Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
File:                     E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft (raw, json)
Hash identifier:          TGtzyiR5EwFjVo0Fwa6rFhUlxppKHuh0YXfveQEyE/0=
Subject key identifier:   88:66:16:67:E8:FF:B8:EB:ED:E0:9B:E4:28:D4:7B:7F:A3:0C:35:0C
Authority key identifier: E7:EA:C6:C4:C6:8B:3E:30:FD:F7:CE:7C:F1:BC:53:C1:A3:2A:0A:91
Certificate issuer:       /CN=E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91
Certificate serial:       53E7D6965B0F2704B2F22F9A7D983EBA4B99A0F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft
Manifest number:          014D
Signing time:             Thu 15 Oct 2026 09:28:34 +0000
Manifest this update:     Thu 15 Oct 2026 09:23:34 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:34 +0000
Files and hashes:         1: 3133382e39372e3231322e302f32322d3234203d3e20323634323037.roa (hash: /qXNrgRHyNqaCwOvStWQWU51T0vG5oK4N0SFyijLtJU=)
                          2: 323830343a323433303a3a2f33322d3438203d3e20323634323037.roa (hash: Aet46v0ERR9aWxIuxrpm5BErAhKOJS81dWT/gtI9aSc=)
                          3: E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl (hash: +/nj8azx4EtVLYCv/oNTdncy9BjS7RZvPbKzaOPAYxM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e7:d6:96:5b:0f:27:04:b2:f2:2f:9a:7d:98:3e:ba:4b:99:a0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91
        Validity
            Not Before: Oct 15 09:23:34 2026 GMT
            Not After : Oct 16 13:01:34 2026 GMT
        Subject: CN=88661667E8FFB8EBEDE09BE428D47B7FA30C350C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:5e:06:84:d4:82:fb:a3:48:f8:35:ec:8c:
                    6e:de:a1:e8:5f:4e:3f:fa:2d:4a:1c:89:ab:ae:d7:
                    df:e0:d3:4d:88:a3:2c:9c:3a:ca:3e:54:6c:0d:1d:
                    f1:0f:9d:98:f8:e9:84:35:15:e4:0d:d1:7b:a8:c0:
                    c2:c3:d8:ef:47:b9:36:0b:4d:f6:b9:a3:34:01:b4:
                    21:02:8b:ca:c5:fd:ef:9c:91:0f:6f:76:34:44:5a:
                    8c:ff:40:65:6e:8e:3b:1d:2f:c7:de:0d:4b:0f:20:
                    c7:ca:44:6a:d2:25:0a:bd:14:9c:58:bf:ec:7b:7c:
                    7e:1d:c2:cd:de:54:b8:e6:8e:92:53:1b:05:62:f8:
                    3a:5f:4b:12:af:e1:52:cc:7c:48:f8:2d:2b:8c:40:
                    6f:35:24:e1:fc:94:0f:65:5e:27:da:89:d8:36:eb:
                    b8:98:af:06:03:95:02:e1:76:2a:0a:34:60:84:f0:
                    d7:e8:82:b2:f6:ea:2e:ae:6d:81:5a:22:64:22:68:
                    9b:a1:47:03:05:9c:df:b6:78:4b:34:94:fe:81:44:
                    59:48:de:97:a6:87:ee:67:f8:c7:6c:1c:0e:46:5c:
                    b7:a9:ba:75:12:13:3b:db:3d:2c:17:81:a8:7e:68:
                    da:49:9e:ef:0a:50:cf:b0:75:b5:e6:dc:ca:12:d8:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:66:16:67:E8:FF:B8:EB:ED:E0:9B:E4:28:D4:7B:7F:A3:0C:35:0C
            X509v3 Authority Key Identifier:
                keyid:E7:EA:C6:C4:C6:8B:3E:30:FD:F7:CE:7C:F1:BC:53:C1:A3:2A:0A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNERt4FxogGd3R4dWS2yU2uXoWoMiq98nnEoxdt3nm9w/0/E7EAC6C4C68B3E30FDF7CE7CF1BC53C1A32A0A91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:d6:c7:dd:5d:23:33:01:44:29:4c:d0:42:2b:9e:b1:29:
         59:fe:b6:a2:3e:12:af:90:cc:32:a7:ef:ed:d7:f6:c9:41:93:
         af:df:42:df:97:88:8d:d3:61:7b:6b:6a:ec:12:0f:73:a8:e4:
         a6:21:14:78:5c:c5:94:ec:63:53:cb:01:74:79:d6:89:26:75:
         6d:0d:3e:a2:70:9b:b2:7c:ef:2b:1a:d1:a9:db:04:37:45:ca:
         25:e8:68:f9:f7:66:a2:96:e4:ca:de:99:d9:88:c2:ee:5c:7d:
         0d:0f:e8:c1:bd:2f:ca:19:77:5c:69:40:db:53:5c:8f:c3:dd:
         60:66:ec:09:d1:54:ee:2d:19:f3:7f:fa:12:12:a9:cd:97:15:
         6f:d4:9b:6f:08:3a:9a:34:81:b5:08:2a:0a:97:6f:46:07:3e:
         34:72:11:2f:24:51:e3:73:48:8b:44:c3:22:25:4f:c2:00:39:
         5c:fa:85:8b:d6:64:a9:d9:d5:e8:04:fc:b4:0d:63:b3:1b:fc:
         d1:14:5b:15:1a:3a:22:d7:74:c2:f1:af:09:66:69:48:a7:0b:
         27:1c:8f:17:90:99:70:77:0b:e8:a0:fe:98:e1:0b:39:ac:93:
         2a:43:3e:06:a3:f3:3d:b3:ee:9e:c0:7c:34:82:d5:ca:bc:d4:
         11:36:d8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----