Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.mft
File:                     8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.mft (raw, json)
Hash identifier:          enOYBVinbqzMdr4ts5vJ8Gdm2wc84cxUjNniPHFrUro=
Subject key identifier:   06:BA:9E:85:06:5D:63:44:DE:4B:8A:8D:D2:B4:1E:1A:12:D0:BC:37
Authority key identifier: 88:98:FA:D1:2A:8B:12:62:F8:8B:D3:FB:68:A9:FA:67:D7:01:6F:71
Certificate issuer:       /CN=8898FAD12A8B1262F88BD3FB68A9FA67D7016F71
Certificate serial:       2A0ED2C84BF3392FDCD4AF13AF57DFE144168963
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.mft
Manifest number:          27
Signing time:             Wed 17 Jun 2026 10:42:40 +0000
Manifest this update:     Wed 17 Jun 2026 10:37:40 +0000
Manifest next update:     Thu 18 Jun 2026 11:54:40 +0000
Files and hashes:         1: 323830343a366264633a3a2f33322d313238203d3e20323730343330.roa (hash: +gByy4xbykFzObhbI1UZdIybfBSGGoi2pFL2xgUh8Pk=)
                          2: 8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.crl (hash: XZzlJY/8QmmbsM+cxfWtFwSlfnJWpTUqrsQGFv8ZyqI=)
                          3: 3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa (hash: GTEG1pDzpFaFyyvFUmQqcUJ/b8YUt3OfA7HcSu8ioEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0e:d2:c8:4b:f3:39:2f:dc:d4:af:13:af:57:df:e1:44:16:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8898FAD12A8B1262F88BD3FB68A9FA67D7016F71
        Validity
            Not Before: Jun 17 10:37:40 2026 GMT
            Not After : Jun 18 11:54:40 2026 GMT
        Subject: CN=06BA9E85065D6344DE4B8A8DD2B41E1A12D0BC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:5b:01:7c:54:0b:54:6a:f1:30:69:a2:2f:
                    c2:67:8d:43:f1:b6:53:31:60:ee:86:72:3a:d3:1e:
                    22:eb:d1:da:7e:bb:16:86:b1:1d:67:47:c9:2e:c2:
                    17:26:ce:a9:b4:e6:c5:b9:ab:39:2b:04:51:9d:04:
                    82:f7:c4:0a:4d:68:95:2b:ca:07:ad:f0:1a:b4:2a:
                    fe:4b:7d:5c:c7:30:1b:51:63:8e:e3:ea:39:dc:cb:
                    e3:30:db:0b:1c:c1:96:e9:7a:a5:ce:df:88:7b:33:
                    fc:c5:cc:eb:0c:76:4b:59:c1:b9:13:09:75:b2:93:
                    5e:43:ef:b1:11:e8:ec:0a:e9:17:78:ad:c2:ae:33:
                    ee:ac:5c:a5:19:c6:83:0a:89:2b:9e:6f:62:41:d4:
                    ba:37:0d:3c:d0:d2:4d:bd:5d:6d:00:33:5a:6f:e2:
                    1c:bc:88:56:77:92:24:73:77:0a:79:59:78:c3:51:
                    37:53:f6:78:ad:ad:51:86:30:31:fd:ba:e4:91:96:
                    21:38:88:4b:7d:db:cd:00:3d:e6:ee:c3:61:37:a0:
                    30:9f:0f:43:da:3c:7f:a5:63:9c:7c:a5:fd:73:1d:
                    1c:df:9d:9c:15:49:00:d7:59:54:40:01:6a:aa:48:
                    3c:77:ea:3b:9a:84:78:b2:da:6c:85:45:78:52:39:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:9E:85:06:5D:63:44:DE:4B:8A:8D:D2:B4:1E:1A:12:D0:BC:37
            X509v3 Authority Key Identifier:
                keyid:88:98:FA:D1:2A:8B:12:62:F8:8B:D3:FB:68:A9:FA:67:D7:01:6F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1e:51:c4:66:cf:ea:41:cd:48:41:9f:f2:53:07:f2:6c:a8:
         b3:d6:11:07:03:b6:a2:3c:bd:c6:87:13:d8:85:bf:92:98:83:
         63:7c:c5:01:60:09:98:1f:f7:bb:f2:63:3e:20:82:ff:ae:bb:
         4b:d5:57:ea:8d:65:96:a2:ad:a9:3a:1c:e9:36:2a:c1:1e:6f:
         bd:f5:84:09:a8:ae:0e:da:aa:37:d2:5b:34:b1:55:62:4f:15:
         4f:17:85:22:f8:3f:41:83:07:2c:ae:f1:6a:5d:b3:86:6e:3a:
         3f:12:1a:18:f8:68:41:85:c8:3a:9f:7c:cd:53:dd:f0:3f:af:
         d0:36:21:99:50:4e:5d:e3:83:1f:bb:0d:46:92:04:d4:e2:1b:
         bb:c3:46:a1:a2:e9:24:91:b8:2f:06:e2:49:56:7d:0b:bd:1c:
         d6:7f:0c:11:02:b2:2e:9b:65:6b:c9:e6:ee:99:13:d3:0e:a8:
         06:14:d4:a9:7b:10:b3:46:da:1e:6e:6a:2e:b2:b4:45:3e:54:
         c0:d8:64:0d:ab:e0:d4:21:55:14:67:1a:45:1f:a2:62:7c:91:
         63:f3:66:a1:08:c1:22:b3:8f:02:e8:b3:0c:52:52:fb:27:ed:
         26:4b:08:6d:31:9d:c2:60:b0:1c:ac:9b:ee:6c:eb:5a:24:1c:
         59:30:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:09:44 2026 by rpki-client