69k+pEm38xUTBsvz2MS47ihd3zEekd1/O7ZY=)
                          2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: p6UG6ukYcRDsyQJFg0HD/AkGlmD8veczHMHDdTqJwEo=)
                          3: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: HhuJluM4nYK24Tc4tYGLjGkrvHzMKI7PN1TuD9//pC4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:69:79:0e:b9:db:11:ea:39:cc:6e:31:c8:74:60:8e:a9:bf:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D
        Validity
            Not Before: Aug 17 08:49:05 2026 GMT
            Not After : Aug 18 09:35:05 2026 GMT
        Subject: CN=122933E8B290AE25334CA227BFC1CD74B2F9F13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cb:1b:0e:63:02:ad:4d:54:bc:60:8d:90:97:
                    ee:58:31:05:6f:d0:d2:c2:c8:9c:a3:c1:b3:65:3d:
                    c3:3c:c6:ed:5f:32:80:dc:93:dc:99:7c:5a:aa:21:
                    36:56:37:99:2d:70:73:56:19:b6:50:0b:a1:22:e7:
                    04:76:0b:9a:50:9c:16:3f:60:6f:6f:5a:5e:19:10:
                    ec:1e:e3:e5:7c:02:53:fc:37:ea:3f:f1:bb:37:e8:
                    55:e9:80:cc:e6:b1:8b:24:33:9d:f7:e8:83:15:09:
                    ee:2a:98:b1:12:4f:f7:e4:ab:11:bf:2a:73:a0:bb:
                    3d:80:17:29:85:bb:92:8e:29:9b:86:fa:60:0c:1c:
                    60:a5:98:42:f8:ef:21:e8:67:bc:ce:2d:e3:4e:56:
                    a4:65:67:f9:69:d1:42:95:26:9f:03:5d:a7:1f:af:
                    94:6e:0b:43:0b:21:f3:ee:6e:f8:54:04:7f:77:71:
                    00:88:4f:ba:f5:90:ef:dd:3a:94:ed:73:25:ce:c4:
                    d1:69:6a:8b:ba:37:c0:60:05:d5:d6:bf:a2:2e:39:
                    19:7b:cb:55:4d:96:47:73:b6:cc:56:ee:22:62:3c:
                    32:bb:90:01:5b:9e:3c:69:60:c5:2d:d1:79:4f:ba:
                    5c:a6:64:75:17:86:08:6f:52:21:54:0e:96:b4:e2:
                    cd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:33:E8:B2:90:AE:25:33:4C:A2:27:BF:C1:CD:74:B2:F9:F1:3F
            X509v3 Authority Key Identifier:
                keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:db:58:35:40:31:fa:27:e3:23:97:07:38:f6:94:84:b6:78:
         eb:79:bc:80:8b:7d:77:a6:3a:bc:79:0e:b3:74:87:96:57:8e:
         0f:e1:53:05:ec:a7:89:2f:ee:dd:c8:1b:fb:2e:52:f6:5d:46:
         94:b4:5d:60:ed:2e:cb:ff:21:c5:68:68:7b:50:4d:9b:f4:f6:
         2a:6e:21:59:95:db:e0:da:17:7c:b2:0c:cf:f0:d2:67:a8:e0:
         5e:81:5b:58:a5:4d:5e:1d:d9:af:59:51:02:2a:f6:71:9a:0f:
         25:28:88:38:cb:3f:87:bf:7b:e5:bf:5d:c1:6f:74:ba:57:d4:
         43:94:7d:6d:c5:5a:69:4a:cb:fa:59:82:b9:1a:eb:57:83:b1:
         9b:e0:02:53:b6:af:32:4a:fb:22:f7:dd:7d:4c:f0:92:62:99:
         c3:6d:04:63:8b:d2:50:be:ed:44:b0:c3:53:f0:bd:40:1d:4d:
         ff:bc:c7:e9:b5:82:d2:fa:d9:d2:fe:88:0a:2a:ba:55:41:5b:
         9a:ef:7b:d8:f8:66:62:ee:8e:6a:bc:7c:4d:0d:3e:5d:ce:88:
         c4:00:26:6b:5b:de:07:e1:b6:48:63:8e:2c:cc:89:fd:56:d2:
         ca:3f:3b:0a:5c:1d:be:e9:ee:7c:32:94:94:8b:9a:e3:05:eb:
         6e:f8:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----