Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
File:                     CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft (raw, json)
Hash identifier:          A6LSsiQ7+KAWcLS5MHFEtAEKR3wn7FCjIu1PJ0OHlNs=
Subject key identifier:   D4:85:37:49:60:A8:91:9A:79:03:A0:5D:7E:F2:D6:5D:F0:15:39:6C
Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Certificate issuer:       /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Certificate serial:       2D47C05EAC1F632D9573BA8E8D9B1E184ADFBC6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
Manifest number:          3C
Signing time:             Sat 29 Mar 2025 03:48:21 +0000
Manifest this update:     Sat 29 Mar 2025 03:43:21 +0000
Manifest next update:     Sun 30 Mar 2025 07:24:21 +0000
Files and hashes:         1: 323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa (hash: zGh7UqL2DDmX9WrYgb+qU0kcX1WftTr4K3sjVCejqoQ=)
                          2: 323830343a363465383a3a2f33322d3332203d3e20323639343537.roa (hash: ++wPJ3C/mJVmNLKg2RJpWh9Ctx5LS0gw+l1Ur9v3FUA=)
                          3: 34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (hash: 7V1jBA066u/LKBRq+ElKPQoAas/OYEnUVjfLA8cRxGg=)
                          4: CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl (hash: P0r8MYmFc81xmApTCaCOmSKIrKEw1SwSlKhmYMLHTXo=)
                          5: 34352e3138372e36322e302f32332d3233203d3e20323639343537.roa (hash: 3dH7zfbBPYS/+Br+1uWWIB7cEPShI421LJ4gtuJsqWw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:47:c0:5e:ac:1f:63:2d:95:73:ba:8e:8d:9b:1e:18:4a:df:bc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
        Validity
            Not Before: Mar 29 03:43:21 2025 GMT
            Not After : Mar 30 07:24:21 2025 GMT
        Subject: CN=D485374960A8919A7903A05D7EF2D65DF015396C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:75:aa:21:5f:d4:df:c2:61:fb:e4:1c:44:
                    18:c0:41:75:b1:d2:55:23:a5:e7:8f:a0:55:90:f7:
                    92:f8:4b:2f:a2:f0:43:c5:21:c2:7b:42:70:1b:62:
                    72:b0:17:cf:9e:c0:a0:93:f8:a9:e2:3d:15:36:a7:
                    12:72:58:2d:29:a3:05:01:d4:f8:72:de:a6:ca:60:
                    ed:83:3c:61:35:d6:30:33:4c:63:b8:b1:37:79:bd:
                    25:7e:9d:5e:6b:1f:ad:fb:3f:41:be:a9:6c:cb:fa:
                    23:cd:94:2a:71:e2:3c:89:57:1f:ab:02:9c:94:50:
                    f8:23:1d:f4:26:c9:3f:96:ff:e6:49:37:92:b8:4c:
                    f1:08:c9:ca:d9:5d:67:13:e6:47:f4:08:3b:45:e4:
                    61:f5:ca:5d:36:5a:f0:6b:43:a5:08:35:fe:ad:c8:
                    3c:87:c3:57:c1:63:16:90:68:c6:c1:31:19:d3:5d:
                    98:12:8b:a3:68:ec:cd:d7:b2:2a:d7:44:4b:8d:44:
                    bb:73:e7:d3:db:e1:6d:12:c7:21:cb:a0:ce:e7:7f:
                    92:ba:a0:ae:09:e0:9b:08:16:29:3e:d2:3e:6a:65:
                    ac:f2:36:78:73:4a:07:6e:e2:ee:fa:da:73:3b:ce:
                    35:32:e9:98:f3:0f:eb:c5:9d:95:9c:a3:68:8c:21:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:37:49:60:A8:91:9A:79:03:A0:5D:7E:F2:D6:5D:F0:15:39:6C
            X509v3 Authority Key Identifier:
                keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:eb:1e:8e:de:7b:d9:46:86:95:94:32:dc:9e:d0:5f:b8:4e:
         a0:0a:e6:32:33:48:08:77:f7:ba:f4:d2:d6:92:f1:36:cf:2b:
         b8:6c:ae:a2:cf:4c:e1:54:94:d8:84:17:aa:e7:ff:d5:e0:45:
         a4:82:72:a6:8f:06:0c:32:aa:cc:ec:9c:09:88:09:38:42:4a:
         f8:2a:fe:13:d4:a6:5c:a9:af:43:b7:66:ec:2d:c2:05:5e:cc:
         16:83:c8:47:62:2c:c7:da:a1:64:74:ad:8c:e4:a3:94:ed:3c:
         39:5e:ae:fd:5b:63:08:a1:78:dc:e1:4d:b0:ff:8b:ea:0d:08:
         fd:a5:d9:b5:b9:c7:af:86:5f:5e:eb:c2:8d:50:f1:2b:b1:6b:
         86:ec:69:fc:86:b5:a5:8a:9e:44:0d:bb:94:52:4b:f3:06:82:
         eb:b5:26:28:b5:db:2f:2f:d4:44:65:91:3e:ba:69:b8:e4:ac:
         87:41:46:12:52:f2:26:89:8a:18:34:ae:c5:05:3b:60:0a:ef:
         52:1a:23:a4:c9:03:0f:b4:c1:02:ac:c7:ec:8f:0b:1e:85:86:
         9e:71:9f:8b:d6:01:f3:1e:2f:5c:4b:2c:b2:bc:fb:c9:76:e1:
         7a:ac:e6:e5:3f:a5:8e:8d:3d:a3:1b:47:49:ba:4c:14:27:2b:
         e3:06:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:24 2025 by rpki-client