Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.mft
File:                     B1CD847C4F6557FAC96B06B7FB61C99A42396F20.mft (raw, json)
Hash identifier:          x4jYZ8VIfr+qwMu1d7leyBrvfDdEzWnl4W0ajGO+Eu4=
Subject key identifier:   4F:25:4D:20:D4:62:2A:FD:30:38:81:65:A9:66:F2:B6:7A:0E:CA:9E
Authority key identifier: B1:CD:84:7C:4F:65:57:FA:C9:6B:06:B7:FB:61:C9:9A:42:39:6F:20
Certificate issuer:       /CN=B1CD847C4F6557FAC96B06B7FB61C99A42396F20
Certificate serial:       0BD737D735B14406A047F1F8D3A5828AA1797252
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.mft
Manifest number:          72
Signing time:             Sun 11 Jun 2023 10:04:42 +0000
Manifest this update:     Sun 11 Jun 2023 09:59:42 +0000
Manifest next update:     Mon 12 Jun 2023 11:32:42 +0000
Files and hashes:         1: 34352e372e3131382e302f32332d3233203d3e20323636353834.roa (hash: 9keLidnOLgV/cCElV/UPzaMM9RAhefx/fLjnr5d3ClA=)
                          2: 323830343a336534343a3a2f33322d3332203d3e20323636353834.roa (hash: Tlm1hLVvh8KW9SLqSo0l4QaCXCIEs6dNwYurGETULQM=)
                          3: B1CD847C4F6557FAC96B06B7FB61C99A42396F20.crl (hash: J4uTSgiZFWx05RUB/J7GaRAjEv/4ksFY8TTMpwKZIQI=)
                          4: 323830343a336534343a313030303a3a2f33362d3336203d3e20323636353834.roa (hash: ehdvnVI/d0JR2BjlH5QBoixitvs+3ZwMRQ9uG4IRLac=)
                          5: 34352e372e3131392e302f32342d3234203d3e20323636353834.roa (hash: 1JVdwB0DjbbwMs+MkyG0VpzvKu+yuIWxoTe4nhZ8uZ8=)
                          6: 34352e372e3131362e302f32342d3234203d3e20323636353834.roa (hash: kH1KloIihr7OyV9mj3Yzu8NyFVRATdXNFS8FWPEWZuY=)
                          7: 34352e372e3131382e302f32342d3234203d3e20323636353834.roa (hash: j1OIQg3aEwpU2oGpuVq8FpRHYb43h3KgEd4cDYljaD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d7:37:d7:35:b1:44:06:a0:47:f1:f8:d3:a5:82:8a:a1:79:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1CD847C4F6557FAC96B06B7FB61C99A42396F20
        Validity
            Not Before: Jun 11 09:59:42 2023 GMT
            Not After : Jun 12 11:32:42 2023 GMT
        Subject: CN=4F254D20D4622AFD30388165A966F2B67A0ECA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:cb:9e:77:cc:c1:4f:64:87:2a:d8:96:c5:
                    c6:82:3c:0b:d3:97:37:bf:36:8a:c7:df:95:c1:57:
                    86:e1:68:40:51:00:eb:e1:e8:dd:7d:23:de:98:2f:
                    33:88:4d:08:db:cd:22:c8:c6:23:db:ac:78:39:39:
                    65:02:96:03:aa:b9:9a:20:21:47:8a:cb:2b:f6:e7:
                    ac:d3:31:de:cb:59:41:28:bd:ce:d7:08:1a:cf:f2:
                    ff:b8:a1:18:cc:12:27:32:51:59:6a:a4:70:6e:08:
                    6f:4e:cb:f1:67:97:fe:e4:ac:52:7e:b0:e6:8a:eb:
                    90:0b:f4:61:82:b5:fb:15:7f:df:eb:50:23:4a:5d:
                    50:87:66:13:4b:0b:b7:55:0d:37:25:91:dd:65:44:
                    ab:51:c4:38:b3:57:73:cc:ff:2f:07:b2:ac:67:cc:
                    a8:03:5e:01:bc:bc:76:37:89:0d:ba:f7:e9:de:71:
                    08:df:b1:34:1a:43:c6:38:8b:56:8d:b0:ee:e5:cc:
                    2a:ba:d8:d9:c4:64:4e:aa:7e:77:98:c6:0e:3f:ba:
                    81:25:c6:2f:aa:02:da:57:47:5b:7f:be:12:16:af:
                    b8:e6:3a:19:2d:0c:79:87:7a:7a:65:1e:40:c0:61:
                    de:6b:58:32:eb:41:eb:8d:90:29:eb:b0:75:78:d8:
                    55:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:25:4D:20:D4:62:2A:FD:30:38:81:65:A9:66:F2:B6:7A:0E:CA:9E
            X509v3 Authority Key Identifier:
                keyid:B1:CD:84:7C:4F:65:57:FA:C9:6B:06:B7:FB:61:C9:9A:42:39:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/0/B1CD847C4F6557FAC96B06B7FB61C99A42396F20.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f9:b9:3d:88:99:b8:b7:26:ca:f7:23:b3:a5:59:ab:fc:f5:
         cb:8b:25:37:44:72:de:d7:3c:bf:2e:da:fa:3a:5c:ff:b0:0a:
         fb:f3:2d:c2:e7:cf:b9:8b:ff:da:a5:37:ba:35:c7:6b:c3:1c:
         31:66:22:03:60:8b:c6:b9:bc:87:5d:b8:1b:02:2c:2f:a1:ad:
         b5:d0:2a:cd:5e:b7:9a:ad:65:9c:2e:56:7e:a2:a3:12:59:d6:
         e5:b0:69:f7:32:7c:d7:d6:50:b9:0a:c9:ff:e1:ca:3a:ad:d0:
         d5:da:af:65:18:ed:74:98:e1:fd:46:ec:7d:d0:d7:d5:93:85:
         a4:61:d2:8e:3e:32:ba:cd:1b:15:5e:07:be:05:e8:2e:ca:4d:
         f0:08:6e:e2:d9:0b:91:97:80:85:b6:48:29:16:04:73:0b:a9:
         43:61:d2:f7:1c:ee:f6:33:76:1f:13:66:8c:65:cd:c4:dc:d7:
         5b:15:d7:48:49:00:66:5f:e5:ef:d8:c7:58:bf:cf:d7:9c:53:
         0b:4e:8e:6f:99:5d:e4:d8:18:dd:c0:0e:5b:3c:74:7d:4a:b0:
         20:2c:bc:07:a4:95:8a:88:7b:05:f3:b1:74:2c:f2:2f:b2:08:
         ed:45:ed:fd:a6:68:de:74:5e:a2:47:52:4f:fe:5d:70:c1:ab:
         44:90:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:14:11 2025 by rpki-client