Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
File:                     A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft (raw, json)
Hash identifier:          n3k94JiM04TrxP2ygU+YDuVUaqj3hERHNZIN924iZQM=
Subject key identifier:   87:FF:EA:68:CB:B7:B0:E9:0D:68:CA:22:9C:A5:62:CB:A8:92:1F:9A
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       4312C5A9131461E0EBAAC81CD1A86DB26F2111B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
Manifest number:          0298
Signing time:             Wed 30 Sep 2026 03:24:33 +0000
Manifest this update:     Wed 30 Sep 2026 03:19:33 +0000
Manifest next update:     Thu 01 Oct 2026 05:26:33 +0000
Files and hashes:         1: 3138362e3233352e31362e302f32302d3233203d3e20323632343334.roa (hash: vPR2rj4c54vzChTHE+8sO1lppoNmAq3O4UDfnloAuas=)
                          2: 3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa (hash: WlDv8D9xF39y8mgRqFaEG0O63hpVWIHBUXqGUmmO7z4=)
                          3: A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl (hash: 9ns6+CZhgV+lBwANK0bbd4N58cjCAoUeBmNWdi6G6Eg=)
                          4: 3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa (hash: 86t37SjNu1L+3hh7f08hGqnC9qDvOYWsasd8uVgA14Y=)
                          5: 323830343a313762383a3a2f33322d3438203d3e20323632343334.roa (hash: F0lAK/H+F1+uVK+ER7sQSvgPpWB0g5ZYu/wAgXtDj9M=)
                          6: 3230302e302e34382e302f32312d3234203d3e20323632343334.roa (hash: Pr54IZ8oheMUYZkaEw5hwrO9OcjaaWuerS8KAzq2QNk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:12:c5:a9:13:14:61:e0:eb:aa:c8:1c:d1:a8:6d:b2:6f:21:11:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Sep 30 03:19:33 2026 GMT
            Not After : Oct  1 05:26:33 2026 GMT
        Subject: CN=87FFEA68CBB7B0E90D68CA229CA562CBA8921F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:13:ab:cc:df:0f:61:0a:5c:ad:34:95:e3:
                    96:b3:1c:bd:26:88:a9:b7:e5:59:d3:1a:e5:63:c4:
                    a3:2f:87:b4:6a:ae:b0:67:54:55:6b:f9:a3:ae:17:
                    97:30:6e:39:a1:5b:5a:d1:af:6f:5b:43:87:b6:2d:
                    11:bf:00:09:77:dd:3e:62:9b:2f:57:89:da:ca:12:
                    a8:02:00:03:fd:65:e6:2d:fe:b0:36:1c:fa:a9:50:
                    d7:e2:b3:cc:3c:07:4d:2b:6e:30:c6:cd:17:da:27:
                    68:66:11:10:27:29:5c:82:fb:79:2f:70:79:c6:cc:
                    ca:c5:7e:46:f1:e1:12:46:44:10:5c:4a:a2:9f:b6:
                    d6:df:96:f4:71:01:f8:e4:b8:3a:a8:17:7f:5c:cc:
                    22:7b:80:d9:11:31:a0:00:84:25:85:41:f5:41:3a:
                    6f:69:72:62:10:aa:be:a8:71:85:6d:af:db:38:c5:
                    3c:e5:8a:38:61:76:59:41:73:8f:4a:ea:b3:50:57:
                    45:4b:10:57:d9:75:fb:0b:90:f2:e8:96:d7:f3:43:
                    df:f0:fb:ce:96:01:db:53:1d:f9:ef:89:55:59:5b:
                    72:f6:ee:f9:e8:58:1f:a3:86:81:7d:5b:8e:cc:a3:
                    43:98:59:f4:7b:ea:54:07:b3:b2:65:78:a4:7f:cf:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:EA:68:CB:B7:B0:E9:0D:68:CA:22:9C:A5:62:CB:A8:92:1F:9A
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:a4:25:dc:f0:0c:2c:90:4a:9e:14:df:b3:24:3f:96:2d:
         6e:11:bc:84:1f:17:fe:d6:5f:ac:90:de:b2:09:b5:7c:e9:e7:
         2b:9a:3f:24:35:a6:10:dc:9b:2f:e8:45:f4:9a:ba:99:32:8a:
         26:b4:01:57:e9:28:2c:a6:36:79:e7:ab:03:e3:66:45:9b:d8:
         a1:ab:df:27:4e:db:72:eb:f6:c1:b5:0c:90:0c:ab:c0:11:0c:
         76:33:e2:c7:bc:d5:c7:60:4b:97:6b:e4:d5:9c:e3:71:dc:8f:
         a7:1d:12:ac:7a:7f:18:7b:58:38:fc:fd:41:55:10:46:58:51:
         ed:c0:62:7d:08:06:4f:b4:ba:0c:f2:8c:5c:90:11:ca:7a:91:
         c3:7d:9e:b3:49:d1:14:0f:e9:ad:72:1a:a4:51:36:f5:24:03:
         de:2d:e0:02:75:73:08:00:86:ee:78:cf:57:d4:d7:b5:86:6e:
         44:1d:fa:6e:55:94:57:b8:65:d1:4e:9b:a5:de:2c:18:00:97:
         99:89:84:ef:22:1e:1a:d7:20:90:d2:be:4a:2d:6b:9f:a4:fb:
         7f:90:01:da:6f:0e:7a:13:aa:40:66:d0:36:22:53:25:cf:3e:
         d9:7a:89:8f:d7:34:c1:f8:ea:d8:4f:ce:85:2d:0f:74:f5:f2:
         fa:cb:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----