Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.mft
File:                     9856E6EC431EB6EF91607E2865CCEFB48EC91E18.mft (raw, json)
Hash identifier:          v4OPqy6tBw91wzJDW821mTrGok8pCil2teifa+YHrA8=
Subject key identifier:   D4:AA:62:57:40:21:94:3A:E7:A0:74:AF:29:C5:E4:62:A4:0D:1A:70
Authority key identifier: 98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18
Certificate issuer:       /CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
Certificate serial:       24CFB9F9DECE578D227945D0AEE75EBD08A20AA4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.mft
Manifest number:          2B
Signing time:             Fri 25 Sep 2026 20:42:22 +0000
Manifest this update:     Fri 25 Sep 2026 20:37:22 +0000
Manifest next update:     Sat 26 Sep 2026 23:29:22 +0000
Files and hashes:         1: 323830343a373239383a3a2f33322d3332203d3e20323730383633.roa (hash: aFibfUyaBbhzwnxME/ffDP98mX3NgZmHFBim93UyouQ=)
                          2: 3138362e3235302e33322e302f32322d3233203d3e20323730383633.roa (hash: ODLJYAkJz3AAYolhECB5hGJ4yJp2uy3a8kfyoAibht0=)
                          3: 9856E6EC431EB6EF91607E2865CCEFB48EC91E18.crl (hash: YfF6iD+pscbeWFmiwOgokRxtk3HPN8ykAkuZ7K0mo1w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cf:b9:f9:de:ce:57:8d:22:79:45:d0:ae:e7:5e:bd:08:a2:0a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
        Validity
            Not Before: Sep 25 20:37:22 2026 GMT
            Not After : Sep 26 23:29:22 2026 GMT
        Subject: CN=D4AA62574021943AE7A074AF29C5E462A40D1A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:b9:04:4d:57:7b:f6:e1:9a:59:0d:5f:9f:
                    0b:93:31:ec:82:e1:57:8a:03:f3:d6:47:fd:0a:c1:
                    4c:2b:40:3a:d2:80:4f:ca:78:af:2d:8c:ae:19:a9:
                    7b:a8:5b:9b:4e:94:8e:be:22:6e:b7:84:e8:4d:2b:
                    80:37:15:3d:5a:e4:f9:0c:bf:d0:6f:d2:5d:4e:24:
                    62:ee:03:84:2e:19:7a:8f:7a:27:29:4f:c4:a4:22:
                    f2:21:ea:6d:6f:57:c9:fa:26:32:dc:28:17:8c:4d:
                    77:7c:37:5d:de:44:53:ca:7f:a3:4a:63:77:c5:26:
                    a7:39:63:9c:58:4a:21:e2:bc:c9:ad:62:52:a5:0a:
                    3c:b5:b8:80:e2:0c:b8:b6:57:05:28:e2:5c:7f:62:
                    57:02:98:34:11:f3:01:07:c9:df:1a:01:e1:8d:11:
                    10:96:d8:0d:f6:12:22:a5:30:3d:75:03:8d:50:a8:
                    3f:35:90:12:71:de:24:18:0c:8c:aa:38:0a:48:a2:
                    69:a6:d7:75:7f:cf:90:1e:5c:c8:56:c4:95:e5:47:
                    bd:4f:bc:a3:62:1e:a6:95:6e:6e:cc:29:f8:34:91:
                    42:9f:57:ea:bb:85:90:33:30:a4:96:91:47:d4:26:
                    8c:7a:07:54:56:44:01:9e:be:c3:db:ee:9b:a8:18:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AA:62:57:40:21:94:3A:E7:A0:74:AF:29:C5:E4:62:A4:0D:1A:70
            X509v3 Authority Key Identifier:
                keyid:98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:61:a8:f9:22:fb:80:7f:fa:c4:c9:a2:e6:b9:7b:22:d4:a7:
         9b:67:58:a4:99:32:c4:29:bd:48:23:5d:85:b1:03:0b:05:bd:
         d8:25:2e:ea:9b:e0:c1:3a:53:7c:41:ca:6f:b7:7e:a0:08:9d:
         5a:49:95:7e:4c:f7:d7:e6:2a:ef:2e:03:fb:6b:77:6b:1c:ea:
         b2:08:57:c7:24:36:e9:55:3a:b3:d0:43:bb:a8:3b:77:c8:c5:
         48:13:81:d6:a9:9d:b5:56:39:e3:26:57:06:fc:31:f2:0d:6c:
         ab:4c:91:87:6a:aa:e3:28:53:66:f6:3b:a2:1f:90:25:93:fe:
         16:cf:bf:a4:ca:b8:b1:88:9c:56:32:2e:27:6c:c8:1f:d6:7c:
         55:e4:ff:88:7a:b2:34:b3:ff:f4:27:64:15:b1:65:fb:df:96:
         26:ba:3d:78:75:de:36:c7:91:1b:50:f6:34:57:35:d8:27:81:
         c2:f6:9f:3c:95:36:36:ed:0e:27:71:b3:94:58:61:66:dc:94:
         61:7b:e8:c8:de:a5:66:f0:98:52:dd:85:63:00:ef:fd:59:7b:
         f2:e5:5c:d4:79:49:c5:f3:d6:da:22:d1:b2:81:33:6a:8d:33:
         81:50:82:c6:9c:81:cf:71:8c:02:8f:59:39:05:ea:61:b9:7b:
         f8:0f:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----