Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.mft
File:                     B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.mft (raw, json)
Hash identifier:          Sc7vKu4hYBC/wtLO021j4wCGIDrJgAmq0sHaeSNQy6Q=
Subject key identifier:   39:11:D8:1A:8D:A0:F6:51:1B:31:ED:46:5F:C6:98:C6:70:F3:8F:47
Authority key identifier: B9:B6:9C:97:E4:DE:0D:B9:7A:35:90:F4:48:77:D8:8C:EA:1D:F4:FC
Certificate issuer:       /CN=B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC
Certificate serial:       088E31DFD171E551885B4A06E8587187002EDC88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.mft
Manifest number:          0144
Signing time:             Fri 28 Mar 2025 18:42:03 +0000
Manifest this update:     Fri 28 Mar 2025 18:37:03 +0000
Manifest next update:     Sat 29 Mar 2025 22:19:03 +0000
Files and hashes:         1: 323830343a343536343a3a2f33322d3334203d3e20323636393233.roa (hash: Ul5Kfzy4yxVj77P8tu+e15pEkLh+0bxzx4h9I7Ua5fg=)
                          2: 34352e3232342e3137322e302f32322d3234203d3e20323636393233.roa (hash: J+h7lZ/BAkVd4m+Uxmy6aIbeyusk06t7pbEZ4Z/C3oE=)
                          3: B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.crl (hash: 9fm2IKGXu05+FteVzPbBdr7HEwmHBZbH1VxZ1dcHe70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:31:df:d1:71:e5:51:88:5b:4a:06:e8:58:71:87:00:2e:dc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC
        Validity
            Not Before: Mar 28 18:37:03 2025 GMT
            Not After : Mar 29 22:19:03 2025 GMT
        Subject: CN=3911D81A8DA0F6511B31ED465FC698C670F38F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:59:07:ad:b3:55:31:25:ac:27:f1:27:73:
                    d1:2d:58:2f:e6:76:5d:4a:b1:6f:ee:b2:8b:d8:9b:
                    21:d8:ff:44:c5:71:ea:4e:00:12:f3:fa:9f:98:df:
                    5f:fd:a4:4d:95:7d:4c:8a:f3:36:cc:1b:e7:79:5b:
                    73:c9:aa:8a:06:9f:e0:ab:02:31:1c:dc:23:b9:78:
                    5c:c4:3a:30:e0:f5:54:6e:a3:28:52:b2:ac:3c:84:
                    4c:26:76:90:f5:ec:7d:c3:91:63:aa:64:d5:89:d9:
                    3d:e3:e9:74:24:53:9c:9b:41:67:40:11:9c:ee:23:
                    25:ff:2c:b5:d5:9c:70:77:72:1e:fc:1c:15:0b:0f:
                    97:be:26:a1:f3:00:d6:d7:1f:d7:90:a8:ea:5e:53:
                    9b:bf:4f:5e:ef:df:80:7e:b1:03:e4:0c:ff:33:fd:
                    bc:0a:e2:85:8b:8f:fd:cc:13:23:10:ba:f3:e5:76:
                    5c:f9:e7:d6:0a:04:4f:42:07:d5:97:73:f7:ba:c2:
                    58:24:cd:d5:c2:74:c7:50:a4:3e:be:87:61:f3:a2:
                    2e:87:69:00:1d:f8:10:19:39:ab:e8:5b:82:55:cd:
                    57:f9:32:4d:a5:0f:bb:e2:61:b5:1e:de:24:09:a8:
                    ba:9c:d1:1a:9d:5c:a5:28:d9:c7:7e:34:fa:6e:ed:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:D8:1A:8D:A0:F6:51:1B:31:ED:46:5F:C6:98:C6:70:F3:8F:47
            X509v3 Authority Key Identifier:
                keyid:B9:B6:9C:97:E4:DE:0D:B9:7A:35:90:F4:48:77:D8:8C:EA:1D:F4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:62:b2:79:e9:36:4b:85:23:16:90:04:a9:17:00:aa:53:e2:
         94:a2:39:79:27:f6:bc:d2:da:e9:ac:b8:f6:75:f5:29:93:57:
         fa:c4:ec:99:a8:19:ca:ea:8a:eb:d5:b2:de:4a:ff:29:f2:e0:
         3f:d9:26:ca:8a:ed:52:7f:d4:09:18:93:76:a8:8e:ca:db:0a:
         19:79:c3:1b:41:7c:45:8c:50:a8:45:9d:f3:00:a1:c7:5f:46:
         8c:a4:f0:1f:b5:20:78:dd:b4:7e:f2:1a:4d:36:8a:71:86:93:
         40:d2:88:6e:0a:84:71:2a:a8:75:dd:1f:65:ef:d6:57:8d:90:
         78:9c:30:3f:1a:76:7b:73:a4:e1:2e:da:ec:21:87:3b:cf:a5:
         c4:3a:0d:9f:67:6e:cc:ad:f3:a1:fa:92:83:cf:3a:46:fc:11:
         69:25:09:d7:2d:04:c0:ec:06:ad:2c:48:1d:f2:af:49:45:fd:
         bb:e9:55:be:5a:a4:2f:30:a6:82:4f:23:c2:07:d6:aa:1a:9b:
         ab:34:96:3d:be:c5:58:6a:be:b0:17:4d:32:16:1c:10:c6:b3:
         63:6c:47:b8:9e:69:22:9b:3e:af:9e:8c:ef:35:11:9b:30:2b:
         1e:cb:4d:24:72:95:f5:ef:33:10:66:69:57:ea:e2:2a:93:45:
         63:fa:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:25:37 2025 by rpki-client