Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
File:                     3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json)
Hash identifier:          Xm2bSNnFyC/apW5HzEsn4qPtw8mBtqYX6QmfiPlHH8s=
Subject key identifier:   FF:6F:A5:AC:0E:12:FD:77:ED:FD:7D:A1:F0:8C:D7:D4:42:31:F4:F1
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Certificate issuer:       /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial:       1A8D0B9CF3CEE80EE4C4FE62102AC7C99A79F473
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
Manifest number:          6F
Signing time:             Fri 28 Mar 2025 20:23:45 +0000
Manifest this update:     Fri 28 Mar 2025 20:18:45 +0000
Manifest next update:     Sat 29 Mar 2025 21:48:45 +0000
Files and hashes:         1: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: adeQrk3GHwoD07zzNg8h8DoI+T/hg8cMNdSF33h18Mw=)
                          2: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: tcW6SRpdN93pL4L2bgn+1hF8MeInQ1smdDL5OY/WeZc=)
                          3: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: mHONVwFSZafTrb2bs4XTqeqR/1IxRdzcYgif/PNK+5w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:0b:9c:f3:ce:e8:0e:e4:c4:fe:62:10:2a:c7:c9:9a:79:f4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
        Validity
            Not Before: Mar 28 20:18:45 2025 GMT
            Not After : Mar 29 21:48:45 2025 GMT
        Subject: CN=FF6FA5AC0E12FD77EDFD7DA1F08CD7D44231F4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:09:93:02:88:fc:e8:32:73:4b:a2:7c:9d:
                    45:d0:e9:da:1e:30:10:34:92:7d:84:69:ff:9b:83:
                    f7:15:f9:37:29:e7:ad:ad:ca:6f:b9:a8:83:cc:2a:
                    8c:a6:90:a8:6d:1f:28:f5:a1:58:64:c0:32:12:25:
                    bc:1f:4f:73:48:ee:e9:c7:9f:7b:f3:23:d2:d7:51:
                    d5:5a:f6:a6:03:26:9d:1a:63:3f:cf:15:4f:40:15:
                    88:ea:89:4b:94:02:dc:f2:20:06:a3:18:ea:5c:fa:
                    30:61:7c:52:ad:b4:85:42:2b:60:79:c2:f0:88:06:
                    42:cf:25:6e:7c:5e:e2:55:62:f7:8e:e6:bd:c4:e1:
                    0a:a1:96:ab:2e:31:e1:da:4a:72:aa:62:c9:a1:02:
                    9e:ae:cc:ba:a1:20:30:8a:21:c7:7b:b3:78:bf:71:
                    d5:e3:53:cd:af:9c:c9:5e:b0:46:39:bc:38:bd:8e:
                    8a:dd:d3:04:01:1e:25:80:00:31:ad:a5:6e:ee:f0:
                    63:ff:a7:34:8d:19:f3:f2:6d:e0:03:95:6a:c9:6b:
                    61:95:4f:9f:2d:2d:4d:fc:5f:a2:c9:ca:ef:a2:50:
                    48:2f:22:4b:bc:b1:08:49:ef:0b:c3:f5:22:91:80:
                    ad:b2:c5:d0:b2:55:0e:da:44:a9:3d:b3:a6:88:cc:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:A5:AC:0E:12:FD:77:ED:FD:7D:A1:F0:8C:D7:D4:42:31:F4:F1
            X509v3 Authority Key Identifier:
                keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3c:02:90:30:5a:68:76:6e:61:e9:98:a1:b6:10:8b:58:75:
         3a:15:be:46:14:db:c7:a8:29:b5:a6:6a:2e:2c:21:d6:d4:c2:
         58:2f:5f:bb:3f:98:a0:5f:f0:77:69:03:87:7b:34:4d:cc:65:
         a5:d1:f7:d9:59:59:f0:67:74:9a:cb:b4:a7:d0:02:df:c9:11:
         5f:ac:7b:79:0e:dc:48:a5:36:06:15:21:ae:5a:ed:50:97:9e:
         72:e8:8e:19:91:6b:05:c6:f0:dc:55:51:b1:63:4f:9e:af:be:
         0f:53:ba:35:74:ec:74:e6:18:ea:ac:6c:d0:55:26:1d:f3:53:
         ea:db:dc:e5:c8:8c:54:fd:0b:a4:c7:26:54:bc:fa:5f:55:28:
         15:75:aa:d9:81:c4:1f:b7:99:45:7d:d3:95:29:cc:c1:59:00:
         b8:1b:40:ec:d0:39:52:90:91:2c:74:5d:a3:c5:b0:79:6e:f7:
         e3:1d:e2:64:04:d8:b1:a9:42:a4:9f:8d:1c:a1:0e:ac:18:5d:
         67:45:62:dd:80:1d:ad:85:d6:d5:0a:9a:60:3b:06:d4:9b:17:
         f7:e6:3f:03:4a:25:51:4c:c5:d4:0b:28:6b:a6:fb:1c:ee:af:
         03:dd:55:85:29:74:a8:e3:ce:49:3c:48:ab:74:45:87:6b:60:
         40:4d:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:37 2025 by rpki-client