Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft
File:                     2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft (raw, json)
Hash identifier:          fbzdy6myvMVnNtn8LHnKitS/gLZB9zmqXASUPOX1kiI=
Subject key identifier:   B2:0E:E2:A5:39:EB:BA:D1:1A:03:49:DA:04:AC:33:1A:CE:33:43:D0
Authority key identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D
Certificate issuer:       /CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D
Certificate serial:       7D3B515AFEAD13DB16D29747959446426F918287
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft
Manifest number:          0134
Signing time:             Tue 24 Feb 2026 04:51:59 +0000
Manifest this update:     Tue 24 Feb 2026 04:46:59 +0000
Manifest next update:     Wed 25 Feb 2026 05:54:59 +0000
Files and hashes:         1: 3138392e33362e3133362e302f32322d3234203d3e20323730363437.roa (hash: T3KgvBQtkMn3/bW19ncfX5h/srF6Jaox8KLTXT0VPkE=)
                          2: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl (hash: b75wvimoizYzggHt9gp6Bm4zDyINun0Kj4cCswMeeRs=)
                          3: 323830343a366633633a3a2f33322d3438203d3e20323730363437.roa (hash: Yy9a80hxuGkv47p1WxAV8/8jNtLNtfdf0ZtuB0b65RU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3b:51:5a:fe:ad:13:db:16:d2:97:47:95:94:46:42:6f:91:82:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D
        Validity
            Not Before: Feb 24 04:46:59 2026 GMT
            Not After : Feb 25 05:54:59 2026 GMT
        Subject: CN=B20EE2A539EBBAD11A0349DA04AC331ACE3343D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:32:d1:03:02:a6:05:b7:5b:46:7f:82:3d:
                    81:9e:48:86:89:fb:8f:74:44:a6:71:ab:82:4d:4f:
                    a1:f3:41:bf:e6:30:64:c8:04:50:a6:c4:65:73:e5:
                    34:21:9b:b7:d4:c8:ea:11:1e:e7:64:f5:11:53:b2:
                    5b:60:9f:32:b3:14:8c:84:c4:bc:0a:a2:cf:2f:96:
                    98:5f:94:65:dd:1f:8f:64:cf:d8:9d:9c:fb:14:4f:
                    0b:4f:c7:a1:d7:b5:01:1d:ea:b9:90:34:72:8e:3d:
                    51:c5:ab:58:87:56:a0:0b:8b:f2:ea:f2:76:34:03:
                    45:ab:e5:69:78:d2:9e:ed:cd:fc:8d:69:3b:13:fc:
                    2e:69:0c:35:e6:18:69:12:6e:fe:e9:c3:84:e4:f8:
                    a1:b4:e0:a8:11:c1:e5:4a:01:c4:d7:23:45:97:dc:
                    af:ae:66:ab:28:46:4e:d0:d1:74:eb:1e:6e:61:36:
                    ec:d3:23:e5:fb:bc:47:dc:df:1d:65:0b:c4:c6:e1:
                    62:b4:cf:c6:28:a7:54:06:c4:0d:7e:e1:95:97:96:
                    46:6c:7e:32:7f:c7:04:9d:5f:3c:73:f9:bd:23:29:
                    06:45:b3:85:fc:01:16:cd:5e:84:86:5f:8d:5b:6d:
                    1a:9c:9d:e9:30:35:4b:c4:77:8c:10:a8:2b:c4:0d:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:E2:A5:39:EB:BA:D1:1A:03:49:DA:04:AC:33:1A:CE:33:43:D0
