Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
File:                     B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft (raw, json)
Hash identifier:          La6xY98CuRsTeRwAeRnSNfZS95XCaUt9sOU8lzLnqdg=
Subject key identifier:   95:C3:BB:0A:E3:A1:D8:79:D8:0E:62:43:55:84:94:11:56:32:B3:46
Authority key identifier: B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8
Certificate issuer:       /CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8
Certificate serial:       6258BAA7B26D0A66382D400844E46DB01AB28571
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft
Manifest number:          CE
Signing time:             Thu 15 Jan 2026 03:40:23 +0000
Manifest this update:     Thu 15 Jan 2026 03:35:23 +0000
Manifest next update:     Fri 16 Jan 2026 04:13:23 +0000
Files and hashes:         1: 34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (hash: k2yKuPlTrNYzg5JJTdJ8QcLnAn8AweZiAh2YLdu4w1Y=)
                          2: B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl (hash: E3Azi99bfnOyDwQSMHFcewwRd61RGgbXEgqOk9KOQxQ=)
                          3: 323830343a356166343a3a2f33322d3438203d3e20323638383039.roa (hash: QBAUeqgtTN14lo+kiykhmV7DkBLft8F9Tpy/C+uXIoU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:58:ba:a7:b2:6d:0a:66:38:2d:40:08:44:e4:6d:b0:1a:b2:85:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8
        Validity
            Not Before: Jan 15 03:35:23 2026 GMT
            Not After : Jan 16 04:13:23 2026 GMT
        Subject: CN=95C3BB0AE3A1D879D80E6243558494115632B346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:d6:5e:fc:0a:c7:03:c9:23:e5:97:52:30:
                    eb:78:42:da:2e:de:b6:90:e1:82:6c:d7:1a:c4:3c:
                    86:6e:ba:fb:4d:70:8b:35:7e:a7:a7:42:2f:d9:a4:
                    50:ac:b2:ee:6e:ad:23:97:71:5d:67:6b:31:50:b1:
                    8d:1e:0d:89:cc:b9:a0:95:6e:3d:0e:9a:5b:81:b6:
                    87:b2:c4:c0:55:fe:8a:29:63:f8:79:cf:0c:ab:8f:
                    ca:8d:a5:a8:6f:77:39:8b:2e:18:59:c6:22:a9:ba:
                    49:65:f2:b5:c7:ab:3c:9c:81:74:73:86:30:84:87:
                    92:61:ed:37:57:e9:fd:d5:e6:33:1f:fd:3a:4f:67:
                    01:5f:db:c1:3d:94:30:8c:b0:02:dd:cd:78:a9:3c:
                    c1:ba:bc:80:20:fd:60:ee:02:9b:8e:0d:3a:03:d6:
                    ea:3f:0e:67:a7:4d:39:ca:7f:20:07:66:9c:fd:e0:
                    9d:e2:e3:ee:09:dc:28:41:f6:6e:ef:96:fa:cf:37:
                    0d:6a:e7:12:ac:e5:3a:bf:ff:2f:d6:69:c2:70:65:
                    d8:41:82:b1:80:2f:6c:66:3c:c2:46:be:a6:07:73:
                    f5:13:14:f7:13:76:b2:1e:d3:60:1d:1a:93:c8:05:
                    30:b0:90:55:3a:6e:64:f9:73:8b:5b:0c:2d:f5:d1:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C3:BB:0A:E3:A1:D8:79:D8:0E:62:43:55:84:94:11:56:32:B3:46
            X509v3 Authority Key Identifier:
                keyid:B2:35:8B:BE:FF:F8:10:E6:0B:E0:40:4A:F6:EC:FE:7D:9F:A0:32:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B2358BBEFFF810E60BE0404AF6ECFE7D9FA032C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:cf:80:6c:ff:a0:5d:5c:ef:81:d3:03:e5:a9:dc:4b:24:
         27:6d:23:5b:0d:cd:b4:60:be:e0:3d:ae:f6:9c:aa:37:71:c6:
         51:52:c9:55:55:bf:45:91:f6:6c:d0:bf:d1:00:ca:fb:f1:bb:
         4a:ba:e3:ff:82:64:a2:58:d1:fb:c2:c2:25:7b:38:e3:98:c1:
         ab:39:d6:73:10:1e:dd:a6:21:bc:c2:fa:c6:9e:ef:63:6d:e9:
         d7:a4:20:67:d6:3a:86:0e:40:ac:9c:1f:20:d6:61:ae:48:38:
         b9:11:f8:05:e3:bf:f9:48:a6:39:db:7b:21:8b:45:3d:31:a8:
         6a:7f:34:49:49:10:d4:81:91:60:de:68:eb:48:78:96:21:6d:
         80:f4:d0:41:d7:ff:45:62:50:e8:b6:e5:56:a7:1e:57:99:ce:
         49:76:e0:50:7d:36:c3:18:a3:65:87:bb:cc:00:4b:4e:03:56:
         10:a0:d8:58:a8:5b:42:cd:9e:10:76:47:52:08:ef:54:b5:96:
         58:43:84:44:08:96:b9:54:c7:f7:a1:ad:1f:ca:fa:8c:10:18:
         0e:d8:9c:a0:6f:0c:52:c9:b3:10:96:f9:a3:7a:1e:65:95:ce:
         75:77:22:a0:b4:5a:cd:4c:89:e9:d8:36:ad:40:16:e0:b2:84:
         49:58:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:30:55 2026 by rpki-client