Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
File:                     3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft (raw, json)
Hash identifier:          11uj5pfsMiN/NBlo5vfxLyhMrgwP2ZGtEL8//EeLJok=
Subject key identifier:   72:07:15:0C:49:D8:45:58:5E:D7:CD:08:C4:F1:16:DB:D7:EC:4D:94
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       7CD832DA53E6BB5C394E09E05B28B2EDD33C58B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
Manifest number:          0539
Signing time:             Sun 27 Sep 2026 15:41:01 +0000
Manifest this update:     Sun 27 Sep 2026 15:36:01 +0000
Manifest next update:     Mon 28 Sep 2026 19:23:01 +0000
Files and hashes:         1: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (hash: wj2v8FaXrypVWJ5QgcZuYBN25ZTB3posFfJqz3YLkcc=)
                          2: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl (hash: ST1M1TnHsPpefQ4FCa5ZAa31zfX6v58nsFFA5jVTUG4=)
                          3: 3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (hash: qb5CEyMM5Bsyj+QUacujxzF+SjW2ntuhn2byZVb2KWQ=)
                          4: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (hash: 5D9aXFlbU9fjLoiSVvBefi4iRP3TG6aejX0Oq29ADJQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d8:32:da:53:e6:bb:5c:39:4e:09:e0:5b:28:b2:ed:d3:3c:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Sep 27 15:36:01 2026 GMT
            Not After : Sep 28 19:23:01 2026 GMT
        Subject: CN=7207150C49D845585ED7CD08C4F116DBD7EC4D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:ca:be:18:8f:9a:a1:33:b3:86:39:bd:e6:
                    d3:82:bb:45:c1:31:37:1e:ad:45:2d:7b:23:14:b6:
                    bf:bf:eb:0e:5f:3e:d7:a7:b0:76:ce:35:92:6d:4f:
                    d8:f1:76:fa:3a:ea:1e:59:6a:d0:8e:08:ad:15:42:
                    aa:6c:c3:af:ef:43:93:f6:87:0d:da:d8:a1:77:1e:
                    ae:37:0a:ce:d4:d0:c1:a8:97:a0:40:66:80:e4:66:
                    0b:8b:35:51:1f:1c:11:e7:bc:e6:30:8f:37:2a:bd:
                    6f:45:c3:5f:f3:5b:4a:66:d6:e4:bb:45:23:4a:99:
                    52:0d:48:a6:3b:6e:d7:64:3d:ac:50:f8:56:45:0c:
                    df:8a:e7:7a:7d:60:97:09:f0:1b:ba:4c:d9:51:8f:
                    04:54:b8:7d:cc:84:bb:49:fb:ab:67:c9:d3:1d:01:
                    9b:86:5a:79:65:b4:c6:da:5c:5c:37:f3:7e:26:b7:
                    fe:07:e5:bd:ab:0d:b2:e6:c7:8d:48:34:97:2a:3b:
                    49:32:61:cd:9f:ed:c4:74:78:65:04:95:94:56:39:
                    8a:ba:b8:e4:dd:2d:25:42:b1:8b:70:ff:2f:fa:32:
                    5f:a9:03:ed:e6:f9:fb:8f:ac:1b:8a:9c:3c:51:85:
                    0d:ce:79:46:61:69:94:d6:9e:c8:68:61:a5:eb:de:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:07:15:0C:49:D8:45:58:5E:D7:CD:08:C4:F1:16:DB:D7:EC:4D:94
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:59:ef:d6:ec:f8:23:99:95:e5:1b:24:68:60:56:8b:70:
         8b:bb:ec:a7:2b:d1:21:8f:b4:47:ec:9e:fb:75:91:97:48:67:
         8f:b1:f9:15:1e:c1:db:d1:d3:70:77:02:98:25:0d:df:12:42:
         ee:05:7c:22:ab:2d:69:e9:f2:36:d5:5e:19:d1:c9:11:c8:f4:
         86:eb:76:3e:c6:84:84:df:42:51:21:b3:66:ac:71:b5:11:dc:
         f1:4c:0d:a4:e6:48:a3:6b:a1:c4:41:a9:c6:98:53:4b:1d:ee:
         73:17:6f:08:3c:8d:af:88:3a:6a:11:d5:fe:54:fa:06:49:f9:
         d2:9d:e4:89:76:57:bb:68:55:16:12:1f:84:1b:b8:6b:78:e7:
         18:af:ed:4e:f2:82:15:72:60:9f:78:b2:3b:06:0b:08:42:31:
         63:b8:2f:87:cd:b7:39:8d:43:bf:58:b0:63:65:49:94:c3:f4:
         7d:97:01:ce:a5:0c:cd:72:17:a4:f2:f0:01:ac:19:fe:7c:72:
         b6:8d:e2:e3:74:f9:10:78:cf:69:38:09:ce:54:95:17:cf:28:
         e0:47:d4:50:89:ae:0e:b6:6d:88:2b:5e:9c:b3:09:45:75:39:
         e5:e0:ed:73:91:3a:b4:1f:d2:fb:05:3d:ac:86:57:3c:0e:a9:
         9c:f9:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----