Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
File:                     42D604698AFA9BA492807398AA6527B6E7B04AB4.mft (raw, json)
Hash identifier:          DmqJDoeR/eq5qmrEAqCgUX35dadjAqilgSn6mUESTk0=
Subject key identifier:   58:83:0D:64:2D:2F:76:04:53:45:63:36:CD:A1:E6:48:7A:74:24:95
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       4743117E7F4512B88FE70264C0D59D199DD6EDC3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
Manifest number:          0254
Signing time:             Tue 12 Aug 2025 23:18:03 +0000
Manifest this update:     Tue 12 Aug 2025 23:13:03 +0000
Manifest next update:     Wed 13 Aug 2025 23:59:03 +0000
Files and hashes:         1: 34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (hash: ceYoAtNP9I/fYOCde9To24oMt8TJcIju9lbdS97lAIM=)
                          2: 323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (hash: UrG52ZPguo6yArGwMeYZBknSlHnaNmN3dn07xO9WcKM=)
                          3: 34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (hash: 5UTaU84R+nywBkmh2VOMTd/UzpdSJSI3l+dyzYmnuFo=)
                          4: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (hash: NU6uq0C87qGWTrG4MN1JdLZtRk94lw5YmEnKWfV5ZXU=)
                          5: 42D604698AFA9BA492807398AA6527B6E7B04AB4.crl (hash: SaWKm9sD9Rx4izS//+f+aETAYVyZuepnkn5c+uN7QlM=)
                          6: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: LXzAQRQkoF00WjETpsBxmLx8Um2Thzo4yRCWg3yquYE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:43:11:7e:7f:45:12:b8:8f:e7:02:64:c0:d5:9d:19:9d:d6:ed:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: Aug 12 23:13:03 2025 GMT
            Not After : Aug 13 23:59:03 2025 GMT
        Subject: CN=58830D642D2F760453456336CDA1E6487A742495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:0a:11:08:e6:2b:2b:90:71:27:18:a4:bc:
                    75:5a:89:d2:c6:91:6f:28:97:cc:7c:7d:af:41:1e:
                    de:26:74:9c:22:3d:87:2f:a9:9c:10:3a:ac:f3:a2:
                    80:ab:ed:b2:95:f4:06:95:9c:35:b1:2f:6c:1a:7a:
                    bf:33:11:4b:a8:7c:56:44:f6:a9:49:f3:75:4d:13:
                    1c:84:37:1b:7a:04:c2:28:c7:fb:10:2f:2a:c9:44:
                    cb:fd:e8:d8:56:7e:40:ff:8e:65:02:92:6d:8c:dc:
                    d9:54:23:c5:fa:b5:d0:f3:ae:5e:bd:e1:4b:2d:d7:
                    74:ce:77:1e:76:8b:3d:4e:b3:5c:a5:e7:15:33:e3:
                    79:95:3e:ae:60:aa:a6:9e:f8:d5:13:8f:a4:31:19:
                    02:8b:c1:33:7a:28:41:2b:c7:c2:87:63:fe:08:c6:
                    56:a6:be:df:17:40:ee:ef:02:a0:41:b3:7e:41:93:
                    b6:10:66:67:1f:f4:a7:60:06:a3:47:cf:31:82:a0:
                    82:f7:6d:f3:78:30:c8:52:5b:71:e6:b2:a6:16:79:
                    e1:ad:c8:21:3a:42:e4:06:8b:d0:6f:19:0b:e7:4e:
                    f9:bc:01:86:09:82:ff:bb:dc:b0:99:c7:28:19:13:
                    19:3f:ad:36:92:a6:04:d8:16:e2:76:83:ce:9d:8f:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:83:0D:64:2D:2F:76:04:53:45:63:36:CD:A1:E6:48:7A:74:24:95
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:10:72:e8:f7:2e:f8:60:42:37:c1:43:fa:49:0b:d6:6e:ee:
         c9:6e:99:ca:f4:2b:cc:a8:e4:4c:52:e2:f3:ae:f4:3d:4f:ab:
         45:af:2f:61:5a:ca:45:39:0e:57:24:98:e8:65:50:58:fa:8e:
         e8:4f:fd:80:c2:a5:63:4a:77:99:f6:1a:7a:a3:79:4c:68:f0:
         1c:55:5b:63:16:e8:42:1b:62:f7:9c:98:03:6f:8f:15:ff:67:
         bf:23:df:4a:a9:e9:fb:98:80:09:e3:16:da:83:b0:fe:69:87:
         ad:2d:e5:32:3c:46:95:b1:85:5e:d6:df:17:a5:07:71:99:2b:
         03:54:99:45:9e:1f:df:d2:51:9d:ac:a8:0b:8a:0b:83:d8:e0:
         ee:73:69:3e:37:ef:0d:87:61:03:aa:f5:d2:68:5d:a4:31:3c:
         e3:16:94:d1:06:ad:f1:ca:4f:18:d1:c7:ef:c3:c7:9f:6d:c6:
         31:84:6b:84:3c:a4:ca:b0:3d:6b:42:39:76:33:14:a2:4b:ff:
         10:40:3c:bd:90:fd:2c:f8:c7:b9:da:f5:08:86:98:42:8f:f1:
         dd:f1:ff:42:86:d8:cc:cf:6e:3c:db:be:10:55:94:a8:db:bc:
         5e:8e:70:0d:00:e7:ea:3b:cc:ec:15:5a:90:f7:51:f0:4f:dc:
         76:6a:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 20:53:27 2025 by rpki-client