Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
File:                     68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json)
Hash identifier:          hz6S5E1+TzHQpiyeIpA57M1xq24a+7xXxH225K49zMI=
Subject key identifier:   15:B1:93:5E:5A:EA:C9:94:09:A9:26:ED:19:E4:75:7B:91:41:41:1E
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       67C5D74CEA0E7BF8EF8378EF5C324253E1E0638C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
Manifest number:          03C8
Signing time:             Sat 17 Oct 2026 04:02:51 +0000
Manifest this update:     Sat 17 Oct 2026 03:57:51 +0000
Manifest next update:     Sun 18 Oct 2026 07:41:51 +0000
Files and hashes:         1: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: 8LmqP8gtNjhiHekfq1WdUArXeOZ0o3WuSogVyMX2JuA=)
                          2: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: 7bGbZEYsNwNybynj+s5RaK/6oYiRBuLp64OUCtawAMQ=)
                          3: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: /VvcmDNNpknvHnCzi9EbYwXzn7AZrMAKQxPNGxrdwD8=)
                          4: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: eHMh/ctUhyhMldjz0BeQMWyOuIbcUjDfY7nHZnK2Mgk=)
                          5: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: ZXi1Xe9nLhbn9OL3ibJSn3bTIkfHaubiBKMnqsxDXVE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c5:d7:4c:ea:0e:7b:f8:ef:83:78:ef:5c:32:42:53:e1:e0:63:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Oct 17 03:57:51 2026 GMT
            Not After : Oct 18 07:41:51 2026 GMT
        Subject: CN=15B1935E5AEAC99409A926ED19E4757B9141411E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:e5:31:22:db:c2:f2:c5:02:c5:62:d5:84:
                    8a:7e:5e:4c:c3:ad:2d:09:36:df:11:16:6c:66:ad:
                    1b:70:86:f6:e5:6e:78:18:0e:d7:ce:fc:09:0a:f8:
                    32:3e:e6:aa:ea:2b:93:35:fc:ce:30:33:ef:c2:84:
                    ba:a9:24:3d:37:17:9d:8d:c2:3b:e5:69:0e:17:47:
                    bf:91:b4:8d:ac:1c:67:ad:71:8b:bb:ba:ab:fb:72:
                    ac:c9:d7:ea:ba:c5:20:1e:b1:9b:c0:35:f2:76:78:
                    bf:53:28:11:e3:a3:c1:a3:d5:24:df:3f:6d:ac:4d:
                    83:9f:e5:64:9f:48:70:05:57:34:52:21:ac:12:75:
                    63:77:69:e4:4e:a6:16:d4:70:1b:45:43:06:ad:a3:
                    22:36:89:b6:54:c3:30:2c:bf:fe:3f:bb:84:cf:6b:
                    7a:bd:e5:f2:90:a4:4b:f5:e2:b8:75:cf:65:38:69:
                    16:f3:23:09:b3:11:58:cf:81:a3:fb:cf:c0:4c:f2:
                    33:24:0e:9e:06:34:0e:ce:9d:5d:32:40:2e:34:1f:
                    af:2a:15:59:60:58:b5:51:4d:dd:44:cd:a9:6b:e0:
                    64:33:7e:11:a7:70:cc:5f:17:10:89:88:ee:9e:fc:
                    c8:b7:1d:11:dd:b9:69:95:9c:ff:5b:d3:0b:86:fc:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:93:5E:5A:EA:C9:94:09:A9:26:ED:19:E4:75:7B:91:41:41:1E
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:4c:dd:35:08:6e:1c:4d:f8:fa:fb:4b:e5:09:1e:f2:2a:
         72:71:fc:d7:e4:53:49:39:e9:c0:ae:1f:74:a6:2d:c4:55:07:
         0f:e4:9d:e0:5c:00:25:b2:66:ef:38:b0:0d:8f:fb:6c:0e:99:
         cf:52:35:4f:54:9a:4a:e0:93:4b:3f:5d:9a:df:20:4d:e0:55:
         89:91:06:62:ff:fa:f7:ea:4d:5f:1a:9e:54:ee:ec:da:05:b4:
         a5:60:c6:80:0f:33:f7:c4:b1:ac:b0:18:91:ec:46:45:9a:d9:
         ca:27:d3:8a:ef:75:fe:41:94:6d:29:5f:e1:42:0c:c2:91:9b:
         ec:ea:29:fb:69:9e:e8:d8:45:78:c1:20:ca:ff:6f:17:a1:24:
         c7:77:20:88:a3:4c:6f:9a:2b:d4:70:e5:b5:89:1b:6c:4b:39:
         64:31:27:0b:ce:19:4d:86:7a:7b:7b:2c:67:1b:2c:27:12:c6:
         9b:14:bc:52:16:2c:ea:a6:42:0f:06:89:76:2d:fa:4f:db:5d:
         c6:4a:37:50:c3:ad:40:e8:cc:b2:0e:a4:9f:43:ed:5d:8d:46:
         33:71:5b:c2:34:6a:d7:24:7a:26:77:2f:e3:d9:fe:38:bf:cb:
         25:92:cc:d2:49:bb:c1:2c:f1:23:15:57:0c:47:3f:4b:a4:83:
         ba:a8:65:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----