Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft
File:                     3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft (raw, json)
Hash identifier:          Y9oHh3TiBeQq7aesBznTOdVmh2xZC7ooCy/jzLxMEjA=
Subject key identifier:   AE:1B:39:8B:DF:96:63:EF:D2:5E:7C:A5:2E:20:93:FF:E1:36:C2:F3
Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F
Certificate issuer:       /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F
Certificate serial:       5417C0320BFB9F24C2DB2D028B0D4A435914687B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft
Manifest number:          012C
Signing time:             Mon 23 Feb 2026 17:37:10 +0000
Manifest this update:     Mon 23 Feb 2026 17:32:10 +0000
Manifest next update:     Tue 24 Feb 2026 21:27:10 +0000
Files and hashes:         1: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=)
                          2: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl (hash: jkVD2/MuP/WcsNuWhU4/rsqhY0G+hQfeoDaA7OWi3to=)
                          3: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:17:c0:32:0b:fb:9f:24:c2:db:2d:02:8b:0d:4a:43:59:14:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F
        Validity
            Not Before: Feb 23 17:32:10 2026 GMT
            Not After : Feb 24 21:27:10 2026 GMT
        Subject: CN=AE1B398BDF9663EFD25E7CA52E2093FFE136C2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:57:50:fd:5b:3b:82:3b:1e:81:9a:7e:67:
                    3d:e6:64:37:52:28:c1:43:ff:46:a9:4f:17:51:7b:
                    b2:37:9e:a7:45:29:bb:b5:0d:30:dd:be:27:88:ae:
                    c8:05:2b:34:62:f4:0d:0f:8e:09:4a:22:f8:da:25:
                    6f:fa:6e:34:b3:c4:10:6d:db:19:d6:83:fc:0f:92:
                    dc:8f:75:6a:f5:d0:67:ff:30:8e:10:53:aa:11:43:
                    14:36:71:47:b1:9f:d4:07:24:2a:52:1c:e2:59:42:
                    ea:5b:ad:16:a1:52:00:9c:1b:21:91:0f:14:79:43:
                    29:fa:f1:32:23:9c:94:69:6f:a8:86:b8:58:f1:83:
                    fa:5d:33:c2:0c:d4:96:0c:6f:c6:f8:61:57:9b:da:
                    44:d3:11:74:02:08:5c:a7:53:96:79:e9:aa:60:3b:
                    86:40:8a:51:6e:c6:dc:66:a7:87:70:07:58:2e:bb:
                    e4:02:9b:e2:9c:bd:05:91:a4:31:e0:4a:12:4b:10:
                    4d:cc:29:9c:a5:fb:84:29:48:f9:24:0f:45:96:4e:
                    cb:57:b8:0e:fe:7a:d2:aa:e3:5f:16:04:e3:ca:17:
                    59:53:70:7d:2b:0d:5f:63:1e:64:ab:de:5f:77:f1:
                    09:b9:dc:e2:e6:f9:dd:77:81:92:e7:c8:0a:04:92:
                    2c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1B:39:8B:DF:96:63:EF:D2:5E:7C:A5:2E:20:93:FF:E1:36:C2:F3
            X509v3 Authority Key Identifier:
                keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:3f:3c:61:b8:96:90:86:3a:74:d6:4e:76:4d:5a:7d:e4:
         ae:57:5f:9e:bb:62:ce:63:ed:da:26:bb:3f:1d:a2:6f:41:a3:
         f3:ac:83:78:a8:f8:01:71:8b:b8:b4:ca:47:c5:01:43:05:85:
         01:21:e4:ef:4d:93:41:e1:13:b6:42:e3:56:bf:00:a4:1d:fb:
         46:b5:35:bb:88:b9:7b:63:a9:d5:19:2d:50:74:02:3f:c4:8c:
         d1:d7:70:f5:79:d9:ab:d1:e5:ad:d6:12:32:6f:ed:61:9f:76:
         38:4f:3c:3c:7c:23:d3:56:fa:b7:1b:0d:5f:62:19:6d:22:80:
         44:e7:d0:db:3e:ab:f5:b5:c7:77:62:9e:43:f5:0e:d4:52:7d:
         5f:42:60:83:91:24:5b:21:c4:d1:6d:a3:50:1d:ef:fc:26:31:
         77:e5:b8:30:c4:00:e4:ee:b0:cc:a8:67:5a:de:1a:70:a5:e2:
         58:43:c6:da:75:a1:e6:f6:0f:f3:b2:fa:cc:e0:63:3a:d3:df:
         04:94:23:e0:ca:8b:04:70:60:f7:1e:43:54:22:9b:a5:63:51:
         c6:c2:a5:a3:fa:00:3f:9f:10:e9:43:1a:a7:18:7c:6e:1e:f5:
         36:08:ac:a2:14:27:ec:9c:cf:0b:43:36:da:c3:da:70:07:da:
         d2:43:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:39 2026 by rpki-client