Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft
File:                     BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft (raw, json)
Hash identifier:          YABW66u3iu8UafwTCWstEXLIL7kEAdT8C86/HCGWgrg=
Subject key identifier:   8C:B8:C0:7F:37:E7:98:19:C4:B5:B0:CF:2C:0D:5C:84:CA:69:F3:E2
Authority key identifier: BD:FB:74:61:4E:38:AE:43:18:42:AC:DC:D3:D0:45:E6:CF:C4:AF:37
Certificate issuer:       /CN=BDFB74614E38AE431842ACDCD3D045E6CFC4AF37
Certificate serial:       49C0745F6262AB1A948BB1023A646A315B7E2FFD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft
Manifest number:          C1
Signing time:             Tue 15 Sep 2026 08:15:20 +0000
Manifest this update:     Tue 15 Sep 2026 08:10:20 +0000
Manifest next update:     Wed 16 Sep 2026 11:15:20 +0000
Files and hashes:         1: BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.crl (hash: KfCNWCbTQFF9DlWppfN3HodCDn0NF5P8Xq3ZvmpuN08=)
                          2: 323830343a343036383a3a2f33322d3438203d3e20323635393537.roa (hash: hv/xzrUXf/F88x5g4i2+j0iw463q85dSDf06yCwHjM4=)
                          3: 3136342e3136332e3135362e302f32322d3234203d3e20323635393537.roa (hash: txNGUFH6H5nKqs5HOgPitq0yV2hT9RBqZlzi7aoy6Rk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:74:5f:62:62:ab:1a:94:8b:b1:02:3a:64:6a:31:5b:7e:2f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFB74614E38AE431842ACDCD3D045E6CFC4AF37
        Validity
            Not Before: Sep 15 08:10:20 2026 GMT
            Not After : Sep 16 11:15:20 2026 GMT
        Subject: CN=8CB8C07F37E79819C4B5B0CF2C0D5C84CA69F3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:8f:cf:bc:25:0e:34:4b:c2:bb:66:f2:00:
                    f8:bc:28:4a:9e:1b:8a:83:fc:36:20:01:79:90:1d:
                    3f:fc:f5:55:dd:3f:7f:ee:fd:0d:cc:05:01:e9:2f:
                    f7:5d:06:65:34:e5:8b:2d:8e:9b:68:13:51:ae:b6:
                    32:01:52:f2:5d:f5:86:e6:a1:f0:7d:97:21:5f:16:
                    f3:97:db:09:4b:f5:46:f0:b6:b8:56:41:6c:71:fc:
                    64:54:4e:1b:98:eb:8f:27:31:71:d3:ec:90:38:1b:
                    16:b6:a4:f9:dd:de:f8:78:68:ea:a7:52:2e:2a:fe:
                    ac:45:ce:a3:a3:75:db:e0:52:ee:44:e5:9e:19:db:
                    9e:95:2c:96:9f:b5:99:11:63:ba:9e:77:7f:07:19:
                    9d:4c:21:16:98:b0:89:a2:58:d2:fa:d3:81:8c:5e:
                    e8:d9:2f:09:07:e4:d8:5a:6a:30:cf:07:8e:b8:9f:
                    8a:fc:d6:d2:ba:46:ab:73:1e:73:f1:4b:51:c1:ad:
                    d0:ea:96:b1:58:e0:d0:3c:42:84:b8:06:7d:ab:bf:
                    3b:c6:bb:53:6e:a3:ef:f7:73:e4:e2:9d:58:39:9b:
                    70:a8:dd:d4:4e:0a:7b:33:a7:e9:d8:d4:84:bb:8f:
                    69:8f:69:65:67:d8:3d:11:0d:4b:cb:5b:df:5e:85:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B8:C0:7F:37:E7:98:19:C4:B5:B0:CF:2C:0D:5C:84:CA:69:F3:E2
            X509v3 Authority Key Identifier:
                keyid:BD:FB:74:61:4E:38:AE:43:18:42:AC:DC:D3:D0:45:E6:CF:C4:AF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:84:04:1d:d0:b9:72:8d:9e:70:e7:55:c8:63:97:7a:5a:1f:
         c9:9c:9f:fb:f8:f9:ad:2f:cd:53:d6:01:56:14:4f:82:08:cd:
         53:9c:98:04:f9:fd:8b:45:03:38:57:09:aa:05:1b:1f:2b:f5:
         ac:15:c8:6a:25:9c:75:b5:08:02:70:4f:20:c4:3e:c7:07:2b:
         91:3d:4c:0b:a0:af:4e:8e:7b:ed:08:19:ed:08:d6:a2:e9:df:
         e8:65:95:fa:fa:7c:d6:d3:10:23:e9:27:e0:58:a2:e3:38:bf:
         c6:fa:80:bb:6d:91:7f:b1:c1:25:5c:be:bb:c7:d8:98:f3:a9:
         6e:38:58:d0:db:99:17:4f:72:b4:1e:17:91:8e:fa:89:87:49:
         42:f2:d1:28:1e:11:93:e3:1e:ee:fc:93:e1:6e:05:57:97:11:
         ef:a0:e7:d5:a6:b1:67:d3:b9:16:c9:83:da:90:56:33:23:18:
         54:f9:a2:a5:8f:3d:92:11:7e:dd:af:f1:d9:b2:9b:ad:bc:f8:
         2b:18:17:f0:c0:5b:8d:9a:e2:53:96:0f:92:81:03:d8:ce:2e:
         06:96:d4:55:bb:33:a7:87:78:7a:90:e6:9c:a5:40:fc:07:d7:
         4e:c3:d7:f3:e9:60:84:c1:3a:90:c1:78:af:b9:62:cf:da:1d:
         81:1c:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----