Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
File:                     961AE5D479B2534022682B64D7F0EFE6AA11F791.mft (raw, json)
Hash identifier:          kq432zGeFK8aOMuELAbYZh2whVYxBnyYkYDcpuof/Qg=
Subject key identifier:   83:4D:64:33:F7:E9:DA:E5:F4:68:E4:4B:D6:61:EE:83:D2:CF:55:5E
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       717024919AFB49792E2440BF30452F78850F42DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
Manifest number:          01E2
Signing time:             Sat 29 Mar 2025 01:40:00 +0000
Manifest this update:     Sat 29 Mar 2025 01:35:00 +0000
Manifest next update:     Sun 30 Mar 2025 03:38:00 +0000
Files and hashes:         1: 323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (hash: Dg6QgxjLlU/z9V++ZNu5x+kx/dkHCPlSeP4IrvAXZEM=)
                          2: 3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (hash: nA/OvwBKOsuVB7obdUjchPl+jWcy869HFASYU6GGRpI=)
                          3: 323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (hash: XnXYekvsY2RVngEnSHnLLlNcex+uYy/z6OB/ZumJLMg=)
                          4: 323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (hash: jkBItTU6FV9KdcIK+fZYFmA20mUO5O6hqtxy1OzYw5I=)
                          5: 323830343a6536303a31333a3a2f34382d3438203d3e203631383838.roa (hash: JCy5QX2qDQGToBiOpXcrOVJMBZIZQ3xQsSLWFpJ90ZE=)
                          6: 3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa (hash: 0yRyvy8XKt7kGPi85be1EdJXn1/4HpfpCRl+3MvDeZI=)
                          7: 323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa (hash: Z9K3XsGWcja3K3XVI0WZGaDWDPU79rCpp4kHaDucdvE=)
                          8: 323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa (hash: xPV/0MJNUFGVx2JSUaKtF4oiZAR0nn8h4o0YidpKOE4=)
                          9: 323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa (hash: 4lVPZiSKVTkbgXRZzUK2UZn47EyF7/Jd6vxX+jSKbqQ=)
                          10: 961AE5D479B2534022682B64D7F0EFE6AA11F791.crl (hash: hQ87ueVH76i5w05/pQuBtqQl1KqrA3w98aIWMWVkx/4=)
                          11: 3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (hash: JUTzTvlYexnFPNLeYVV246OABhn5H9fI6Qm9dt6BRsY=)
                          12: 323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa (hash: IxmH8crHtxVQvG1YjQgvt0CGE0vqicuiP7dBfaW5cYk=)
                          13: 3138362e3233352e3139302e302f32332d3233203d3e203631383838.roa (hash: 0jeyZaMYCuJa0mo6X22GqFo/7WHGaW0s53Cy+GL5hoA=)
                          14: 323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa (hash: X9a388FbPLcmnyzU1JjMY3AxDeUQVv1zoeopad1+ico=)
                          15: 3138362e3233352e3138392e302f32342d3234203d3e203631383838.roa (hash: zfeVWFtm6HQsBkr+I5X4y3WW+gFUhTq4caLn6nEO9Is=)
                          16: 3138362e3233352e3139312e302f32342d3234203d3e203631383838.roa (hash: OghAuGoX8vZDLRv/0sW6u7mYvEBWUas5B+outqbwCvc=)
                          17: 3138362e3233352e3138382e302f32332d3233203d3e203631383838.roa (hash: zWRHBE3QSuBU0rra3ebDZkOnlvWc4QAAM/X0kbXnYo8=)