            X509v3 Authority Key Identifier:
                keyid:2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:78:c3:dd:61:ad:8f:99:47:f2:f5:b2:d0:4a:32:2a:af:
         91:13:95:36:42:9b:10:f5:98:f4:72:d2:ac:e9:ba:52:63:8a:
         e5:ea:4b:ab:3d:8e:3b:53:8e:8e:e7:3a:ed:1c:79:8d:31:29:
         97:1c:cb:47:ac:6c:4a:0c:ee:f3:b5:7f:3b:25:7c:b4:13:00:
         07:62:7d:63:c7:55:71:cc:5a:1e:0c:2a:9a:94:0c:1a:41:b5:
         88:47:07:55:45:d3:ab:ab:b2:92:e0:36:9a:95:f7:b5:16:e1:
         f7:25:3b:66:ff:cc:3a:5a:4d:0e:d9:38:92:a8:b6:cd:72:0d:
         d2:af:df:08:99:29:4c:10:29:7f:19:28:de:99:59:ff:8b:94:
         0e:b2:0f:bc:9f:a0:c0:2c:6b:4d:28:09:08:87:e3:62:b7:16:
         09:39:d9:62:fb:ab:64:85:dc:03:3f:29:3a:90:f4:75:6b:b3:
         e0:05:ec:40:09:e7:7c:0d:6b:3c:0e:ab:09:40:97:4b:dc:a9:
         a6:8d:22:a8:5b:c1:96:1a:30:b0:f4:2e:b9:a7:88:fb:a1:62:
         02:42:b5:bb:1b:05:74:1c:0d:dd:e5:eb:51:64:38:ac:71:7b:
         92:30:e4:52:4f:05:6c:68:a3:36:f1:52:85:76:44:7f:ec:cd:
         c7:61:96:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfTtRWv6tE9sW0pdHlZRGQm+RgocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRDU1NkJEMTZEQzIzMDRCOTJEODhENERFOEE3NDlF
MjJERkExRDAeFw0yNjAyMjQwNDQ2NTlaFw0yNjAyMjUwNTU0NTlaMDMxMTAvBgNV
BAMTKEIyMEVFMkE1MzlFQkJBRDExQTAzNDlEQTA0QUMzMzFBQ0UzMzQzRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZjLRAwKmBbdbRn+CPYGeSIaJ
+490RKZxq4JNT6HzQb/mMGTIBFCmxGVz5TQhm7fUyOoRHudk9RFTsltgnzKzFIyE
xLwKos8vlphflGXdH49kz9idnPsUTwtPx6HXtQEd6rmQNHKOPVHFq1iHVqALi/Lq
8nY0A0Wr5Wl40p7tzfyNaTsT/C5pDDXmGGkSbv7pw4Tk+KG04KgRweVKAcTXI0WX
3K+uZqsoRk7Q0XTrHm5hNuzTI+X7vEfc3x1lC8TG4WK0z8Yop1QGxA1+4ZWXlkZs
fjJ/xwSdXzxz+b0jKQZFs4X8ARbNXoSGX41bbRqcnekwNUvEd4wQqCvEDfONAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsg7ipTnrutEaA0naBKwzGs4zQ9AwHwYDVR0j
BBgwFoAUKw1Va9FtwjBLktiNTeinSeIt+h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtYUnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxt
TWIvMC8yQjBENTU2QkQxNkRDMjMwNEI5MkQ4OEQ0REU4QTc0OUUyMkRGQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMEQ1NTZCRDE2REMyMzA0
QjkyRDg4RDRERThBNzQ5RTIyREZBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWtYUnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxtTWIvMC8y
QjBENTU2QkQxNkRDMjMwNEI5MkQ4OEQ0REU4QTc0OUUyMkRGQTFELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOah4w91hrY+ZR/L1stBKMiqvkROVNkKbEPWY9HLSrOm6UmOK5epLqz2OO1OO
juc67Rx5jTEplxzLR6xsSgzu87V/OyV8tBMAB2J9Y8dVccxaHgwqmpQMGkG1iEcH
VUXTq6uykuA2mpX3tRbh9yU7Zv/MOlpNDtk4kqi2zXIN0q/fCJkpTBApfxko3plZ
/4uUDrIPvJ+gwCxrTSgJCIfjYrcWCTnZYvurZIXcAz8pOpD0dWuz4AXsQAnnfA1r
PA6rCUCXS9yppo0iqFvBlhowsPQuuaeI+6FiAkK1uxsFdBwN3eXrUWQ4rHF7kjDk
Uk8FbGijNvFShXZEf+zNx2GWSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:16:10 2026 by rpki-client