Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
File:                     A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json)
Hash identifier:          XsCoxsC+wMs8TRryo9I2vo/blvEDxy+GN1M82bei1rI=
Subject key identifier:   A6:67:C4:D1:16:B9:5B:03:73:0E:5C:36:F7:29:00:22:1E:B5:50:8A
Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD
Certificate issuer:       /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
Certificate serial:       7A47433B12023AB2EA48AAAF236B2F83A2349E8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft
Manifest number:          01DF
Signing time:             Sat 29 Mar 2025 04:28:38 +0000
Manifest this update:     Sat 29 Mar 2025 04:23:38 +0000
Manifest next update:     Sun 30 Mar 2025 04:54:38 +0000
Files and hashes:         1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=)
                          2: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: 4I79cptwUkRBEandMiqM0hdNAWZzWB+yL9NJy9cfopA=)
                          3: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:47:43:3b:12:02:3a:b2:ea:48:aa:af:23:6b:2f:83:a2:34:9e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD
        Validity
            Not Before: Mar 29 04:23:38 2025 GMT
            Not After : Mar 30 04:54:38 2025 GMT
        Subject: CN=A667C4D116B95B03730E5C36F72900221EB5508A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:0b:39:ba:27:f7:9e:4e:ce:87:de:4a:15:
                    d3:38:dc:72:cf:2f:75:26:1b:39:44:16:c9:f6:56:
                    60:3d:8f:61:85:e8:0c:20:52:e5:36:8e:09:63:78:
                    c3:75:69:0f:05:cd:9c:26:f0:63:e6:0b:7d:38:de:
                    0d:3d:ec:6a:3a:30:3f:a6:44:ab:e4:6f:fa:9a:a5:
                    5a:19:15:28:f2:37:0e:b4:12:56:cc:0c:07:2d:b3:
                    e1:16:54:cc:b3:cc:c3:33:73:d2:55:f4:e8:46:5b:
                    94:08:de:d4:6c:a5:d6:bc:f6:e9:f4:0e:19:3d:f8:
                    cd:cf:58:ec:f7:df:97:30:b5:07:30:2d:1a:ed:35:
                    79:85:98:19:37:23:ef:aa:50:0b:e2:fd:1d:8c:0b:
                    92:fa:ba:39:06:aa:6e:99:c5:d7:be:c1:e1:83:7f:
                    fb:14:ad:77:78:cf:18:9b:26:3c:fa:b1:30:9e:d5:
                    34:3a:61:01:c8:0b:a4:2a:f8:51:99:26:1a:af:3b:
                    18:e9:f3:f6:97:11:72:95:7a:f1:5b:9f:a5:01:fc:
                    cd:36:9e:e9:c9:fc:14:c3:f3:75:d0:91:f4:db:53:
                    00:70:9e:31:52:c6:ad:8a:69:60:2b:ac:42:84:a2:
                    a0:09:a5:37:12:84:a1:8d:51:fa:2d:8e:e5:25:a0:
                    43:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:C4:D1:16:B9:5B:03:73:0E:5C:36:F7:29:00:22:1E:B5:50:8A
            X509v3 Authority Key Identifier:
                keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:6d:7a:d8:07:d7:7e:cc:79:1d:ed:10:a7:8d:2b:b5:83:
         75:c8:76:0a:9a:96:84:36:68:af:3f:00:62:df:6e:17:d5:60:
         93:99:4e:a2:89:80:52:6a:71:fb:6a:06:46:e3:61:df:32:05:
         68:fb:98:c5:0a:ab:18:e7:27:59:74:d0:06:de:a2:75:9b:7e:
         e0:75:04:d2:19:fd:b9:eb:c7:09:47:0e:09:3b:7f:cb:e0:d0:
         b6:15:82:e3:6a:b8:f4:c0:66:ed:81:e8:60:87:ab:43:2e:d6:
         b0:4c:b0:39:3a:a0:cd:af:db:d1:1c:9a:16:0c:b0:7b:37:af:
         ca:0a:48:c7:22:7a:19:6a:66:76:b5:ed:2d:0f:9f:a0:fe:f5:
         2d:85:aa:05:15:82:83:06:d5:07:c0:08:e2:74:86:ef:4d:2d:
         f5:98:20:6f:c0:48:8d:96:ff:56:97:14:72:82:d8:c4:76:78:
         2d:67:a0:02:22:25:13:1e:70:3a:4c:24:d3:ea:5d:eb:24:34:
         36:da:ca:8a:8c:c1:0f:b8:ba:ac:f5:2b:1e:e9:22:7d:ef:90:
         bb:c3:43:a5:af:84:2e:69:2b:5e:dd:f7:93:a8:9a:94:6a:c5:
         71:1f:44:bd:1a:f7:50:89:2f:52:13:c2:d3:13:da:cd:fc:20:
         92:b0:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:51 2025 by rpki-client