Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft
File:                     D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft (raw, json)
Hash identifier:          H48KRU6sHgpvVKqi75y+ykQDe6vs6Op2eKauYABJfLM=
Subject key identifier:   BE:08:87:71:69:8D:C9:58:C5:1A:78:D2:B4:E0:58:57:86:5C:A7:BE
Authority key identifier: D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73
Certificate issuer:       /CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
Certificate serial:       796C7B1D00D05DC35B0710BF03DAD647C47D3822
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft
Manifest number:          A0
Signing time:             Thu 10 Sep 2026 00:24:44 +0000
Manifest this update:     Thu 10 Sep 2026 00:19:44 +0000
Manifest next update:     Fri 11 Sep 2026 03:04:44 +0000
Files and hashes:         1: 34352e3136332e3137352e302f32342d3234203d3e20323638353536.roa (hash: bDQFnRashZCsZCh94GRa45rpt5dsvrOkNLhsbO7e6kY=)
                          2: 323830343a353330303a3a2f33322d3332203d3e20323638353536.roa (hash: 0R2hIevD0neJKoWcUBR63gXjzbmtK+QVsrKq1bUWqqU=)
                          3: 34352e3136332e3137342e302f32342d3234203d3e20323638353536.roa (hash: c6wAdPl+dabUTQmxpnBDuszTNuSTUTD/OKcH/gO6Dzk=)
                          4: 34352e3136332e3137322e302f32342d3234203d3e20323638353536.roa (hash: 6mhgEhDym/w+GYxKSrtcA9V0r00aXW5mTwisSD+QQEw=)
                          5: 34352e3136332e3137322e302f32322d3232203d3e20323638353536.roa (hash: f7ROSJ7Zt6tvhEcGbaYMPPMUAWIu1BkC9+zbW/On4cc=)
                          6: 34352e3136332e3137322e302f32332d3233203d3e20323638353536.roa (hash: icUh+lNbW4omJx211WWzC+jOryYCwUKJMGpbYPBkTQ0=)
                          7: 34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa (hash: h0OMDp3AOZL+N26qBfptGzHpzt/isUmdSG1fZ+gNKQ4=)
                          8: D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl (hash: qnEA+F798PSfWwA5hC9lw6wI9v6Fg7h7DEruEaITbJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6c:7b:1d:00:d0:5d:c3:5b:07:10:bf:03:da:d6:47:c4:7d:38:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9870BA926720D53BB9EEBE2A59B473AB1E85E73
        Validity
            Not Before: Sep 10 00:19:44 2026 GMT
            Not After : Sep 11 03:04:44 2026 GMT
        Subject: CN=BE088771698DC958C51A78D2B4E05857865CA7BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:ee:87:0e:ba:87:a4:f1:e7:41:ec:84:89:
                    7c:a8:5c:14:ec:d3:73:e9:38:65:bf:b8:6b:b3:5e:
                    72:09:7e:1a:81:8e:d2:ef:79:8c:54:d0:a6:fe:ca:
                    f7:7f:e7:f1:e5:cf:fa:07:ac:8d:fc:ad:fa:3f:32:
                    46:e5:06:9e:01:1b:84:40:f2:8c:aa:95:70:91:07:
                    37:d9:1d:d1:72:bf:72:2c:8d:2d:0b:24:88:26:38:
                    60:43:04:55:b3:ed:97:70:ce:c5:1d:3c:5f:e0:b2:
                    09:1a:8d:93:9e:6b:dd:2e:48:e6:65:16:3a:56:a9:
                    be:9d:f3:b3:71:b3:86:47:91:b5:26:22:87:55:5f:
                    47:9f:86:b1:47:5e:0a:d4:3b:96:0e:d2:8c:90:81:
                    3b:92:6f:dd:6e:d0:0f:73:cc:5d:85:20:b9:c1:f7:
                    30:29:f8:5d:65:6c:d0:2b:0a:c3:86:a0:4f:cf:42:
                    30:38:8e:c8:df:94:cc:09:ad:59:a4:37:95:f5:74:
                    b1:8f:d8:c0:b2:52:65:3c:ba:d6:3b:f7:6e:99:13:
                    2e:4c:94:93:33:1e:8f:6a:0a:0e:d4:ae:c1:ba:87:
                    a4:03:52:ea:d6:81:e8:dd:51:b4:cf:5a:49:70:06:
                    6a:98:10:86:68:a9:d1:94:3e:10:95:6b:fd:39:c4:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:87:71:69:8D:C9:58:C5:1A:78:D2:B4:E0:58:57:86:5C:A7:BE
            X509v3 Authority Key Identifier:
                keyid:D9:87:0B:A9:26:72:0D:53:BB:9E:EB:E2:A5:9B:47:3A:B1:E8:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/D9870BA926720D53BB9EEBE2A59B473AB1E85E73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:ce:18:92:54:bb:6c:75:54:a1:a6:df:56:65:76:39:47:
         a8:c9:d4:d0:9d:72:68:00:04:9f:62:5f:04:a1:a5:bd:8e:05:
         1e:6f:2d:5d:ae:79:9f:c4:f0:96:21:8e:79:23:e8:0e:bb:99:
         5f:4a:d2:c7:20:88:28:7d:8a:b9:e9:cb:89:8a:af:b9:68:2f:
         75:ba:19:4f:76:5f:47:f3:c0:5d:df:a3:b4:c8:b6:0f:4e:9c:
         93:1c:d8:e4:b7:4a:7c:9a:dd:e2:45:18:71:6d:69:31:2b:19:
         3e:ef:9b:12:91:f3:b6:84:31:1d:1e:59:bf:a7:2f:2c:a2:a4:
         3e:3d:1d:df:82:fb:99:4e:ec:2f:e5:cb:72:fc:60:28:be:d8:
         6b:fc:f5:74:45:b3:26:48:1e:fb:b0:b2:74:26:67:e2:89:d7:
         1e:a1:be:5d:7a:30:bd:cf:b0:d0:68:9f:24:a0:55:39:82:fb:
         b8:6c:bc:89:58:b5:9e:c1:1a:c9:e3:7d:e6:fd:dd:3a:0f:68:
         f7:9e:5b:5a:c5:96:66:cc:9f:69:71:42:bb:d4:e9:8e:94:89:
         f5:05:ec:e9:d4:ac:cf:6e:5b:82:3a:7d:a1:ff:2e:b4:3a:58:
         5a:6e:43:34:b8:07:a5:04:5d:3a:df:2b:e5:99:eb:23:9f:87:
         99:74:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----