Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File:                     CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier:          8tKS/vyyNQ94pTZTxQBIPhFo11rFAwmIyyANVaKAg14=
Subject key identifier:   92:E8:27:58:D2:19:B8:34:05:1C:D5:6E:91:C7:A6:32:73:80:A0:DF
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer:       /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial:       61F00C7AE8640C5AE48C1843968FCA6A88E11249
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number:          04D8
Signing time:             Fri 23 Oct 2026 09:11:45 +0000
Manifest this update:     Fri 23 Oct 2026 09:06:45 +0000
Manifest next update:     Sat 24 Oct 2026 11:18:45 +0000
Files and hashes:         1: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: Zz7Hupx293kAM/XxOC0PUM2hnuLBwFCdrY5W0Efdt+4=)
                          2: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: kDiuJqxM0moizLuVKY/OENxGLx3jlP0sDfgG8k4zVmE=)
                          3: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: 2NdMAE99KOzHg8W+wgGQ4pPl2zL4bkkneMZ8RkY6y1c=)
                          4: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: bSDVCipNO7c+1o6O5GHztBEGKAJMv2cVHcR+M0oJCuM=)
                          5: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: C7LlMSOX3EmZTherQ248oTM0k7XqTLQAhZLhl4hPH7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f0:0c:7a:e8:64:0c:5a:e4:8c:18:43:96:8f:ca:6a:88:e1:12:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
        Validity
            Not Before: Oct 23 09:06:45 2026 GMT
            Not After : Oct 24 11:18:45 2026 GMT
        Subject: CN=92E82758D219B834051CD56E91C7A6327380A0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:21:38:04:17:8a:51:6e:e5:3e:6e:8a:5b:
                    cd:9d:0d:96:30:07:79:a7:8b:45:e4:87:75:ee:40:
                    dc:5a:a7:cd:9c:89:d1:17:79:56:8d:4a:3b:aa:2d:
                    5c:4a:12:a8:07:bb:86:e0:93:b8:cc:f1:d8:c2:91:
                    2e:9b:d0:ed:a7:df:29:8e:ef:ff:33:e9:4e:3c:e4:
                    56:d1:58:2b:5b:c4:35:fa:4d:a9:58:5c:c8:7e:6c:
                    4d:4b:47:a6:c2:2b:61:eb:07:d4:ab:88:8a:95:e4:
                    9f:82:6f:2b:4e:31:69:5c:47:b4:ab:7b:d1:40:d8:
                    16:64:f7:bb:4d:21:ec:b8:1d:72:57:c3:b6:89:c0:
                    b8:cf:3a:46:c8:9b:90:2a:22:55:92:37:21:1e:d3:
                    96:90:33:fa:16:f3:0d:e0:9e:b9:de:c2:31:6b:c9:
                    39:36:a4:ec:95:c2:96:6a:92:ad:90:4b:b4:d8:9d:
                    b5:91:34:4a:a7:a3:c2:ee:56:ca:24:c8:55:89:68:
                    f5:08:ae:9b:a6:63:e2:a6:6a:24:d0:9e:a8:6f:78:
                    d9:0b:c8:0b:cb:89:30:cc:07:2b:0e:2c:6a:34:2a:
                    f6:62:86:e1:3d:e5:26:d6:2c:0f:2f:fc:4c:da:06:
                    df:32:98:82:36:79:c7:22:30:a0:36:f4:05:00:4a:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E8:27:58:D2:19:B8:34:05:1C:D5:6E:91:C7:A6:32:73:80:A0:DF
            X509v3 Authority Key Identifier:
                keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:fe:8b:21:ad:1b:12:8d:cb:6a:b6:36:ce:8c:31:5e:d4:
         4f:cf:33:eb:11:23:e6:3d:0d:0f:e3:58:d6:0c:4b:71:1c:63:
         2f:2c:7d:bd:fc:45:fe:14:6c:69:11:1a:52:1b:d1:60:29:29:
         46:d9:1f:6c:d2:32:54:93:5b:0f:a9:6e:8d:4f:a2:bd:7e:d5:
         22:99:b4:3b:5c:16:c1:5f:5d:d9:3c:9b:2e:55:23:83:6f:7a:
         ba:d5:ca:83:cc:20:a4:7f:a9:02:16:f4:ec:eb:83:43:2c:50:
         2e:26:85:8b:da:70:56:02:24:2e:98:18:d8:9b:ed:12:1c:a5:
         10:7d:05:19:89:df:eb:b0:d6:36:ba:2a:82:b7:04:05:91:7a:
         6f:0a:2d:a6:28:fa:9d:80:cd:76:b2:9c:08:61:7c:7d:0f:54:
         7c:db:a8:f0:b6:39:0d:76:24:f9:81:98:73:65:8e:5c:4a:54:
         70:e9:8f:40:ae:83:e9:73:40:19:34:4c:42:24:dc:28:44:d4:
         c2:ed:0f:8e:4a:38:f4:da:f6:16:14:9f:38:6e:b0:2b:36:70:
         1e:91:a2:ef:32:57:a4:26:a6:72:2a:ec:94:18:c7:99:91:3f:
         6a:67:44:cc:51:ab:72:e0:7e:f7:d8:1c:ad:1e:f7:29:61:38:
         74:2f:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----