Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
File:                     CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft (raw, json)
Hash identifier:          opy0Z75A40JpV5STPrYqlhV1mxYrDfZhBUFF+3rrAqA=
Subject key identifier:   9A:F4:4D:79:F3:8D:70:77:75:91:A2:C7:FC:D1:BE:5A:0B:3A:3C:3D
Authority key identifier: CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
Certificate issuer:       /CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Certificate serial:       5853BE0A886EEA709F0F3D9192A37F78D34F6350
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
Manifest number:          EF
Signing time:             Sun 07 Jun 2026 13:32:28 +0000
Manifest this update:     Sun 07 Jun 2026 13:27:28 +0000
Manifest next update:     Mon 08 Jun 2026 17:11:28 +0000
Files and hashes:         1: 3138392e3132372e3138302e302f32322d3234203d3e20323730373135.roa (hash: RhjZm2uSbdJQigxky7M1jCcFaL9XEEChqLcnVSTm+sM=)
                          2: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl (hash: wfGkN88bnAkBjV8jc4ozawbs7ls9Qc23zj0f1UCTnJM=)
                          3: 323830343a373034303a3a2f33322d313238203d3e20323730373135.roa (hash: sNgEF06hBcueOscjyGonLqPiAr/nqxGOmW+2KVDrBsY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:be:0a:88:6e:ea:70:9f:0f:3d:91:92:a3:7f:78:d3:4f:63:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
        Validity
            Not Before: Jun  7 13:27:28 2026 GMT
            Not After : Jun  8 17:11:28 2026 GMT
        Subject: CN=9AF44D79F38D70777591A2C7FCD1BE5A0B3A3C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:60:cc:d8:5f:7c:e4:c6:d4:b0:98:e5:63:
                    6a:b7:b3:e7:f0:52:4b:65:b3:5d:f7:bf:a0:b6:08:
                    e5:5b:49:c8:7d:43:50:14:22:54:8d:a5:c4:56:20:
                    91:43:ca:e0:85:0d:10:98:0a:ce:7c:27:14:9d:63:
                    9d:17:a5:4c:f9:f9:99:dc:e8:75:52:6a:f5:b2:e1:
                    8a:5a:26:35:65:ee:d5:69:de:b2:2f:69:29:89:44:
                    ca:c5:2c:a7:1e:3e:28:f6:c8:8f:b7:a8:a7:10:c0:
                    f6:c8:18:da:91:54:8b:4c:9d:a1:48:06:58:58:a9:
                    bb:f6:9d:2f:eb:4d:c9:ff:51:da:ac:50:5b:ba:cb:
                    f5:22:8b:9d:fd:26:ff:59:ef:e7:12:8e:f9:dc:a7:
                    2d:c7:3a:40:d1:a2:5f:47:c9:d5:c7:c2:55:e1:46:
                    61:14:5f:37:f7:ea:3a:5b:62:64:1b:22:51:c2:c9:
                    55:d6:45:be:33:89:8e:89:e6:12:00:2b:ff:79:12:
                    81:8d:19:fb:0e:b8:89:34:1f:de:ed:fb:97:09:e8:
                    88:61:c2:eb:be:85:1c:a3:56:cc:5c:47:a6:28:1c:
                    9f:09:bd:7d:73:cc:53:ca:d4:5a:ac:3e:66:cf:11:
                    ff:32:e3:ab:b3:e8:ad:cc:3d:44:94:de:1b:bf:85:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F4:4D:79:F3:8D:70:77:75:91:A2:C7:FC:D1:BE:5A:0B:3A:3C:3D
            X509v3 Authority Key Identifier:
                keyid:CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:0c:19:2b:4f:6e:8c:2d:50:04:c0:4b:1f:d2:52:2a:f1:eb:
         ec:41:18:04:ea:6a:df:5d:fe:f8:b4:a7:d6:ee:a5:65:06:27:
         ac:05:b8:39:15:31:69:45:2f:41:f0:4b:d5:c0:bb:0f:52:cf:
         ab:d9:0e:89:d5:58:83:5c:e5:86:7f:5b:37:17:10:e2:f9:e4:
         16:32:bc:af:49:f4:05:9d:2e:7d:51:57:2e:9c:6b:d2:ec:7d:
         f2:fd:8f:17:e0:b5:d1:8e:5e:9a:99:b9:2e:f5:e3:2a:52:8f:
         46:a3:ab:ec:41:83:01:37:c2:02:bb:01:59:72:e7:6e:79:f6:
         b2:e6:eb:e1:1e:07:13:52:fa:5e:ca:02:ce:a8:c8:34:f8:c7:
         1c:f2:ab:12:9f:9c:99:ae:da:f8:0e:a7:e2:c9:5d:52:51:db:
         ee:89:27:19:a1:0f:21:35:7e:93:e1:b1:ad:4b:0e:d8:d8:a9:
         7f:db:a2:01:a9:4a:f9:aa:e9:7d:4b:d5:0c:32:e4:db:47:9c:
         3d:15:9e:6d:7c:3e:46:17:ab:ad:b8:b7:dd:74:66:8d:93:ec:
         6a:3f:da:9f:a3:63:1a:fe:6e:a0:63:d4:fd:6c:22:97:98:9b:
         8e:a2:ff:bf:74:76:19:99:69:28:80:71:ed:4b:bf:ec:d1:f3:
         1a:0c:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:21:48 2026 by rpki-client