Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
File:                     3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft (raw, json)
Hash identifier:          qWnGbaEgPbwrlwmns/6CqV2EKPthTcIZdp+97I+thJs=
Subject key identifier:   B2:04:19:38:06:20:2C:37:B4:2B:94:F3:8E:51:D9:AD:1D:B1:95:E1
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Certificate issuer:       /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial:       7F385BDF390FA15E1D18A0098604571B6006C178
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
Manifest number:          16
Signing time:             Fri 28 Mar 2025 16:30:54 +0000
Manifest this update:     Fri 28 Mar 2025 16:25:54 +0000
Manifest next update:     Sat 29 Mar 2025 19:34:54 +0000
Files and hashes:         1: 323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (hash: kxdMBUt5jpp/DhkqO9p5Eucys82Y+hZDMce1OQ/LR1Y=)
                          2: 323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (hash: cTXjoWSfv/mYljyRDu+kfqYiECzj1oZALrx4yxpYaA8=)
                          3: 3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (hash: Aj3U16+Rd2zAeI2BhmHJKoxqJLMes1zRvBI21FM9tL8=)
                          4: 323830343a376334303a3130303a3a2f34302d3430203d3e20323731343834.roa (hash: jOkZkNvbEv8eWb+e9TXqmtND57CKQOnJY5Jl5it39/M=)
                          5: 323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa (hash: EBQvGiWf4eXBbMgvN+X3Q6vosdWQTHhJgbaV9HvFUI4=)
                          6: 323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (hash: cyMTuiLBnYMIlubxvHXL7Vr8yEnBsmrqucpDLPPN238=)
                          7: 3138312e3233332e31362e302f32332d3233203d3e20323731343834.roa (hash: jxcT7UQCB25cOhI7bfbqMPMJ8mZBKfS+t1689GTxsI0=)
                          8: 3138312e3233332e31382e302f32332d3233203d3e20323731343834.roa (hash: yxMic9K3C5dEfbizwmsYeriIVa7OpMEITqz4cvpWt68=)
                          9: 323830343a376334303a3330303a3a2f34302d3430203d3e20323731343834.roa (hash: M2OHNyHYafPHAeIhRu2d+ofzCgbs7HAWooObGlHNvis=)
                          10: 3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl (hash: hcDkDMa550f14irirGpVXx6wqcgIbzZFDLAM5WWDf/Y=)
                          11: 323830343a376334303a3230303a3a2f34302d3430203d3e20323731343834.roa (hash: aQuzLEeWFxfp36SqhKnPWN0pPXjsiYDj1Ey8BwUF9RA=)
                          12: 3138312e3233332e31392e302f32342d3234203d3e20323731343834.roa (hash: hVjcZbi623bMo0BdTaxfx7PE+EgC1vYkTQqhvJwGKk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:38:5b:df:39:0f:a1:5e:1d:18:a0:09:86:04:57:1b:60:06:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
        Validity
            Not Before: Mar 28 16:25:54 2025 GMT
            Not After : Mar 29 19:34:54 2025 GMT
        Subject: CN=B204193806202C37B42B94F38E51D9AD1DB195E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:59:5d:bf:37:2b:78:b7:41:3a:d6:c5:02:
                    63:db:69:7e:a1:a7:81:d5:2a:5f:63:6b:50:69:a4:
                    5d:29:00:0c:7f:66:74:12:3e:3a:67:b9:e6:ea:fb:
                    55:e5:c7:5a:38:b8:fb:5f:4d:c8:57:32:88:7e:50:
                    ca:23:12:46:03:c7:d2:47:d0:81:43:b0:62:ce:c5:
                    da:2c:84:d1:0d:fb:05:57:c4:d7:7e:2f:41:75:a1:
                    b7:e4:d3:ae:4f:b0:b8:93:3b:45:0e:71:fd:b3:69:
                    9b:a3:31:8b:12:31:93:e6:b2:d8:3f:ba:87:2a:78:
                    69:ec:21:15:89:b9:25:26:b7:9e:a1:ce:2d:ed:d3:
                    03:31:fa:8d:f1:25:49:db:59:78:86:93:7f:72:c1:
                    a6:c2:a8:bc:00:15:07:d3:a4:76:f0:ce:6f:67:1a:
                    95:6a:07:0d:7f:ac:b2:64:0b:70:8a:0f:a8:00:0b:
                    1b:73:bb:d1:aa:8d:f7:74:2a:37:5a:04:ee:d9:4f:
                    c9:2f:d2:ca:1b:12:71:15:f5:7b:86:0d:58:3d:ae:
                    ea:c9:8a:72:3e:12:8c:a4:51:2a:60:ce:cf:b8:eb:
                    17:33:17:c6:46:86:24:6c:f3:4c:00:4b:0c:66:db:
                    dc:5d:93:06:d9:09:71:2f:96:e9:b3:a4:78:8e:24:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:04:19:38:06:20:2C:37:B4:2B:94:F3:8E:51:D9:AD:1D:B1:95:E1
            X509v3 Authority Key Identifier:
                keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:19:9c:ca:38:11:27:96:d2:93:f8:48:c6:cd:d8:56:ee:8f:
         71:a3:07:0c:fa:23:fe:37:e9:3a:c8:2d:7c:fd:d0:5e:8f:43:
         71:bc:a8:0f:bf:10:0a:80:7b:42:b7:1f:9d:12:08:47:6b:2c:
         f7:8a:0e:68:eb:38:ad:92:d7:63:8d:27:03:a7:72:27:75:70:
         96:9d:82:06:4f:19:a2:75:71:a2:64:fb:45:39:1d:11:65:87:
         14:94:80:6a:ff:a1:65:1f:39:59:89:d3:eb:aa:7e:64:9e:05:
         22:5d:6d:fd:9e:e1:7a:1a:dd:40:f4:10:78:56:f9:14:22:f2:
         d7:5a:e8:f6:9b:4b:25:f5:f6:b5:97:4d:2e:33:0c:ba:73:a3:
         e7:f5:9f:d9:6b:b3:e8:8b:c1:27:b4:e6:bf:f8:c9:b1:a6:a3:
         26:be:8a:1b:8f:74:5d:10:8b:c3:7c:6a:a7:43:f3:f5:8f:6c:
         04:23:cb:ed:53:8b:4e:f2:64:86:33:f2:48:67:46:b1:ae:74:
         59:65:68:89:96:09:20:32:50:ea:86:d2:e6:85:39:e2:5d:35:
         43:22:63:ff:d3:e2:f7:21:ba:8d:c4:2d:3d:62:2d:07:95:33:
         4d:67:ec:c2:42:9f:ed:ae:22:cc:d5:ae:84:1b:c0:4e:9b:4a:
         5d:16:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:35:41 2025 by rpki-client