Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
File:                     D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft (raw, json)
Hash identifier:          c5IibcLFujxJN0AE2DfXh1RnLvb9ExCcYtam2c/2nD8=
Subject key identifier:   E3:75:4A:25:5A:F1:B1:B9:23:71:97:D7:DD:A6:60:21:79:A8:31:4A
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       76195E6C46483C4DBB9A0ECFDD5BDAB3829AE0D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
Manifest number:          026F
Signing time:             Mon 21 Sep 2026 10:55:46 +0000
Manifest this update:     Mon 21 Sep 2026 10:50:46 +0000
Manifest next update:     Tue 22 Sep 2026 14:21:46 +0000
Files and hashes:         1: 3139312e352e3132382e302f32302d3332203d3e20323633353336.roa (hash: sDwSz5FvmfYRfHBldus34gyM1BFvbyKhIjtR1oIURL0=)
                          2: 323830343a313338303a3a2f33322d313238203d3e20323633353336.roa (hash: EziDv/hfWTGhtmIO82prSp6CQDvq1LPXcNF4m6VeYCw=)
                          3: D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl (hash: I8Emm4F8H+EUw/t4NFH6Benv3MR93uNtciFOSFJKuao=)
                          4: 3230312e33332e3131322e302f32302d3332203d3e20323633353336.roa (hash: v7l9AkAn8wepmdB6GnMO3qhx8gsTlpMU2ii2dEEKDy8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:5e:6c:46:48:3c:4d:bb:9a:0e:cf:dd:5b:da:b3:82:9a:e0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep 21 10:50:46 2026 GMT
            Not After : Sep 22 14:21:46 2026 GMT
        Subject: CN=E3754A255AF1B1B9237197D7DDA6602179A8314A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:68:98:fc:14:83:15:d3:61:5d:2a:ac:30:
                    6c:33:93:82:09:bf:d5:4a:e3:05:b3:c0:54:b4:51:
                    ec:4c:60:eb:d1:3b:0c:05:9b:e7:e0:2c:9d:fe:0c:
                    80:0b:b6:69:31:4a:49:80:a5:c3:e5:e5:18:6f:1e:
                    5d:8f:a9:61:5f:c5:f6:ff:f2:39:8f:f7:45:ca:fa:
                    36:e1:11:fd:35:e2:65:12:5c:56:2c:47:d7:74:bc:
                    82:bf:2b:8d:29:d5:cc:76:71:97:be:34:b8:87:26:
                    e0:e0:e8:3c:a2:23:14:d6:da:5d:fc:de:73:00:4d:
                    da:b6:36:53:ca:b6:cb:47:e7:bf:6c:fa:44:8f:48:
                    64:98:7f:80:19:79:0d:42:c2:c0:af:71:4c:5d:4c:
                    49:31:27:39:ee:02:fd:f1:d2:8e:31:a5:85:a5:e8:
                    ee:40:83:a3:7b:7e:ba:84:db:83:05:06:1e:2b:54:
                    67:8c:9e:20:97:42:a7:14:0d:41:23:42:97:c0:75:
                    b6:67:97:f2:26:1e:dd:5d:50:29:84:0f:3e:eb:92:
                    25:8a:21:91:c7:f6:c4:96:88:83:21:30:46:63:dd:
                    41:03:2b:b1:25:dd:85:e0:09:e7:28:51:ba:27:a8:
                    80:1e:42:a9:7f:f2:98:ce:74:ec:83:24:c9:98:87:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:75:4A:25:5A:F1:B1:B9:23:71:97:D7:DD:A6:60:21:79:A8:31:4A
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:59:4a:73:c9:e3:f3:4a:49:88:4c:14:c5:b7:87:4e:99:
         96:65:f4:d0:dc:8c:8e:da:0e:1c:29:a4:45:13:dc:2d:e4:17:
         af:dc:ff:d2:50:27:eb:53:c4:5f:0e:ca:a8:af:82:c1:05:26:
         54:91:90:b2:c4:52:a2:3f:9a:5a:7b:af:72:43:23:67:5c:6f:
         d3:1b:fa:39:6b:1e:d0:99:71:24:8c:04:69:42:df:5f:94:6b:
         ce:f2:de:7c:6f:38:09:27:e1:52:d8:98:f5:59:ab:d5:ca:15:
         9f:4c:4e:68:18:10:f3:07:a3:7f:92:2b:4a:ad:f9:fa:27:e9:
         dd:3a:cf:d5:e7:78:fe:bc:a8:2e:af:04:bd:02:b7:28:4b:6b:
         fc:41:48:67:1c:b1:a4:d4:fb:be:27:0e:ac:19:a3:9a:fa:c2:
         56:97:ba:a2:f2:67:4d:09:ac:4a:4b:6f:02:41:f2:8a:d3:08:
         d5:2a:4d:47:5b:45:f9:da:b0:a5:be:96:e9:92:13:3e:a1:cc:
         15:0c:fa:b4:0f:76:18:2d:f4:9d:1d:9d:81:0e:d2:20:d6:b9:
         b3:30:d8:60:bb:ff:b9:8e:17:3a:fe:03:48:e4:e2:89:97:8c:
         13:ca:c1:d8:68:0b:a8:e6:68:de:f1:ad:49:18:62:2b:6e:f3:
         b4:b7:ea:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----