Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
File:                     0F0B8A867772B2436759E0F012765DC77C12ACB5.mft (raw, json)
Hash identifier:          ghWCgKKdwd/0cyjtpWHTk6Wb0i3lo2fdUua08qGLb9M=
Subject key identifier:   B8:4B:27:1E:A9:3A:4C:EC:A5:AD:57:F6:9B:73:3A:82:9E:C1:96:F9
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       5622240903647E6CED65588D80F55854EC3498D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
Manifest number:          01D4
Signing time:             Sat 29 Mar 2025 06:17:02 +0000
Manifest this update:     Sat 29 Mar 2025 06:12:02 +0000
Manifest next update:     Sun 30 Mar 2025 07:04:02 +0000
Files and hashes:         1: 323830343a316533343a3a2f33322d3438203d3e20323634343134.roa (hash: CXVj4L42dSCgbE9+Y3+9SAPnKs8nCfC0yQsWGTQwkZc=)
                          2: 3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa (hash: QzBkC9QqDDkbfrQkirDujNOcCLCs4ea/uM47Gzrr/Fw=)
                          3: 0F0B8A867772B2436759E0F012765DC77C12ACB5.crl (hash: PHUq7sJl1+xxdIvAI+5ElZc/ksUJXbHnmNlO/8Ta/ls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:22:24:09:03:64:7e:6c:ed:65:58:8d:80:f5:58:54:ec:34:98:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: Mar 29 06:12:02 2025 GMT
            Not After : Mar 30 07:04:02 2025 GMT
        Subject: CN=B84B271EA93A4CECA5AD57F69B733A829EC196F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8d:28:bc:f3:b0:18:ff:83:09:42:15:7e:dc:
                    18:9c:55:1e:dc:7e:a7:3a:e4:61:c8:58:f0:3d:75:
                    8b:6c:68:53:6a:65:85:fa:9b:16:f2:38:ff:cf:18:
                    cb:fb:f2:03:f6:9d:a1:d3:e3:49:b7:51:9d:5b:2c:
                    c9:38:ec:ea:e5:5b:4a:67:d7:96:55:ab:5b:fd:d7:
                    04:9b:33:03:ed:80:83:89:9d:dc:39:06:90:10:84:
                    65:fc:8c:b8:a4:3a:b3:b9:f4:a5:7b:80:cc:ea:25:
                    6b:02:5a:ad:97:0e:92:b3:cb:48:71:3e:3d:e6:d0:
                    79:0c:e0:33:0a:17:08:4d:1f:f8:2d:22:70:95:67:
                    63:0a:e2:ee:9f:8a:a0:f0:17:a6:b5:89:ad:4b:50:
                    35:ec:32:be:99:bf:ef:4a:29:6a:c2:e4:ed:95:8a:
                    ff:55:bb:08:4a:55:c0:4d:b7:6d:29:78:b6:30:f3:
                    ef:8f:5e:69:3a:b1:f6:2e:d8:c3:58:a1:bd:88:eb:
                    f6:f4:58:5f:12:6b:7f:ab:c8:8f:33:7e:7b:c4:78:
                    a8:5e:ec:a0:92:e7:52:80:d7:66:89:fb:9e:ff:a5:
                    16:0b:1a:41:18:cc:23:b4:74:59:b4:e4:6d:06:79:
                    55:d4:3a:78:cb:7d:be:66:84:0e:77:e6:93:f0:21:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:27:1E:A9:3A:4C:EC:A5:AD:57:F6:9B:73:3A:82:9E:C1:96:F9
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:75:e9:29:ae:ee:77:a5:a3:4d:e8:a8:eb:5c:a0:91:d1:e3:
         bc:92:eb:66:73:0d:cf:4d:3e:77:05:dd:d2:f6:9a:60:35:0d:
         05:9e:d6:f0:78:62:20:21:b6:78:f8:6b:cd:d9:76:0e:04:17:
         65:6f:b3:a2:60:29:2d:4d:37:35:78:2b:17:d3:9c:f1:81:ff:
         eb:9b:9c:9e:7a:96:a1:0e:63:ad:e4:f4:20:e5:b0:4a:d6:47:
         47:ae:53:e3:45:bc:f2:9b:fa:5f:cb:e5:4e:49:26:bb:7c:d2:
         21:71:0b:3d:f5:3b:c2:fb:d8:03:79:9a:51:09:fc:2f:b2:69:
         d6:88:06:d1:8d:e3:c6:43:7a:89:1c:8a:a7:af:67:9c:e5:cd:
         e4:80:b8:0f:d5:0c:03:78:f9:d3:d3:08:19:0a:be:e1:4c:57:
         66:42:4c:94:54:5e:a5:b6:b9:8c:8e:63:94:27:67:f3:11:ba:
         bf:ae:c3:36:c0:8e:ff:0c:fe:62:1d:eb:2e:54:af:29:4c:2b:
         0b:cb:d7:de:cf:12:3d:b4:1c:d1:36:98:63:2e:4c:7b:82:ea:
         5c:13:8b:52:b8:9d:96:2a:76:45:d8:96:41:99:0a:86:14:d4:
         87:7b:03:ce:2c:c4:17:2c:22:11:15:1d:ec:ed:34:9b:cf:4b:
         8f:de:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:17 2025 by rpki-client