Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
File:                     832871127BCACF2B8301B7D52E8D2FBE066B8056.mft (raw, json)
Hash identifier:          DF0Oj29SuZ5uhnWMPqAnnp4ZLeTb+b8+irKSjDmdTGI=
Subject key identifier:   10:DC:86:4B:60:61:74:F4:A4:BB:53:03:76:08:FC:4A:E2:0E:88:67
Authority key identifier: 83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56
Certificate issuer:       /CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
Certificate serial:       7E793B6B860B30F38E8B3620EEEADE3AC344DDA6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
Manifest number:          010D
Signing time:             Sat 29 Mar 2025 09:52:37 +0000
Manifest this update:     Sat 29 Mar 2025 09:47:37 +0000
Manifest next update:     Sun 30 Mar 2025 11:02:37 +0000
Files and hashes:         1: 832871127BCACF2B8301B7D52E8D2FBE066B8056.crl (hash: KoHIOkehjKd3ujt0IY2bBbxHnJOjSwvtdev2WAoHql8=)
                          2: 323830343a383566343a3a2f33322d313238203d3e20323732363130.roa (hash: q8611b2ESWzovMjAi/vkL7Eh+bvvFzxozy3Tg2JcfUg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:79:3b:6b:86:0b:30:f3:8e:8b:36:20:ee:ea:de:3a:c3:44:dd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
        Validity
            Not Before: Mar 29 09:47:37 2025 GMT
            Not After : Mar 30 11:02:37 2025 GMT
        Subject: CN=10DC864B606174F4A4BB53037608FC4AE20E8867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:77:52:d0:24:d2:2b:ef:f7:c3:f3:90:f6:
                    66:a0:64:b8:f5:4b:03:42:e1:c8:85:e5:16:a3:ae:
                    2b:23:9d:86:7e:00:29:b5:9d:7c:62:b1:d0:c5:d9:
                    23:3b:3b:aa:8f:eb:17:e6:d3:45:8b:50:9c:ba:c1:
                    e7:78:6f:4c:38:2d:4f:2f:49:3d:ad:82:e3:fe:21:
                    32:3d:62:89:93:61:08:ee:8b:7e:53:aa:a4:90:44:
                    6e:5d:a4:06:2b:9a:35:ab:cf:18:4a:80:0b:70:e3:
                    2e:ec:41:ae:5b:4f:68:46:b6:21:cb:74:f0:b1:bd:
                    90:30:95:1a:a7:07:cb:91:b2:f8:e9:c1:a4:d9:37:
                    37:e2:b2:71:e2:7e:87:4a:86:2f:b6:71:ba:f1:a1:
                    2d:59:3b:22:df:8d:48:ce:0a:42:40:83:d3:37:0b:
                    d2:20:64:2e:80:e7:ba:6c:88:c5:45:a2:b8:03:65:
                    72:7e:4c:62:da:e0:cd:ae:00:09:f3:be:71:78:48:
                    ab:d0:98:40:84:2d:b9:53:b6:f4:50:a3:fb:4b:6b:
                    84:8a:c3:96:7d:f3:e2:3a:8f:17:97:66:38:14:af:
                    7b:c1:00:e1:47:8d:ca:7e:01:1b:b3:e5:53:3d:38:
                    0d:b5:0b:d1:6b:da:4e:df:7b:9a:7b:b6:19:8d:ba:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:86:4B:60:61:74:F4:A4:BB:53:03:76:08:FC:4A:E2:0E:88:67
            X509v3 Authority Key Identifier:
                keyid:83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:39:59:41:70:3d:58:25:db:e7:d2:0c:2b:20:68:1b:b7:c4:
         13:53:ce:d2:70:76:52:de:d4:8f:13:af:7d:52:20:40:d1:06:
         32:c3:bc:77:ed:6c:46:97:41:df:e5:15:1e:50:1b:9f:38:14:
         ba:4f:6a:0c:24:bf:2d:e4:24:c3:b2:53:ff:52:83:c0:a2:b6:
         2f:9f:6a:f1:77:cc:46:a3:70:0f:cd:d5:66:d7:68:74:5a:4b:
         6e:ae:7b:3d:e3:3e:88:7c:64:5d:1d:bb:9b:d1:3e:16:6e:4a:
         aa:69:53:31:d5:3d:d3:5c:cd:b5:3c:77:ea:d7:e1:04:92:81:
         ec:3d:52:19:9e:8c:30:4d:c0:e3:83:dd:45:3a:44:7d:6e:1e:
         14:62:cd:00:54:29:a7:ea:b1:ed:52:61:90:d3:89:24:c7:87:
         06:0a:b1:b0:ce:f8:e3:bd:1e:ae:b0:97:45:88:46:80:34:8c:
         85:db:45:27:68:dd:4e:da:cf:55:08:a2:80:e9:7a:bd:85:e4:
         70:e4:36:42:a8:d8:41:31:26:33:25:3e:41:08:21:14:af:f6:
         9d:92:74:e3:aa:a5:b8:8e:13:21:cf:f8:3d:6f:56:58:6f:19:
         9f:1c:55:3a:3d:de:89:f4:58:8a:9c:22:a8:9f:52:ac:6e:d5:
         40:b5:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:29 2025 by rpki-client