Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.mft
File:                     7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.mft (raw, json)
Hash identifier:          e6S8MfjKO+LShYRiGVtXjab2rhj8oHrOLo3fDNA/zPI=
Subject key identifier:   43:8F:8B:03:21:A9:D0:4C:D5:8B:5B:39:2A:FC:09:F9:1B:15:98:21
Authority key identifier: 7A:3D:FF:3C:CD:2B:00:9F:65:33:F8:95:E7:83:B2:AF:91:A3:1B:19
Certificate issuer:       /CN=7A3DFF3CCD2B009F6533F895E783B2AF91A31B19
Certificate serial:       5EFD8398A85F7DDB873CA2F34F09E0E2801CB5BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.mft
Manifest number:          49
Signing time:             Sat 29 Mar 2025 07:47:18 +0000
Manifest this update:     Sat 29 Mar 2025 07:42:18 +0000
Manifest next update:     Sun 30 Mar 2025 10:11:18 +0000
Files and hashes:         1: 7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.crl (hash: EauPBa8ryYOEoXhRHh9qcAKBf0N5rMFhAk5eW46qcj4=)
                          2: 323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (hash: +5EvSE3Sym3FXvS6E+kenfG7NDnLxMZVg+fH9Ho/56w=)
                          3: 34352e3136372e3134382e302f32322d3234203d3e20323638303136.roa (hash: 6XxKod0uNpBrb46ZMwDzxcOb6ULS+IX7NLLMp27OTak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fd:83:98:a8:5f:7d:db:87:3c:a2:f3:4f:09:e0:e2:80:1c:b5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3DFF3CCD2B009F6533F895E783B2AF91A31B19
        Validity
            Not Before: Mar 29 07:42:18 2025 GMT
            Not After : Mar 30 10:11:18 2025 GMT
        Subject: CN=438F8B0321A9D04CD58B5B392AFC09F91B159821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:39:a1:b3:0b:c3:56:a4:de:52:8a:48:8b:
                    f5:59:f4:4d:ed:48:07:b7:24:f1:18:c4:6d:1f:eb:
                    b1:ad:e3:61:09:6b:96:56:03:b5:54:75:a4:58:ca:
                    3b:d1:49:71:43:d5:e5:c6:6e:6f:81:ac:7a:59:f3:
                    43:b4:d8:ec:9c:08:d5:62:dd:fb:44:5b:fb:57:de:
                    0b:fd:80:6f:fd:6f:50:4a:b6:90:ab:27:11:f6:a4:
                    87:c8:11:71:dc:2b:15:ee:9f:d6:65:76:f1:3c:41:
                    2b:f5:e1:b8:00:2f:dd:15:48:2b:f9:ee:1a:a8:7a:
                    55:16:18:ec:09:b6:5e:25:0e:b5:1c:ba:da:01:54:
                    86:c8:b8:e3:89:87:13:f5:85:d6:81:57:60:d3:6e:
                    3c:02:69:52:fb:e8:87:68:93:8b:06:50:9c:7d:7b:
                    c2:6b:a3:06:60:58:e4:50:d4:13:d7:d5:49:f8:19:
                    ab:7e:77:36:77:c0:3d:a4:10:a2:17:88:5e:03:ff:
                    0b:7b:20:a7:b0:b0:52:30:2a:fd:60:6b:d3:8e:7c:
                    88:a5:12:dc:de:e2:d1:f8:1e:06:f5:1e:2f:28:d4:
                    63:3d:94:49:61:5d:50:3d:0d:1b:66:d4:54:cf:bc:
                    6c:f1:85:98:c2:62:86:e1:bb:de:b6:57:c1:0f:b3:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8F:8B:03:21:A9:D0:4C:D5:8B:5B:39:2A:FC:09:F9:1B:15:98:21
            X509v3 Authority Key Identifier:
                keyid:7A:3D:FF:3C:CD:2B:00:9F:65:33:F8:95:E7:83:B2:AF:91:A3:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/7A3DFF3CCD2B009F6533F895E783B2AF91A31B19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:01:b2:76:67:16:62:56:27:f8:f9:7a:68:fa:b7:fe:16:
         28:41:49:90:b8:ad:a6:c9:a4:07:34:8a:2e:ba:4f:7f:bc:76:
         66:1b:42:bd:31:50:26:b9:e5:1d:4a:3c:c0:4e:2f:f8:be:5f:
         ef:3f:df:f8:8f:cd:3a:89:73:53:d1:76:24:d7:20:e0:f0:d0:
         12:59:5e:8b:80:82:5c:47:56:d1:0c:91:93:56:f6:a5:b6:8e:
         ed:a8:66:b0:f9:55:cc:7a:b3:15:b4:af:19:b2:d3:e8:7a:e0:
         dc:a5:fc:f6:cc:d5:6f:53:8e:c9:5b:fb:8e:19:c0:36:91:fb:
         34:04:a2:f7:05:df:67:b2:9e:53:37:43:af:98:b5:c6:44:3f:
         60:67:13:58:ef:11:ce:1b:6a:3e:f1:a6:c3:34:01:92:00:51:
         c6:29:2d:b1:14:d2:78:ea:54:1e:21:58:6c:59:ea:fb:09:dc:
         be:2c:c5:19:42:0f:c9:e4:3b:d8:a0:9d:16:4f:bc:8d:d7:8a:
         ad:8b:22:07:96:f9:bf:81:c1:0e:67:50:79:8f:84:04:d4:5b:
         a9:fe:13:36:7d:fb:38:fc:9e:ac:c0:07:a1:c0:90:6c:6e:6b:
         4b:5a:38:8d:e1:da:1d:82:77:99:ef:2c:2a:a1:57:88:70:c9:
         3d:45:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:10 2025 by rpki-client