                          18: 323830343a6536303a3a2f33322d3333203d3e203631383838.roa (hash: h8zxW6f22GaeKFsKUmLo6gCY+0qqjUDWqCgC4TCEVJY=)
                          19: 323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (hash: PaDPyP5LayriBhgRf/LNvgxizlu9oI2VuzFaY6lqsOI=)
                          20: 323830343a6536303a666666663a3a2f34382d3438203d3e203631383838.roa (hash: CjBlXm7G6TKsmum5E6thrD/wHSYXVVLZHdvj4JFrXKQ=)
                          21: 3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa (hash: RgfXB/1M/WrTk9Vz0Ui1Qi7o9zjSdxBM8LC9N3nxNZc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:70:24:91:9a:fb:49:79:2e:24:40:bf:30:45:2f:78:85:0f:42:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Mar 29 01:35:00 2025 GMT
            Not After : Mar 30 03:38:00 2025 GMT
        Subject: CN=834D6433F7E9DAE5F468E44BD661EE83D2CF555E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:27:d8:06:6f:41:02:81:83:3c:1b:ec:d8:
                    81:37:46:3d:6b:7c:7a:58:e7:75:43:01:34:83:f8:
                    10:41:0d:b4:9b:34:62:3f:2c:11:90:3f:8e:e7:a2:
                    de:5c:97:14:58:d9:48:95:26:27:4c:f5:69:66:a4:
                    d0:07:21:ad:15:91:c6:51:06:0a:f2:5e:0d:94:a2:
                    ce:1a:9b:54:8b:52:7a:8f:23:2b:64:82:be:00:20:
                    80:96:54:ef:6f:2b:3a:ca:90:7f:c7:5b:8e:dc:ca:
                    fc:b4:c8:70:4a:92:72:3e:9d:f7:a9:47:ad:3a:e7:
                    3c:4a:af:91:96:82:2e:17:96:6f:41:dd:eb:c3:12:
                    e2:3a:1b:6d:3e:92:49:fd:ca:8f:5c:fd:70:74:1d:
                    a4:27:82:ed:34:65:bd:aa:ca:23:fd:32:ec:30:d1:
                    b7:55:a9:e4:67:9d:c5:b4:fe:b8:fb:d0:5c:52:e3:
                    ee:8b:6f:e6:e0:26:aa:61:43:7d:98:44:c1:ad:f0:
                    05:cb:0e:a3:00:71:b7:f0:60:3a:1e:05:8d:d3:0f:
                    8b:e5:24:d8:df:cd:62:fa:34:8b:98:93:34:01:22:
                    51:37:0c:80:3d:14:e0:06:a9:06:d6:95:c6:14:ad:
                    7a:13:af:9a:ac:e8:70:32:af:94:09:17:fe:4b:69:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4D:64:33:F7:E9:DA:E5:F4:68:E4:4B:D6:61:EE:83:D2:CF:55:5E
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b3:62:3b:71:2c:83:b8:86:29:ee:66:07:95:b9:63:c0:02:
         6f:7d:d3:d6:21:67:3a:81:cc:21:6a:f4:34:9e:b4:20:81:09:
         0e:86:6d:cb:fd:00:fb:e0:13:64:93:f2:cf:fa:a7:a3:9f:e7:
         1f:12:ad:92:99:22:e6:94:56:93:83:57:f9:dd:86:8a:f0:4b:
         82:ad:7c:0f:54:78:43:86:8c:b1:bb:b7:49:dc:22:0b:f6:4c:
         0a:f8:07:7e:be:96:c3:69:e5:56:e7:b9:5f:df:a8:9c:13:3d:
         ad:38:ff:46:16:f9:7e:3c:75:27:ee:95:c2:1e:46:e6:77:88:
         31:3a:81:25:8e:0a:8d:a1:74:98:d7:23:fd:91:f2:7a:01:c1:
         1b:c2:3e:6d:56:e2:7e:ef:da:71:c0:b8:79:28:9c:c8:3b:48:
         22:da:7f:42:08:83:41:fd:e0:63:97:7a:70:e8:2c:04:0b:d8:
         d9:f7:6a:2d:c1:ba:c6:fd:2c:39:7d:f9:5c:f6:2b:e9:7f:79:
         3e:cd:d2:3f:6d:69:80:ae:c8:a7:b9:1b:55:e9:6d:6f:b4:ba:
         56:f1:76:04:e9:50:6e:ac:5f:4f:f1:8c:81:4d:97:c2:b1:04:
         be:52:57:ee:ac:6e:68:69:41:eb:8e:ea:1f:78:b0:bd:ba:84:
         2d:df:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:09 2025 by rpki-client