Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
File:                     A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json)
Hash identifier:          MkmCCfrTMllaUgCJZPOmdGMrmTynpNZ0WSbvd6NDdZc=
Subject key identifier:   1A:29:A8:E6:5B:9F:CA:53:C4:E0:D9:66:F3:AC:6B:14:A3:62:53:40
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       28B31FA7D4D5F7C74558D85AED71E88C6E30A146
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
Manifest number:          01E9
Signing time:             Fri 28 Mar 2025 20:52:01 +0000
Manifest this update:     Fri 28 Mar 2025 20:47:01 +0000
Manifest next update:     Sat 29 Mar 2025 22:05:01 +0000
Files and hashes:         1: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: Y+DgAcjFJov2MwOMcTCBVD+DlxL8/JhlfjtG6/6PAho=)
                          2: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: VufPXyMzG2BVkoyRAuZMnsTgO+3ZuCuR2kAXTZWgMf8=)
                          3: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mVhez4oH+ZZe1MpwRKuWrOKm17wq5GZedCe2C7CQYTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:1f:a7:d4:d5:f7:c7:45:58:d8:5a:ed:71:e8:8c:6e:30:a1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Mar 28 20:47:01 2025 GMT
            Not After : Mar 29 22:05:01 2025 GMT
        Subject: CN=1A29A8E65B9FCA53C4E0D966F3AC6B14A3625340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:a2:17:b0:17:b6:3f:d4:bc:71:9f:6a:3a:
                    4f:69:b1:ea:59:21:f8:c0:74:72:d5:5a:aa:38:1a:
                    cb:2c:53:3c:37:a2:5e:be:35:d2:34:d8:3b:3c:68:
                    1e:2e:45:f9:27:91:94:be:d9:03:14:28:b5:05:be:
                    52:7e:4d:e2:98:28:86:ec:7b:75:8e:94:76:99:31:
                    30:4b:e1:60:03:c7:36:51:1c:bd:51:9c:de:14:61:
                    67:f8:ac:67:ba:24:09:07:e7:8e:4d:44:35:4c:b6:
                    e0:2e:9b:f1:53:f5:47:c1:de:ab:d8:f9:0c:2a:29:
                    9c:a5:8b:bd:cc:6f:09:df:97:1c:11:de:f8:fe:72:
                    0c:08:14:23:c3:cf:c9:06:c2:d1:6d:ff:a6:fe:4f:
                    c4:4b:65:60:1f:d8:f7:3f:94:f9:32:d0:1b:2e:ed:
                    b8:04:36:0f:33:86:5e:aa:3d:46:bc:25:4a:4b:1a:
                    b1:58:d9:af:78:99:ce:93:b4:44:dc:16:f0:c5:e3:
                    11:0f:b8:39:aa:f7:0d:d0:7b:c4:35:ee:c9:11:35:
                    8b:1c:6e:cf:8a:5e:40:05:66:1f:ad:7c:43:3e:05:
                    fd:aa:67:fa:14:96:de:02:2f:b6:00:ea:cf:0f:6c:
                    9c:3e:37:a1:af:69:99:e5:03:54:38:e3:09:69:3b:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:29:A8:E6:5B:9F:CA:53:C4:E0:D9:66:F3:AC:6B:14:A3:62:53:40
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:da:d9:9a:02:26:96:a1:8c:f3:4a:cb:8b:26:58:65:58:
         08:89:8e:65:cb:69:16:4e:23:0b:b4:bf:f9:1b:a1:7f:88:85:
         7b:10:27:f9:8e:fb:07:5f:90:1e:1c:ca:b6:db:db:bc:ae:4e:
         44:88:33:c8:1c:15:dc:c6:da:ed:f2:6d:f2:51:7f:02:32:2e:
         73:33:90:ef:c7:b2:14:4f:f1:6c:1c:62:77:e5:ef:67:c4:ec:
         3e:9b:78:1a:7c:87:9e:b0:c3:0c:e1:19:3b:de:d1:2d:9e:0f:
         b3:e1:3d:08:13:6e:33:e4:e7:ee:c2:bf:e2:6d:5d:12:cc:26:
         c9:d5:78:d0:bc:2a:d7:da:b2:b4:19:32:4f:a2:05:52:ef:d4:
         a8:89:4e:04:76:ed:1b:2a:8f:df:0f:e2:d6:0e:d0:f5:2b:26:
         82:6c:75:e1:e8:aa:25:a9:f4:6b:63:e9:d5:b6:d6:f2:0c:42:
         cc:c1:ae:9f:28:46:83:7d:59:5f:d9:1e:d3:a9:0b:bf:8e:c0:
         e6:4b:cc:b0:df:e8:3a:03:55:db:ad:c8:c2:bc:58:ba:7f:c0:
         23:57:6e:33:1c:26:cc:33:6a:43:cd:19:ce:41:97:13:47:75:
         9f:6a:3d:d1:93:4a:96:a3:1b:ea:f2:64:69:ba:86:31:0d:f5:
         b2:99:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:05 2025 by rpki-client