Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
File:                     041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft (raw, json)
Hash identifier:          SJq5rwICfhJv83FaaTNB7zT0ndWgkjztZI7SNSgc6bg=
Subject key identifier:   15:D6:8A:67:3D:49:31:6A:22:31:92:26:9C:56:7C:AE:40:05:9D:6E
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       586CBDD606DF76ACF6EB18458D548764FBAA10C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft
Manifest number:          01CB
Signing time:             Fri 20 Mar 2026 20:45:09 +0000
Manifest this update:     Fri 20 Mar 2026 20:40:08 +0000
Manifest next update:     Sun 22 Mar 2026 00:21:08 +0000
Files and hashes:         1: 323830343a336261383a3a2f33322d3438203d3e20323636313633.roa (hash: 6bJG/aYr6Je/KokUDvqqYJZpB5yVsxR5vK0tdnO6Lqg=)
                          2: 3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (hash: +2ayEDMRcgqz7e5INPTh7GWCA0g2u5JTGiIbyBsamW4=)
                          3: 041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl (hash: n8rtv3wjAN3ZhGiX75OQFNfotOlSya75NQPhY5ZklnM=)
                          4: 3138362e322e3235302e302f32342d3234203d3e20323636313633.roa (hash: IRvJxyXndwafR18eUphKstYZjrQausGyK7uhHBzx/5A=)
                          5: 3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (hash: vV7MQSYrHOwBZVcnvFl+0Zh8+gbbbdSTY1kxYsX1OtE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6c:bd:d6:06:df:76:ac:f6:eb:18:45:8d:54:87:64:fb:aa:10:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Mar 20 20:40:08 2026 GMT
            Not After : Mar 22 00:21:08 2026 GMT
        Subject: CN=15D68A673D49316A223192269C567CAE40059D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:93:58:06:95:f8:8c:c5:d4:33:3c:b6:b4:
                    26:a7:2f:2f:ec:8b:50:06:1b:19:3a:4f:01:a0:6f:
                    38:23:8f:08:9e:11:f7:53:01:60:40:bd:1a:23:e4:
                    d0:c5:3f:69:8e:d5:d7:9c:12:2e:4f:28:23:cc:b6:
                    42:be:f3:5d:49:aa:6b:b8:f9:5a:76:12:44:72:3c:
                    00:2b:68:51:7b:4c:91:a5:37:36:55:00:86:5f:29:
                    9f:de:13:ca:dd:3e:84:16:df:d5:c4:8b:25:62:90:
                    20:ca:37:7e:31:0c:12:bd:d4:20:76:c8:8b:c4:0b:
                    48:cc:e7:79:b4:8b:e3:eb:58:30:15:6e:35:bf:a9:
                    2a:b4:b3:ad:23:f7:c3:13:43:5a:39:38:95:9f:75:
                    ad:8c:ec:20:79:e2:d1:e7:e3:8b:35:72:29:95:d7:
                    36:e3:ad:f0:63:2f:05:47:d0:69:7d:92:9c:68:e6:
                    9e:0b:0d:8c:2f:fd:53:cd:2a:6c:ff:a5:40:6a:47:
                    8c:05:42:2e:83:1e:a0:5d:0c:f5:ae:4c:7a:5e:d1:
                    1d:15:ea:c5:2f:f2:ad:6a:f5:b2:a2:97:a1:21:6c:
                    76:8a:ae:44:ab:51:00:ed:c8:8b:1b:03:f9:79:cc:
