Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
File:                     B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft (raw, json)
Hash identifier:          CyYjA88F1LyuTnkhJM5ItwvLkmy2+2yNmof3wOkGs8w=
Subject key identifier:   D4:64:28:76:B6:DB:21:B3:C3:CE:DF:EC:77:11:61:EA:40:88:2E:B9
Authority key identifier: B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D
Certificate issuer:       /CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
Certificate serial:       79A28C73D29D2F719D57992BE6857461BB4BD4EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft
Manifest number:          01E2
Signing time:             Fri 28 Mar 2025 08:43:04 +0000
Manifest this update:     Fri 28 Mar 2025 08:38:04 +0000
Manifest next update:     Sat 29 Mar 2025 09:49:04 +0000
Files and hashes:         1: 3136342e3136332e3232332e302f32342d3234203d3e20323637343535.roa (hash: LO1ik9g8nSHTwisi94xQHPbDASrI0utul2j1iJMsGsc=)
                          2: B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl (hash: pf5KpgkhZc9WonKl0hsbpFRsu8d8OdH+4cD8zHB6FNE=)
                          3: 3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa (hash: BeCzGByZUVWSEJT69iKqyQ+jSIx4s3it5bGyR85YnmY=)
                          4: 323830343a343163343a3a2f33342d3334203d3e20323637343535.roa (hash: POHv5XBzj3m2BDvt3cuKFyka+8VXC1pdbq3IYRYoZ4E=)
                          5: 323830343a343163343a3a2f33322d3332203d3e20323637343535.roa (hash: tT6ix3BVhHRTTPvluucqzGa4zGuPNt0OoA8nxrIhJGQ=)
                          6: 3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa (hash: IjOd2pAQPRGCu4BwwJFgJXiZllxyyikkBV5abA2LjvE=)
                          7: 323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa (hash: l4qRjt1ei2sV3BJfevDgBFEdarI7WTlrRKzMRAvr/vI=)
                          8: 3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (hash: plGm1uNGRu8aOTDF8zrNFZ0j75/NKBOWrpI64P4iuL4=)
                          9: 3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa (hash: lRPxGB1Ou8IHvBTmk76QyjBOGoV7plW0d01uzuxjX50=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:8c:73:d2:9d:2f:71:9d:57:99:2b:e6:85:74:61:bb:4b:d4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B93B24DDC8B540595BCE75FEC923721BE80FEA1D
        Validity
            Not Before: Mar 28 08:38:04 2025 GMT
            Not After : Mar 29 09:49:04 2025 GMT
        Subject: CN=D4642876B6DB21B3C3CEDFEC771161EA40882EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:2f:c3:65:b7:c8:3d:dc:44:94:c1:1a:8f:
                    48:18:b8:3e:95:95:b7:16:99:9c:2a:d5:8a:03:e6:
                    c9:9f:c7:ef:e8:1f:2e:9b:33:9d:f3:69:88:35:4f:
                    f5:80:12:de:48:c5:21:76:3a:fd:3c:07:7a:9a:60:
                    aa:95:6c:93:c5:79:73:2d:ae:be:2f:cc:cf:77:33:
                    f2:ac:20:c3:cd:ad:bb:ba:2a:f8:c4:bd:a5:cf:26:
                    77:0d:31:e1:9e:25:a9:fd:ff:24:08:bc:ca:13:f0:
                    68:96:c3:02:ab:4b:92:a7:67:96:d9:af:b4:85:98:
                    fa:bd:ac:dc:1e:cf:2d:a8:31:08:c6:ce:ec:83:84:
                    a1:c1:d4:35:98:55:98:d0:be:4d:b5:68:29:06:1c:
                    ad:53:78:fe:7b:d8:b4:13:b5:6e:e7:fd:52:6c:f4:
                    4a:2d:e0:12:51:6b:61:4a:0b:bc:c9:6e:47:e9:c3:
                    0a:a7:c2:dd:e1:d3:e3:72:21:48:1c:79:50:b3:25:
                    6d:6a:5f:68:92:c9:d4:64:fc:13:a4:5d:1c:c3:b9:
                    d6:c5:4f:5c:5b:e7:9b:54:35:9a:01:51:67:3e:57:
                    d3:29:ed:ac:9a:b9:06:19:4c:a5:cb:df:2b:eb:19:
                    c8:94:f5:27:fa:05:ca:e3:f0:f4:f6:ce:5c:12:be:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:64:28:76:B6:DB:21:B3:C3:CE:DF:EC:77:11:61:EA:40:88:2E:B9
            X509v3 Authority Key Identifier:
                keyid:B9:3B:24:DD:C8:B5:40:59:5B:CE:75:FE:C9:23:72:1B:E8:0F:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/1/B93B24DDC8B540595BCE75FEC923721BE80FEA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:94:6b:d2:1b:2a:0d:50:7e:f0:34:ac:74:05:c9:47:d9:
         5a:97:f1:4a:65:66:4e:66:da:5a:65:f0:4e:f4:9f:66:52:a3:
         27:6f:6b:c5:a2:00:92:f2:60:9d:38:eb:fc:cd:64:89:a2:36:
         54:cf:54:b5:46:cd:1b:51:08:f5:16:56:95:f7:a1:9a:2b:c3:
         df:d8:d0:fd:e6:3c:37:1d:02:0f:7b:1e:6f:19:82:b0:85:b7:
         35:83:c9:49:df:9d:33:a4:63:e4:5e:bf:c5:99:f1:8c:b8:87:
         d0:8e:55:a9:5c:ed:77:84:06:a8:3a:37:6d:4f:20:d3:98:08:
         00:e5:dd:1d:2c:8b:05:c1:ae:1d:d7:b5:b9:7b:ff:43:3e:23:
         fa:aa:1a:3c:04:d1:c7:54:bb:c3:40:e1:47:4a:ef:cb:5e:c1:
         29:2c:25:e9:63:97:03:9a:9a:cf:92:49:a3:17:a8:60:ad:82:
         06:68:fe:69:35:b6:18:15:cc:81:c6:82:19:ca:78:e8:c5:c2:
         53:37:4d:bf:42:a4:cb:1e:90:a6:24:f4:6a:41:b9:ce:73:e5:
         0a:a0:64:e7:1f:5b:27:b2:15:0f:77:96:9f:ee:5c:2b:18:02:
         ac:d9:c9:5a:e2:e6:70:d7:0c:cd:7c:cf:cc:02:72:13:72:c3:
         ba:5d:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:19 2025 by rpki-client