Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft
File:                     14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft (raw, json)
Hash identifier:          IPAV7UxRSLXVVMKWaML5S5HVh6FRYzVvqfu2NMZncwc=
Subject key identifier:   D3:C8:FD:C4:57:78:D3:3D:F9:3E:E7:93:42:A5:7E:CA:20:4F:BE:AA
Authority key identifier: 14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF
Certificate issuer:       /CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
Certificate serial:       23E64EC731B1048153E2FBF7E9051F1EE5B73B86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft
Manifest number:          16
Signing time:             Sat 29 Mar 2025 04:06:51 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:51 +0000
Manifest next update:     Sun 30 Mar 2025 04:54:51 +0000
Files and hashes:         1: 3138312e3138392e36302e302f32322d3234203d3e20323731333435.roa (hash: 8Zu5Z//M7rudR/s7wz0d6xSIRORpRccODXHuO6XXd8o=)
                          2: 14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl (hash: ZP/jiBt43EwtuUIEkZs8zPlsytQNQRFzpme2nNtbU84=)
                          3: 323830343a376131303a3a2f33322d3438203d3e20323731333435.roa (hash: WkmIJ2q0SlgTYrCtFnO9ZR3QlUjidNDo41OrRg/lJ1c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e6:4e:c7:31:b1:04:81:53:e2:fb:f7:e9:05:1f:1e:e5:b7:3b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14965CE2206A073FBCD58BA22CB5BF760827E0AF
        Validity
            Not Before: Mar 29 04:01:51 2025 GMT
            Not After : Mar 30 04:54:51 2025 GMT
        Subject: CN=D3C8FDC45778D33DF93EE79342A57ECA204FBEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:c3:d6:3f:e8:93:20:a0:71:c3:61:22:8a:
                    b4:7a:fc:8b:e0:ac:0e:99:45:30:b5:36:4b:79:57:
                    b4:76:c4:28:08:ad:d1:f2:61:6b:58:7e:25:07:4a:
                    ec:bf:c7:86:a8:be:21:0d:80:f6:ac:4f:52:61:ef:
                    37:cd:07:74:28:73:3d:b1:b0:0d:a1:5b:f3:10:90:
                    a1:64:de:71:49:44:48:68:b6:9a:86:10:01:d9:59:
                    8c:cb:c4:67:1d:a9:d5:74:cf:26:5b:45:9e:e0:20:
                    97:b4:26:c2:88:02:2d:41:22:0b:d7:74:35:af:09:
                    16:cb:1e:3e:67:71:e1:be:7c:fa:22:f2:69:5a:c0:
                    2d:29:40:be:17:f5:88:3d:eb:53:50:61:af:5a:55:
                    6d:51:8b:1a:a3:c2:d7:4e:0d:0a:b8:fb:3d:4c:fd:
                    5e:6b:78:1f:17:41:8b:e3:99:9f:63:d0:d5:2e:d9:
                    25:ab:f4:c4:ae:95:f9:e8:c3:46:ef:4f:4e:54:5b:
                    48:ff:a5:e7:23:00:81:5c:13:2f:a6:41:a9:c6:68:
                    61:61:cb:32:c7:e7:5a:b3:2a:dd:b6:42:ce:24:1a:
                    32:39:2d:6d:d7:0a:6f:b0:c6:f7:3f:1d:73:69:f0:
                    c6:33:a7:05:7a:e1:e7:a9:db:68:1b:2b:0c:af:de:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C8:FD:C4:57:78:D3:3D:F9:3E:E7:93:42:A5:7E:CA:20:4F:BE:AA
            X509v3 Authority Key Identifier:
                keyid:14:96:5C:E2:20:6A:07:3F:BC:D5:8B:A2:2C:B5:BF:76:08:27:E0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14965CE2206A073FBCD58BA22CB5BF760827E0AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kbqsPQ2uPbPpFdY74WqF45gQCnygbXw7SgS4VXPMYJY/0/14965CE2206A073FBCD58BA22CB5BF760827E0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:56:86:52:11:3d:09:a6:1f:52:29:71:33:76:1b:34:51:2d:
         a8:d5:20:51:25:da:8e:45:00:33:95:e4:57:91:54:29:88:36:
         9c:33:aa:6c:6d:63:18:3b:22:01:46:8e:0b:ef:b2:c5:40:53:
         83:af:d6:1a:1e:63:62:1a:f7:99:58:b5:6f:b5:43:e2:0c:88:
         72:5d:66:d5:f9:86:09:0e:68:af:60:52:af:53:41:ab:7a:03:
         ef:2f:46:70:10:1e:bd:14:f4:af:f2:63:21:4d:52:e5:ec:05:
         33:63:97:ce:f4:bb:ce:ed:60:46:d5:60:08:45:f3:d5:7d:7f:
         da:56:2c:75:a3:5b:51:62:94:65:83:b3:f7:6f:b6:92:ba:d8:
         7b:23:a4:00:14:e1:a3:ff:b9:04:1a:bb:b6:91:12:56:61:77:
         13:2c:7c:4e:df:13:a9:25:5f:33:ca:93:34:4d:04:d6:0b:c4:
         fe:58:dc:f4:2d:9b:52:ba:61:00:39:30:11:56:ac:f2:9c:c4:
         fa:60:33:d9:df:72:a0:df:0f:21:ba:7b:67:ac:0f:de:c6:1e:
         25:8e:88:06:13:2e:a1:7e:eb:05:f9:f5:c2:99:2b:69:6e:ba:
         0b:c3:5f:6b:9f:65:96:77:dc:8f:24:6d:b5:d9:dd:69:db:cb:
         23:f5:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:15 2025 by rpki-client