Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
File:                     4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft (raw, json)
Hash identifier:          zZ+RgZLempNLXQTSclDHR47Rj6rz8b2jrWOHfnlkIBE=
Subject key identifier:   67:1D:9A:71:E1:1E:5C:5A:71:CD:9E:87:32:C1:39:64:A4:A8:F9:98
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Certificate issuer:       /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial:       1689B991076B1EFF76834F0FD80E70057FA09BDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
Manifest number:          0131
Signing time:             Mon 23 Jun 2025 08:00:06 +0000
Manifest this update:     Mon 23 Jun 2025 07:55:06 +0000
Manifest next update:     Tue 24 Jun 2025 10:27:06 +0000
Files and hashes:         1: 3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa (hash: Xojmt+hOhWk/eAfqNyLm582FKoELsaSO/YaHOf7nRpo=)
                          2: 3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa (hash: jHX8rKTJIVzH1nDn1ZKmg7Dc/AgHN8F973eXTDMc5Pc=)
                          3: 3138392e3132372e3134342e302f32322d3232203d3e20323730373034.roa (hash: cKppDjg15XGqHP5VE+Ih6G66OwTO/3PTimS9AXEeOq8=)
                          4: 3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa (hash: QKaypV5BfWHpdcMntxxAMv59Auy88+2q8C4vwfXD0CQ=)
                          5: 3138392e3132372e3134362e302f32342d3234203d3e20323730373034.roa (hash: BgqojGnhAcW+VI4Pz/gdnTQWDpCF3vYZ6Aie1Ik4K1g=)
                          6: 323830343a373031343a666630303a3a2f34302d3430203d3e20323730373034.roa (hash: eON3fmQU63Ih6ClI7ympPMMn6/ISwZ/GREn+q9EZ44w=)
                          7: 4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl (hash: HT5y/YMUSLwUEzUZjAqyuAicg/Bfl2gDGBKNKaQnTEg=)
                          8: 323830343a373031343a3a2f33322d3333203d3e20323730373034.roa (hash: tSTWoRQ5dSXgBZsgqqaXNgyq6qepM994e12zSVyFFbE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:89:b9:91:07:6b:1e:ff:76:83:4f:0f:d8:0e:70:05:7f:a0:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
        Validity
            Not Before: Jun 23 07:55:06 2025 GMT
            Not After : Jun 24 10:27:06 2025 GMT
        Subject: CN=671D9A71E11E5C5A71CD9E8732C13964A4A8F998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:94:82:97:e9:c1:9d:bb:0d:34:f6:6f:f4:
                    c2:ce:84:e5:6f:57:4f:51:03:cc:51:8b:be:4b:33:
                    6f:57:88:96:44:6b:14:2b:35:65:ac:66:1d:1d:56:
                    a1:43:50:f4:12:7f:96:a1:76:46:2d:d3:4a:02:84:
                    5f:7e:01:2c:48:1d:10:b4:ed:b5:03:a4:52:d7:5e:
                    40:7c:89:1b:13:55:dd:95:18:9c:21:1b:34:4e:c3:
                    5e:76:6c:88:6d:71:92:7c:9c:36:24:a4:67:8c:3a:
                    19:b0:44:4e:e5:bc:10:9d:fe:96:91:15:3d:46:70:
                    d2:ce:c6:51:8c:5e:d3:5a:7f:f8:d8:d7:28:8a:ff:
                    65:c7:57:6d:f0:b7:52:40:f1:89:8b:f7:48:4d:cc:
                    21:9c:84:e7:77:67:f8:25:38:a5:a3:e2:23:e0:f9:
                    62:ee:86:65:15:3a:a2:78:53:70:44:bf:6a:ad:0d:
                    cd:83:48:e7:fe:44:bd:bb:f3:f5:dc:16:44:f9:c5:
                    68:76:64:bb:fa:14:dc:c3:22:3c:8e:07:26:8b:45:
                    3f:0c:83:15:4d:69:cc:81:86:7c:15:50:18:48:48:
                    ae:62:c2:68:6e:4d:7a:f2:74:97:ad:d8:38:10:f9:
                    9a:80:c4:98:62:9a:59:52:67:c4:77:16:39:23:b5:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1D:9A:71:E1:1E:5C:5A:71:CD:9E:87:32:C1:39:64:A4:A8:F9:98
            X509v3 Authority Key Identifier:
                keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:00:bc:02:fb:3b:8a:2e:03:3f:57:1a:9b:ae:06:4d:b8:
         d5:79:29:d5:f2:80:c8:a4:62:9c:60:59:ab:31:d7:56:62:17:
         45:84:76:2f:23:ab:b8:2f:0b:b7:04:d0:85:61:24:86:5a:aa:
         be:17:94:45:d6:0e:dc:36:ae:8f:b9:3c:e2:42:95:6e:1f:56:
         0e:4f:51:99:bd:fe:fc:d8:a6:61:71:c9:3e:62:78:41:10:07:
         9e:fc:38:08:87:52:40:6b:e9:7d:03:44:b0:87:9e:a4:c4:3f:
         ca:3a:e4:5f:ff:42:cf:85:a0:9c:c5:49:ec:ca:d2:3e:c6:34:
         b7:c8:8e:ea:24:78:62:84:15:89:46:57:b4:87:03:ce:14:f0:
         b0:33:b4:08:a9:0d:80:b9:fb:9c:93:f4:51:fc:6d:cc:32:93:
         3e:28:3c:57:e5:95:b3:da:52:5f:10:ca:cf:2d:01:37:70:04:
         06:b9:11:da:8f:eb:9e:85:78:6c:fc:66:50:50:66:79:84:11:
         e6:ca:10:6e:33:e5:cf:83:f8:76:c3:48:52:1e:28:cb:47:2d:
         72:94:a4:96:b8:8f:a3:7e:35:d4:02:27:93:7b:aa:58:da:01:
         92:19:4b:5c:56:e6:9d:a2:71:23:17:ea:32:1a:95:18:9c:32:
         0e:92:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:52:45 2025 by rpki-client