                    18:9e:f5:fc:39:55:d4:c5:46:d8:ff:77:21:37:f4:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:8A:67:3D:49:31:6A:22:31:92:26:9C:56:7C:AE:40:05:9D:6E
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:fc:e2:8b:92:c6:03:74:f1:27:83:17:a7:a0:45:57:9a:
         52:fd:e3:c6:fa:28:32:fd:8b:ad:7e:ca:9b:aa:d2:f2:84:0b:
         04:46:d6:bc:67:84:83:0e:91:53:33:06:1e:4e:27:b6:ae:28:
         d7:d9:1f:fe:cf:c1:1b:80:27:a5:43:cd:11:62:4f:39:84:ef:
         8e:e4:26:3b:b3:f3:d9:6b:fb:df:5f:6f:f2:27:99:84:53:f0:
         9b:eb:9a:98:83:d3:2d:35:97:74:ac:0e:5d:74:67:a6:ab:7f:
         18:28:90:51:28:db:2d:48:a4:bb:b6:4f:eb:26:60:64:b0:27:
         57:a8:3c:01:83:54:a8:7e:37:1a:32:17:ed:43:31:a8:24:13:
         0a:39:86:e2:84:f0:d7:54:ef:d0:a5:bf:b0:be:93:6a:60:2c:
         07:72:52:0c:f5:2f:af:ff:27:8c:3e:dc:bb:60:78:23:79:3f:
         f3:00:fd:5e:30:e9:18:71:c4:42:5b:8a:a2:ee:24:57:3c:cb:
         ea:19:ff:d4:6d:de:fb:20:a2:c8:d0:10:dd:ed:62:03:f8:f5:
         b2:18:5c:8c:4f:45:f9:d9:43:8f:36:a3:9e:91:6b:88:64:13:
         fe:a4:b9:7f:60:bd:7f:2e:fe:d7:d4:f1:ba:8f:13:76:cd:6e:
         c5:29:24:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWGy91gbfdqz26xhFjVSHZPuqEMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxQjQ0QTlGOTZBMkU4MEVBMTkyODE5QkU5NTMzRkY3
Q0UxRjQwMTAeFw0yNjAzMjAyMDQwMDhaFw0yNjAzMjIwMDIxMDhaMDMxMTAvBgNV
BAMTKDE1RDY4QTY3M0Q0OTMxNkEyMjMxOTIyNjlDNTY3Q0FFNDAwNTlENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOJNYBpX4jMXUMzy2tCanLy/s
i1AGGxk6TwGgbzgjjwieEfdTAWBAvRoj5NDFP2mO1decEi5PKCPMtkK+811Jqmu4
+Vp2EkRyPAAraFF7TJGlNzZVAIZfKZ/eE8rdPoQW39XEiyVikCDKN34xDBK91CB2
yIvEC0jM53m0i+PrWDAVbjW/qSq0s60j98MTQ1o5OJWfda2M7CB54tHn44s1cimV
1zbjrfBjLwVH0Gl9kpxo5p4LDYwv/VPNKmz/pUBqR4wFQi6DHqBdDPWuTHpe0R0V
6sUv8q1q9bKil6EhbHaKrkSrUQDtyIsbA/l5zBie9fw5VdTFRtj/dyE39M0dAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFdaKZz1JMWoiMZImnFZ8rkAFnW4wHwYDVR0j
BBgwFoAUBBtEqflqLoDqGSgZvpUz/3zh9AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8wNDFCNDRBOUY5NkEyRTgwRUExOTI4MTlCRTk1MzNGRjdDRTFGNDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUI0NEE5Rjk2QTJFODBF
QTE5MjgxOUJFOTUzM0ZGN0NFMUY0MDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1a2IvMC8w
NDFCNDRBOUY5NkEyRTgwRUExOTI4MTlCRTk1MzNGRjdDRTFGNDAxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT3384ouSxgN08SeDF6egRVeaUv3jxvooMv2LrX7Km6rS8oQLBEbWvGeEgw6R
UzMGHk4ntq4o19kf/s/BG4AnpUPNEWJPOYTvjuQmO7Pz2Wv7319v8ieZhFPwm+ua
mIPTLTWXdKwOXXRnpqt/GCiQUSjbLUiku7ZP6yZgZLAnV6g8AYNUqH43GjIX7UMx
qCQTCjmG4oTw11Tv0KW/sL6TamAsB3JSDPUvr/8njD7cu2B4I3k/8wD9XjDpGHHE
QluKou4kVzzL6hn/1G3e+yCiyNAQ3e1iA/j1shhcjE9F+dlDjzajnpFriGQT/qS5
f2C9fy7+19Txuo8Tds1uxSkkcw==
-----END CERTIFICATE-----